This article demystifies Cross-Site Request Forgery (CSRF)—attacks that coerce authenticated users into unintended actions—and outlines key defenses: anti-CSRF tokens, double-submit cookies, same-origin checks, and custom headers, plus best practices like HTTPS, secure sessions, and input validation; it advocates defense-in-depth and illustrates with an online banking fund transfer example.
Comprehensive guide to token-based auth with JSON Web Tokens for full-stack apps: explains JWT structure and flow (register, login, issue, store, include, verify), demonstrates Node.js/Express implementation, highlights benefits (statelessness, scalability, flexibility), outlines security best practices (HTTPS, secure key storage/rotation, blacklisting, refresh), and illustrates with an e-learning platform use case.
Fullstack.ist offers meaningful insight into a broad range of topics.