Coding With Fun
Home Docker Django Node.js Articles Python pip guide FAQ Policy

Can a meteor app be trusted by another meteor app?


Asked by Lawrence Andrade on Dec 07, 2021 Meteor



In a Meteor app, things are pretty simple: Code that runs on the server can be trusted. Everything else: code that runs on the client, data sent through Method and publication arguments, etc, can’t be trusted. In practice, this means that you should do most of your security and validation on the boundary between these two domains. In simple terms:
Indeed,
This is why we recommend running production Meteor apps on Galaxy. The easiest way to operate your app with confidence is to use Galaxy, the service built by Meteor Development Group specifically to run Meteor apps. Galaxy is a distributed system that runs on Amazon AWS.
Additionally, Securing a web application is all about understanding security domains and understanding the attack surface between these domains. In a Meteor app, things are pretty simple: Code that runs on the server can be trusted. Everything else: code that runs on the client, data sent through Method and publication arguments, etc, can’t be trusted.
In fact,
If you deploy to Galaxy, you can use a x.meteorapp.com or x.eu.meteorapp.com domain while you are testing the app. Learn more about Galaxy domains » It’s always a good idea to use SSL for Meteor applications (see the Security Article to find out why).
Besides,
Use the same code whether you’re developing for web, iOS, Android, or desktop for a seamless update experience for your users. Developed for over a decade and trusted by industry giants. Meteor is a mature open source framework that allows you to build and scale efficiently so you can serve millions of users.