Slowly starting a passion project of a finance web-app that I can use help me budget but I have a crucial question

b3_k1nd_rw1nd
2025-05-11T08:00:13Z

I am planning to use Plaid API and have a spring boot backend but given that I will be storing my financial information (such as whatever the Plaid API needs me to store to use their endpoints as well as just the transactions on my credit and chequing account), the security of the data is obviously crucial. and I think my problem is I don't know what I don't know.

I have a basic idea of what kind of things I need to protect against.

1. WIll have to use Spring security (or whatever is best) for thing like protecting against xss and csrf

2. I need to ensure that the PostgreSQL database is encrypted

but beyond that, I don't know much about the nuances of each type of security and customizations I should be on the look-out for. wonder if there's a trustworthy resource for at least detailing for me the kind of security I need to implement on either the Spring or PostgreSQL side of things?

Comments URL: https://tildes.net/~tech/1nxc/slowly_starting_a_passion_project_of_a_finance_web_app_that_i_can_use_help_me_budget_but_i_have_a

Votes: 11

Comments: 2