Web Security 101 - Part 1: Secrets

This page summarizes the projects mentioned and recommended in the original post on dev.to

Our great sponsors
  • SurveyJS - Open-Source JSON Form Builder to Create Dynamic Forms Right in Your App
  • InfluxDB - Power Real-Time Data Analytics at Scale
  • WorkOS - The modern identity platform for B2B SaaS
  • dotenv

    Loads environment variables from .env for nodejs projects.

  • There are packages like dotenv that allow you to configure environment variables in files. You can configure them when you host a site using a platform like Heroku or Netlify.

  • frank_jwt

    JSON Web Token implementation in Rust.

  • Like many cryptographic standards, the JWT algorithms are not secret. You can paste a JWT into Auth0's JWT debugger and see the information inside. This is why you should keep JWTs, and all tokens you receive, secret. Rotate them often. Only send them over HTTPS.

  • SurveyJS

    Open-Source JSON Form Builder to Create Dynamic Forms Right in Your App. With SurveyJS form UI libraries, you can build and style forms in a fully-integrated drag & drop form builder, render them in your JS app, and store form submission data in any backend, inc. PHP, ASP.NET Core, and Node.js.

    SurveyJS logo
  • berglas

    A tool for managing secrets on Google Cloud

  • Products like Google Cloud have the authentication, authorization, secret storage, and secret retrieval built into the system you use to deploy your code.

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts