I am not extensively familiar with databases and suspect that this could possibly be solved if I wasn't using a DBaaS provider like Atlas but I am not entire sure. I first thought was to try to implement JWT to authenticate that the api call was coming from the site, but in my head any auth token like JWT could still be copied down by a user and sent with spoofed scores easily with Postman.

Set the entry point to index.ts and feel free to provide the other information with appropriate values. With the current working configuration, anyone can send spoof scores via the api without having to play the game. This tutorial is a follow-up tutorial for the tutorial I wrote on How to set up an Express.js API using Webpack and TypeScript. Open your terminal and create your folder and package.json using mkdir node-express-typescript-starter & npm init Fill out all the information being asked. However, in the case of a leaderboard, I need to insure that the scores can ONLY be sent by the client based on how the game goes. I have everything working wherein the client can post and get scores from my MongoDB Atlas database using my Express api. Express is used by big names like Accenture, IBM, and Uber, which means it’s also great in a production environment. It is easy to learn and also has a lot of modules and middleware available for use. It’s fast, unopinionated, and has a large community behind it. I am trying to implement a leaderboard stored in a db for a unity game on my website. Express.js is the most popular Node.js framework for web development. I am working on my first full stack application, specifically with the MERN stack, and have run into a bit of an issue.