Security for web application

[neon wyvern]

I would like to make back end with Spring Boot for simple web application where people register and then can either post posts or comment on post. How can I make it secure with Spring Boot? Do I somehow store sessions based on user data and then with each request check whether that session is valid?

If you are familiar with React, how can I handle security on front end? I wonder if I store session as a cookie whether it can be hacked.

[limpid tartan]

<@&1004656351647117403> please have a look, thanks.

[limpid tartan]

While you are waiting for getting help, here are some tips to improve your experience:

Code is much easier to read if posted with syntax highlighting and proper formatting.

If nobody is calling back, that usually means that your question was not well asked and hence nobody feels confident enough answering. Try to use your time to elaborate, provide details, context, more code, examples and maybe some screenshots. With enough info, someone knows the answer for sure.

Don't forget to close your thread using the command </help-thread close:1027500463647621170> when your question has been answered, thanks.