Securely Store Local Data in Apollo Client, React, and Apollo Server - Using HttpOnly Cookies

preview_player
Показать описание

In this video we develop a robust HttpOnly cookies system using Apollo Server, Apollo Client, and React. HttpOnly cookies allow us to store sensitive data on the client, while also maintaining security from XSS attacks. Hopefully this video gives a great overview when it comes to managing local data, and gives you alternatives to using technologies such as LocalStorage or SessionStorage which can be insecure to XSS attacks.

0:00 Intro
0:21 Project demo
1:20 Creating Apollo Server code
12:21 Showing cors example
14:00 Set up React application / Apollo Client
24:34 Final project result / token explanation
25:30 A note on security / CSRF
27:05 Thanks for watching!
Рекомендации по теме
Комментарии
Автор

Always fresh tutorial, keep going bro

radi
Автор

Hey Cooper if its available can we have the repo link?

dominickd
Автор

isnt setting the req in the context a bad way of access the cookies? say you have a refresh token in the cookies now the only way to access that refresh token is through the context but the context is shared among all the resolvers in an Apollo Server instance so this poses a threat, no?

THEajpKING