For those seeking expert assistance, a Node.js development company<\/a> can provide specialized services to enhance your API’s performance and security. By following this guide, you’ll learn how to quickly and securely set up a NodeJS REST API, making use of Express for rapid development and efficient handling of HTTP requests.<\/p>\n Building a secure Node.js REST API quickly is crucial in today\u2019s fast-paced development environment. This guide will walk you through the steps to set up a secure Node.js REST API in just five minutes, covering essential security measures to protect your application from common vulnerabilities.<\/p>\n First, ensure you have Node.js and npm installed on your machine. You can verify the installation by running:<\/p>\n Next, create a new directory for your project and navigate into it:<\/p>\n Initialize a new Node.js project with:<\/p>\n This will create a ‘package.json<\/strong><\/em>‘ file with default settings.<\/p>\n Install the necessary packages for your REST API, including Express for handling HTTP requests, and additional security-related packages:<\/p>\n Create a file named ‘server.js<\/strong><\/em>‘ and add the following code to set up a basic Express server:<\/p>\n Create a ‘.env<\/strong><\/em>‘ file in the root directory to store sensitive information like your API keys and database credentials:<\/p>\n Using environment variables helps keep sensitive data out of your source code.<\/p>\n For basic authentication, we will use JWT (JSON Web Tokens). Install the necessary package:<\/p>\n Create a ‘user.js<\/strong><\/em>‘ file to handle user registration and login:<\/p>\n Protect routes by verifying the JWT token. Create a middleware for token verification:<\/p>\n In ‘server.js<\/strong><\/em>‘, use this middleware to protect routes:<\/p>\n In conclusion, setting up a secure NodeJS REST API framework is essential for developing reliable and scalable web applications. By following the steps outlined in this guide, you now have a foundational understanding of how to create API in Node JS Express, implement basic security measures, and maintain comprehensive Node JS REST API documentation. This ensures your API is well-structured, secure, and easy to understand for both current and future developers.<\/p>\n For those looking to take their API development to the next level, seeking professional assistance can be a game-changer. Shiv Technolabs offers top-notch Node.js development services Australia<\/a>, specializing in creating secure, efficient, and scalable APIs. Our team of experts<\/a> is dedicated to helping you build robust applications that meet your business needs. Partner with Shiv Technolabs to ensure your Node.js projects are handled with the utmost expertise and care.<\/p>\n","protected":false},"excerpt":{"rendered":" Set up a secure NodeJS REST API framework in just 5 minutes with Express. Follow our step-by-step guide to create APIs in Node JS Express and maintain proper documentation for seamless development.<\/p>\n","protected":false},"author":4,"featured_media":13400,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[13],"tags":[],"class_list":["post-13379","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-web-development"],"acf":[],"yoast_head":"\nNode.js REST API Setup in 5 Minutes<\/strong><\/h2>\n
\n![\"Node.js](\"http:\/\/167.86.116.248\/shivlab\/wp-content\/uploads\/2024\/07\/Node.js-REST-API-Setup-in-5-Minutes.jpg\")
<\/p>\nStep 1:<\/span> Initial Setup<\/strong><\/h3>\n
\r\nnode -v\r\nnpm -v\r\n\r\n<\/pre>\n
\r\nmkdir secure-node-api\r\ncd secure-node-api\r\n\r\n<\/pre>\n
\r\nnpm init -y\r\n\r\n<\/pre>\n
Step 2:<\/span> Install Essential Packages<\/strong><\/h3>\n
\r\nnpm install express helmet cors dotenv\r\n\r\n<\/pre>\n
\n
Step 3:<\/span> Basic Server Setup<\/strong><\/h3>\n
\r\nconst express = require('express');\r\nconst helmet = require('helmet');\r\nconst cors = require('cors');\r\nrequire('dotenv').config();\r\n\r\nconst app = express();\r\nconst port = process.env.PORT || 3000;\r\n\r\n\/\/ Middleware\r\napp.use(helmet()); \/\/ Adds security headers\r\napp.use(cors()); \/\/ Enables CORS\r\napp.use(express.json()); \/\/ Parses JSON bodies\r\n\r\n\/\/ Sample route\r\napp.get('\/', (req, res) => {\r\n res.send('Welcome to the secure Node.js REST API!');\r\n});\r\n\r\napp.listen(port, () => {\r\n console.log(`Server running on port ${port}`);\r\n});\r\n\r\n<\/pre>\nStep 4:<\/span> Secure Environment Variables<\/strong><\/h3>\n
\r\nPORT=3000\r\n<\/pre>\n
Step 5:<\/span> Implementing Basic Authentication<\/strong><\/h3>\n
\r\nnpm install jsonwebtoken bcryptjs\r\n\r\n<\/pre>\n
\n
Step 6:<\/span> User Authentication<\/strong><\/h3>\n
\r\nconst express = require('express');\r\nconst jwt = require('jsonwebtoken');\r\nconst bcrypt = require('bcryptjs');\r\n\r\nconst router = express.Router();\r\nconst users = []; \/\/ In-memory user storage, replace with database in production\r\n\r\n\/\/ Register route\r\nrouter.post('\/register', async (req, res) => {\r\n const { username, password } = req.body;\r\n\r\n \/\/ Hash the password\r\n const hashedPassword = await bcrypt.hash(password, 10);\r\n\r\n \/\/ Store user\r\n users.push({ username, password: hashedPassword });\r\n\r\n res.status(201).send('User registered');\r\n});\r\n\r\n\/\/ Login route\r\nrouter.post('\/login', async (req, res) => {\r\n const { username, password } = req.body;\r\n\r\n \/\/ Find user\r\n const user = users.find(u => u.username === username);\r\n if (!user) {\r\n return res.status(400).send('Invalid credentials');\r\n }\r\n\r\n \/\/ Check password\r\n const isPasswordValid = await bcrypt.compare(password, user.password);\r\n if (!isPasswordValid) {\r\n return res.status(400).send('Invalid credentials');\r\n }\r\n\r\n \/\/ Generate token\r\n const token = jwt.sign({ username: user.username }, process.env.JWT_SECRET, { expiresIn: '1h' });\r\n\r\n res.send({ token });\r\n});\r\n\r\nmodule.exports = router;\r\n\r\n<\/pre>\nStep 7:<\/span> Protecting Routes<\/strong><\/h3>\n
\r\nconst jwt = require('jsonwebtoken');\r\n\r\nfunction authenticateToken(req, res, next) {\r\n const authHeader = req.headers['authorization'];\r\n const token = authHeader && authHeader.split(' ')[1];\r\n\r\n if (!token) {\r\n return res.sendStatus(401);\r\n }\r\n\r\n jwt.verify(token, process.env.JWT_SECRET, (err, user) => {\r\n if (err) {\r\n return res.sendStatus(403);\r\n }\r\n\r\n req.user = user;\r\n next();\r\n });\r\n}\r\n\r\nmodule.exports = authenticateToken;\r\n\r\n<\/pre>\n\r\nconst express = require('express');\r\nconst helmet = require('helmet');\r\nconst cors = require('cors');\r\nconst dotenv = require('dotenv');\r\nconst userRoutes = require('.\/user');\r\nconst authenticateToken = require('.\/middleware\/authenticateToken');\r\n\r\ndotenv.config();\r\n\r\nconst app = express();\r\nconst port = process.env.PORT || 3000;\r\n\r\n\/\/ Middleware\r\napp.use(helmet());\r\napp.use(cors());\r\napp.use(express.json());\r\n\r\n\/\/ Public routes\r\napp.use('\/api\/user', userRoutes);\r\n\r\n\/\/ Protected route\r\napp.get('\/api\/protected', authenticateToken, (req, res) => {\r\n res.send('This is a protected route');\r\n});\r\n\r\napp.listen(port, () => {\r\n console.log(`Server running on port ${port}`);\r\n});\r\n<\/pre>\nYour Turn<\/strong><\/h4>\n
\n