node-js server security, with react-native client

Question

Im wondering if there is a way to only accept http requests from target react-native app.

What i mean is, currently, my nodejs server (using express) accepts connections from any means (even postman requests). Is there a way to make server only listen to desired app?

If it's IP based: https://stackoverflow.com/questions/8107856/how-to-determine-a-users-ip-address-in-node — mbozwood, Dec 01 '17 at 16:40

score 1 · Answer 1 · answered Dec 01 '17 at 16:52

1

Use some level of security tokens. I use Passport-JWT with JSON Web Tokens that are generated after the user logs in.

answered Dec 01 '17 at 16:52

Mark S.

3,849
4
20
22

score 0 · Answer 2 · answered Dec 01 '17 at 16:46

TCP/IP is client agnostic so the server will always allow connections from anyone not on an IP based blacklist. However you can easily use tokens, keyword parameters or other means to block clients you don't like. The question is whether the connection needs to be secure, hence some kind of token exchange or you just want to prevent accidental damage. curl is very helpful if you want to test what a client an do with your server.

node-js server security, with react-native client

2 Answers2