# Using Node RED as an API management platform

**URL:** <https://discourse.nodered.org/t/using-node-red-as-an-api-management-platform/82328>\
**Category:** General\
**Created:** [25 October 2023 09:53 UTC](https://discourse.nodered.org/t/using-node-red-as-an-api-management-platform/82328 "2023-10-25T09:53:11Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![marcus-j-davies](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/marcus-j-davies/32/103435_2.png) [@marcus-j-davies](https://discourse.nodered.org/u/marcus-j-davies)\
**Post date:** [25 October 2023 11:29 UTC](https://discourse.nodered.org/t/using-node-red-as-an-api-management-platform/82328/2 "2023-10-25T11:29:52Z")

</div>

Hi @Josh.

Note: Plenty of battle hardened users here, who may have crucial advise, but here is mine.

> - I want community inputs on if we can use Node red for these purposes?
> - I could achieve basic CRUD operations but then any other complex things can be done?

Sky is the limit, as long as you address any hurdles/shortcomings, I can't see why not.  
Under normal circumstance, this should not be a problem, but keep in mind JavaScript is single threaded,

> - If Yes, What are the best practices involved or should be considered?

I wouldn't put Node RED at the front, I would use something like NGINX, this gives you access to throttling, MUCH MUCH better security, and more to help protect Node RED

> - I couldn't create a custom middleware to authenticate.
> - Still worried about the security measures associated with it.

Unless you are a security expert - try to use something that is tried and tested, NGINX is used a lot for both the SSL layer and Authentication.

Read this  
[https://discourse.nodered.org/t/safely-accessing-node-red-over-the-internet/](https://discourse.nodered.org/t/safely-accessing-node-red-over-the-internet/)

And enjoy this recent event to re-enforce the need to keep security top priority  
[https://discourse.nodered.org/t/node-red-compromise-hack](https://discourse.nodered.org/t/node-red-compromise-hack)

---

_[View the full topic](https://discourse.nodered.org/t/using-node-red-as-an-api-management-platform/82328)._