Data Access and Validation

In a traditional web application, the application server typically performs validation of users’ requests. For example, before writing a record to the database, the application server might inspect the record for problems related to many different concerns, ranging from user experience to security and data integrity.

In a serverless web application, you have to separate these concerns. Validation done for security reasons cannot be performed in a web client. Anything that our app can do, a user can also do, because browser environments are completely within the control of the user. For example, changing the code in our application is easy to do from the development console in most web browsers, and a malicious user ...

Get Serverless Single Page Apps now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.