Home / Questions / 28016
Accepted
Kevin AB
Asked: 2020-10-16 04:50:19 +0800 CST 2020-10-16 04:50:19 +0800 CST

Validation in backend/frontend and/or concurrent users

  • 772

I understand that validations have to be done at the backend level for security, but what I want to do is the following, validate at the frontend level with angular, and thus make the server work less, say, but if I do it in the frontend the user could modify the script and everything it does, to be able to send what they want, then how could I make a function, in the backend that tells me that the user is validated, so he no longer has to do another validation again. Any ideas?.

Regarding my 2nd question, I am using nodejs to run a server with sessions stored in redis with express session, but when testing with loadtest npm, with 20 concurrent users I start getting errors that req.session is not found How could I improve session performance?

angularjs

1 Answers

  1. Best Answer

    Validations in the back-end must always be done . The advantage of working in nodejs is that some validation routines can be programmed only once and they are the same ones that run in the backend and in the frontend (for example, that the mail is valid and from certain domains, the Javascript validamail function that programs for this can be used in both places).

    Regarding savings :

    1. There is processing savings on the back-end because (unless it's an attacker) if something has already been checked invalid on the front-end it's not going to be sent to the back-end (why do we validate it on the front-end then? because attacks do exist).
    2. There are programming savings (on features that can be used on both sites)
    • 2