title: Securing Node.js RESTful APIs
body: <p>I'm newbie in Node.js and just want to create RESTful API with it for my game in Unity3D. Just at the end of the game I want some information like name and phone number, etc from player if he/she wants to share. I know how to implement this server but my problem is with security. I've search a lot about security in Node.js but I've not figured it out yet. In my searches I've saw there is a npm package which is JWT and figured out how to use it. As I know we send a request to the server and in response it returns a bearer token which we can set our header with it and use GET, POST or other methods. My problem is that anyone can send a request to that URL and get that token and do other things (I think I made a mistake). So what is the solution for security of this type of server ?</p>