Meilleures pratiques de cybersécurité pour les applications Web

Authentication

import bcrypt from 'bcrypt';
import jwt from 'jsonwebtoken';

async function hashPassword(password: string) {
  return await bcrypt.hash(password, 10);
}

async function verifyPassword(password: string, hash: string) {
  return await bcrypt.compare(password, hash);
}

function generateToken(userId: string) {
  return jwt.sign({ userId }, process.env.JWT_SECRET, { expiresIn: '7d' });
}

SQL Injection Prevention

Always use parameterized queries.

XSS Protection

Sanitize user input and use Content Security Policy.