In this chapter, we will mainly discuss how to secure your application from external threats that could cause data loss, which, in turn, affects the overall business.

Web application security is always a concern for any business unit. Therefore, we not only look at the traditional application logic and data-related security issues, but at the protocol and platform concerns as well. Developers have become more responsible for ensuring compliance with the best practices regarding web application security.

Keeping this in mind, this book is intended for application developers, system administrators, as well as DevOps professionals who want to keep their application secure, whether it is at the application level or platform.

We will cover the following topics in this chapter:

• Network security versus application security
• Implementation of application authorization using different methods, such as OAuth, client authentication, and others
• Word on developing security-enabled web applications