I develop an Angular app with a NodeJS API.
I am trying to add security to my application and so I need to create a safe authentication. To do it I have found some courses to add JWT to requests and especially followed this one. I have then created verification middleware on express API and token storage in Angular localStorage to check the user expiration.
I have heard some possibility to refresh tokens to not have to relog after few minutes but to refresh the token and relog only after a week for example.
I also need to add some encryption to password and some sensitive data.
So I am looking for courses, advice or anything that can help me in the doing of a safe application.
Don't know if that help but this web application will be used with ElectronJS so it will be more a software than a real web application.