Is there any security risk on my architecture

Help
1

I’m considering to build my customer web system with the follow components

  • WordPress and React SPA as a website under the same domain.
  • UserManagement API backed the website.
  • All components are authenticated by Auth0

And this system will update own userinfo with following process. Is there any wrong point from the viewpoint of security?

50
501922×858 109 KB

3

Hi @horike37,

This looks good to me from what I can see.

One question, are you using a WordPress regular web app and a React SPA?

Thanks,
Dan

4

Hi @dan.woda,
Thank you for the response. I’m relieved to hear that.

are you using a WordPress regular web app and a React SPA?

Yup, the website is made with WordPress and React SPA under the same domain so sharing seamlessly authentication info with using SSO.

5

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.