title: Node/Express - Good approach to secure communication between client/server
body: <p>I'm building a backend API with Node/Express, which get the data from a MongoDB. The front will be written in React.</p>
  
  <p>I would like to secure the communication client/server, but I don't know how I have to think about the process.</p>
  
  <p>I see many tutorial about <code>passport</code> or <code>JWT</code>, but this is good for an user authentication.</p>
  
  <p>I don't know if creating a token for every request based on the time (for example) is a good approach or it's too consuming for a web app.</p>
  
  <p>But my goal is to secure the data because even if the API is private you can easily find out the route and try to figure it out how to fake request with Postman or something else to scrap the data.</p>