DEV Community

Discussion on: How to make realtime APIs with NodeJS and ReactJS using Socket.io

Collapse
 
ravavyr profile image
Ravavyr

It's a good breakdown, but I find some issues with it.

It has some bells and whistles, eg. you didn't really need to add the database though it's a nice touch, but it is missing the important bells and whistles, like HTTPS instead of HTTP [setting up an ssl with LetsEncrypt is pretty easy these days], also validating the data sent to your server, and logs for catching bots/anyone trying to abuse it, and also how do you validate communications are not being intercepted.

All in all you did a pretty good explanation and showed how server and client side are connected. This part always confuses newbies.

Granted some of these items require longer discussions and your tutorial is already quite long, they at least deserve to be mentioned, AT THE LEAST, HTTPS since SSL/TLS is a requirement not a luxury nowadays.

Collapse
 
omardiaa48 profile image
Omar Elwakeel

Thanks for notifying me, I will look further in these topics and might post another one focusing on those items

Collapse
 
alexlowe profile image
Alex Lowe

I would argue that SSL/TLS is not required for the scope of this tutorial. There are plenty other ones that show you how to add it to your nodejs application or using a proxy to do so.

Collapse
 
ravavyr profile image
Ravavyr

Newbies don't know this. It should at least mention it and use an SSL secured url by the end. HTTPS is vital [mainly because you don't get that fancy lock icon and clients go apeshit if you don't have that lol], but in all seriousness it's not something that should be overlooked. At least link to another tutorial that shows how to do it for this specific stack since that can vary too.