Summary

What did we learn?

Anything that happens on the client-side should never be trusted. Nevertheless, we can still do things on the client-side to protect our apps from various attacks. If we rely on JWT tokens, then ensure we’ve considered all security measures. We’ve also covered how to restrict access to certain pages and content by using a Permission component and the checkPermission method. Remember, though, that these are just for pure UX, and necessary permission checks should always be performed on the server-side.