Overview
Learning Security Basics with TypeScript is a hands-on course path for aspiring Application Security Engineers. You’ll learn to identify, exploit, and defend against common web security threats using TypeScript and modern web frameworks.
Syllabus
- Course 1: Implementing Rate Limiting
- Course 2: Throttling API Requests
- Course 3: Enabling & Customizing CORS in Your TypeScript REST API
- Course 4: Preventing Refresh Token Abuse in Your TypeScript REST API
Courses
-
Learn to secure your TypeScript REST API by implementing rate limiting, request throttling, CORS configuration, and robust refresh token management to prevent abuse and enhance application security.
-
Throttling manages high request volumes by slowing down requests instead of blocking them. Unlike rate limiting, which rejects excess requests, throttling adds delays when thresholds are exceeded. This keeps your API responsive and stable during traffic spikes.
-
Modern web apps often need to fetch resources from different domains. CORS defines how servers declare which origins can make requests. By default, browsers block cross-origin requests, so you'll configure your Express server to respond with the necessary headers.
-
Modern web applications frequently rely on refresh tokens to seamlessly re-authenticate users without forcing them to log in repeatedly. While convenient, mishandling refresh tokens can grant attackers near-permanent access.