express-security-hardening

What problem does it solve?

Express applications often ship with weak production security baselines, leading to JWT exposure, CSRF vulnerabilities, and inconsistent request validation.

Core Features & Use Cases

• Migrate JWT storage from localStorage to httpOnly cookies with proper SameSite and CSRF considerations.
• Enforce server-side input validation using Zod middleware to prevent malformed requests.
• Harden HTTP security with Helmet production settings, rate limiting layers, and unified error handling.
• Audit and monitor security-sensitive operations with structured logs and non-blocking writes.

Quick Start

Apply production-grade security hardening to your Express app by migrating JWT storage to httpOnly cookies, enabling CSRF protection, and configuring Zod validation, Helmet, and rate limiting.