Securing Your Rest API Application With Typescript
Application Security
4 courses
51 practices
7 hours
Learning Security Basics with TypeScript is a hands-on course path for aspiring Application Security Engineers. You’ll learn to identify, exploit, and defend against common web security threats using TypeScript and modern web frameworks.
Learn to secure your TypeScript REST API by implementing rate limiting, request throttling, CORS configuration, and robust refresh token management to prevent abuse and enhance application security.
Enabling & Customizing CORS in Your TypeScript REST API
4 lessons
Course 4
Preventing Refresh Token Abuse in Your TypeScript REST API
4 lessons
Turn screen time into skills time
Practice anytime, anywhere with our mobile app.
Join the 1M+ learners on CodeSignal
Be a part of our community of 1M+ users who develop and demonstrate their skills on CodeSignal
From our community
Hear what our customers have to say about CodeSignal Learn
I'm impressed by the quality and can't stop recommending it. It's also a lot of fun!
Francisco Aguilar Meléndez
Data Scientist
+11
I love that it's personalized. When I'm stuck, I don't have to hope my Google searches come out successful. The AI mentor Cosmo knows exactly what I need.
Faith Yim
Software Engineer
+14
It's an amazing product and exceeded my expectations, helping me prepare for my job interviews. Hands-on learning requires you to actually know what you are doing.
Alex Bush
Full Stack Engineer
+9
I'm really impressed by the AI tutor Cosmo's feedback about my code. It's honestly kind of insane to me that it's so targeted and specific.
Abbey Helterbran
Tech consultant
+8
I tried Leetcode but it was too disorganized. CodeSignal covers all the topics I'm interested in and is way more structured.
Jonathan Miller
Senior Machine Learning Engineer
+12
I'm impressed by the quality and can't stop recommending it. It's also a lot of fun!
Francisco Aguilar Meléndez
Data Scientist
+11
13 practices
Throttling manages high request volumes by slowing down requests instead of blocking them. Unlike rate limiting, which rejects excess requests, throttling adds delays when thresholds are exceeded. This keeps your API responsive and stable during traffic spikes.
Modern web apps often need to fetch resources from different domains. CORS defines how servers declare which origins can make requests. By default, browsers block cross-origin requests, so you'll configure your Express server to respond with the necessary headers.
Modern web applications frequently rely on refresh tokens to seamlessly re-authenticate users without forcing them to log in repeatedly. While convenient, mishandling refresh tokens can grant attackers near-permanent access.
