In the simplest form, our (near future) project consists of a end user program, that directly connects to databases and apis.
This is obviously bad as then the end user program consists of sensitive data such as usernames and passwords.
How do I avoid this properly?
searching on the web seems to point to Remote Method Invocation, wherein I put all sensitive data into an program that lies on an web server and end user program simply calls the methods from server program. Is this the right way or is there a better one??