I'm building a web application wherein users CRUD their own private data.
- Can I safely expose API endpoints?
Despite years in-industry and endless web-research, I'm not clear on the best architecture and how to most efficiently ensure security of the user data. The most basic requirements include: user authorization, view/add/update your own data. I already wrote a version 1 of the app and would like develop a version 2 from scratch. Exposing API endpoints could help isolate my front-end and back-end development. Is security still possible if I want a pure js front-end app?