Javascript and Angularjs - Good practices for capturing data from a logged-in user

Question

Gentlemen, good afternoon, sir. I would like to ask what best practice you use to capture the data of a logged-in user in a web application with database.

For example: Assuming I created a site where the user registers, logs in with his email and password, and when logged in to a screen with a panel with a series of options, one of them is able to change your registration information. How do I save and capture these values assuming I use Mysql database? Session Storage and encryption?

My goal of creating a secure website that guarantees data integrity.

Answer 1

There is a lot to take into account, as is the way you log in (you said you create a session, your back-end can be Asp.net or PHP) if it is Session created between the application and server or cookies for API authentication. Each one is done one way, can be safe in both ways.

It would be interesting to first fix these concepts, I suggest you take a read on: https://docs.microsoft.com/pt-br/aspnet/web-api/overview/advanced/http-cookies (server and client)

I prefer to create a back-end API where I have my business rules and another front-end API to communicate with back-end. So every time I go to do something in the bank HTTP Request method and authenticating each operation.