0:00 / 0:00
#clojure#websecurity#authentication
Aaron Bedra - clojure.web/with-security
ClojureTV
111K subscribers • 136 videos on Hallway
- Recommended by 2 people: 2 in engineering communities.
- Presented by Aaron Bedra
- May be out of date. Uploaded 12 years ago, in an area where tools change fast.
Intermediate. Assumes working knowledge.
9.4K views12 years ago2 recommendations
SecurityWeb developmentLisp and ClojureWeb and application securityHTTP, REST and GraphQL
Aaron Bedra reviews the state of web security in Clojure, covering authentication, password management, and secure headers.
Web development libraries for Clojure have started to mature, but there are still quite a few gaps. Although there has been some activity in securing Clojure web applications, there has not been much of an effort into documenting the options or even explaining what should be done. This includes authentication and password management, securing application responses and options, as well as code review and deployment. Join Aaron as he walks through what is available, what is coming, and what does not yet exist in any open and consumable fashion. These are ideas that every production Clojure web application should embrace.Why it's here
2 people recommend thisWhat people say. Recommended as a crucial security checklist and guide for Clojure web developers.
u/FatSoccerManin r/Clojure • Recommends
Security checklist for Clojure web app?
Watched this talk by Aaron Bedra link to this video he points out several areas that Clojure developers often miss when developing web apps. I would like to gather a checklist of things you need to add that aren't default in a base Clojure web library (for me, Luminus), as well as which libraries are best for each task.
SQL Injection
XSS
SSL
HMAC
Cookie authentication (not sure what to call this - people getting someone else's cookie and using it to join their session)
Feel free to add other stuff I missed