How to use authenticated middleware properly in nodejs

Question

I just started working on node using express framework.

app.use('/', auth, users);

and this is my route file

router.get('/' , function(req, res, next) {
   render("dashboard");
});

router.get('/first' , function(req, res, next) {
   //first request
});
router.get('/second' , function(req, res, next) {
   //second request
});
so on...

My question is, when i pass middleware it checks for every request whether its authenticated or not using passportjs, but suppose i have a dashboard and i am sending 10 ajax requests to grab data for the widgets. So only for dashboard it will call deserialize function 11 times ,first to render the page and then for 10 ajax request. I read answer given over here, How to properly use Passport.js? But is it fine to go with this approach?

You could also right a parallel call that handles the entire request - check the auth once first, then make the parallel call if auth is successful. — brandonscript
– brandonscript, Commented Oct 7, 2016 at 23:20

Stavros Zavrakas · Accepted Answer · 2016-10-07 23:18:48Z

1

Yes, it is fine to go with this approach if you don't want to have security issues. You have to check the user for every request, it is very simple someone to check the network tab in the browser debugger, understand what's going on and then start spoofing your requests. You can't sacrifice security for performance because you want to execute few query less.

answered Oct 7, 2016 at 23:18

Stavros Zavrakas

3,1251 gold badge20 silver badges30 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

How to use authenticated middleware properly in nodejs

1 Answer 1

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related