You Shouldn't Start with an SPA

Re:You Shouldn't Start with an SPA by jongjong on Friday February 02, 2024 @10:09AM (#39229434)

I completely disagree with any attempt to merge the front end with the back end by obscuring the boundary. It's a horrible idea and leads to security vulnerabilities.

The front end is a public resource, the back end is a private resource whose access needs to be controlled according to clear and consistent rules and with proper authentication checks.

[ Parent | on HN ]

Re:You Shouldn't Start with an SPA by ivan_gammel on Friday February 02, 2024 @10:23AM (#39229632)

There’s usually no problem with security in thin hypermedia apps. Backend still has full control over access, you just have an extra step of actually rendering the view with the model you’d otherwise return via API.

[ Parent | on HN ]