Learn about the Helmet library of Node.js for HTTP headers and test the security.

Web App Security

This module teaches us hands-on practical use of HTTP security headers as browser security controls to help secure web applications. 
For each HTTP security header that can enhance our web application security, we'll look at the potential risk of not implementing it as well as the benefits of employing a solution that we propose. Finally, we'll learn how to implement and configure the security header with Helmet, a popular and well-maintained Node.js package on npm.

Web Application Security: Understanding HTTP Security Headers

Congratulations! We successfully completed the “Web Application Security: Understanding HTTP Security Headers” module.

## Summary
We started by first looking at the requirements of web application security. We discussed how headers are used as browser security controls. We then introduced Helmet, a Node.js package, and used it for strict transport security of HTTP, X-Frame-Option, content security policy, X-XSS-Protection, X-Content-Type-Options, and referer and its policy. Finally, we learned how to test the security headers.

## Takeaways
- We learned about the basic HTTP security needed by software developers.
- We learned about Auth0 and its integration with the Java servlet application.
- We learned about JSON web token, OAuth 2.0, and OpenID Connect.
- Finally, we learned how to use the Helmet library of Node.js for HTTP header security.


Congratulations! You are now a professional of Web Application Security.

Congratulations! We successfully completed the “Web Application Security: Understanding HTTP Security Headers” module.

# Summary
We started by first looking at the requirements of web application security. We discussed how headers are used as browser security controls. We then introduced Helmet, a Node.js package, and used it for strict transport security of HTTP, X-Frame-Option, content security policy, X-XSS-Protection, X-Content-Type-Options, and referer and its policy. Finally, we learned how to test the security headers.

# Takeaways
- We learned about the basic HTTP security needed by software developers.
- We learned about Auth0 and its integration with the Java servlet application.
- We learned about JSON web token, OAuth 2.0, and OpenID Connect.
- Finally, we learned how to use the Helmet library of Node.js for HTTP header security.


Congratulations! You are now a professional of Web Application Security.

Here's a quick summary of the "Web Application Security: Understanding HTTP Security Headers" module.

Introduction

HTTP Security Headers

Testing for Security Headers

What's Next

Conclusion

Final Remarks

Summary