Youtube comments of Jeremy Chone (@JeremyChone).
-
121
-
100
-
67
-
40
-
24
-
16
-
16
-
13
-
7
-
5
-
5
-
Very nice explanation.
On top of password individual hash (stored in the DB), we also use an additional system wide salt, usually stored as a kubernetes secret property. This add another level of security.
Also, we also use similar salt technic for the web token signature. Web Tokens embed their expiration, which is updated at each web request (typically as a http only cookie), and the third element is the signature using: ash(user_uuid + user_tsalt + global_tsalt). Also, we do NOT store credentials/access in the token, which is a longer conversation.
So, a user row has a psalt column, for the password hash, and a tsalt for the token salt.
Anyway, great vide, this is great to find this level of content on YouTube.
5
-
5
-
4
-
4
-
4
-
3
-
3
-
3
-
3
-
3
-
3
-
3
-
2
-
2
-
2
-
2
-
2
-
2
-
2
-
2
-
2
-
2
-
2
-
2
-
1
-
1
-
1
-
1
-
1
-
@JustinShaedo Thank you.
Yes, we have been building large applications using JSON-RPC for many years now, and it has worked extremely well. We even provided an API to our clients' developer users, and they loved it.
It's very simple: just an HTTP POST with JSON in and out, featuring a minimal top-level structure. It works in any browser, any client, with no stubs or SDK needed.
Developers can find more information by searching for jsonrpc online; the specification is incredibly straightforward.
In fact, we use it in our rust10x blueprint (a Web App production blueprint), and it works like a charm. I've made an extensive video about it, with more to come.
There are many myths about json-rpc, but once its simplicity and versatility are understood, it resolves many issues. No more REST gymnastics for function calling, and best of all, it's protocol-independent. We can use it for network calls, WebView to Backend calls, like Tauri commands, or even in message passing in an actor model.
However, there's no absolute best way to code large production applications. If developers are more comfortable with REST or gRPC, that's completely respectable too.
Happy coding!
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
I would generally agree, however, there is a nuance.
I have a lot of shortcuts, but I also use exclusively the trackpad (on MacBook) which significantly reduces the movement cost of pointer activities. In fact, my wrists barely move, if at all, when I am engaged in pointer activities.
Interestingly, what slows me down more is not the pointer actions, but the arrow keys. They are on the keyboard, but still more disruptive to my input flow than a pointer action.
Anyway, these things are mostly personal, so it's hard to have a universal best solution, even if there are still some good rules of thumb.
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1
-
1