-
REST API Paths
When naming REST API paths, it’s important to follow best practices such as avoiding file extensions, using HTTP verbs like GET, POST, PUT, DELETE, and placing variable names in the path. Proper structuring of endpoints helps differentiate between collections and singletons, like using /api/users for a collection and /api/users/123 for a specific resource. Relationships between… Read More
-
Fallback!
Today, I implemented functionality for renaming and deleting types, added authentication forms, and expanded a dialog form to handle multiple fields with autocomplete. I faced an issue with password manager warnings for hidden username fields and resolved it by using CSS to hide the input properly. I also created a new dialog control, fixed an… Read More
-
JWT Based Authorization
The author implemented JWT-based authentication in a Redux application. They used a separate refresh token to obtain new authorization tokens when the current one expires. They encountered challenges with token storage, header configuration, and state management within Redux. The author recommends using a custom middleware or listener to handle token refresh and local storage interactions.… Read More
-
Drag and Drop Reordering with RTK Query and PHP
Today’s work focused on implementing drag and drop functionality, improving error handling, and refining API endpoints. Key features include a new item creation dialog, item reordering, and enhanced error reporting with stack traces. Backend changes involved refactoring API methods, handling server-side item movement, and using appropriate HTTP status codes. Additionally, the frontend was updated with… Read More
-
Secrets UI
Busy day setting up secrets manager. Copied Angular project from error logs, implemented login/logout and basic UI. Needs work on database, encryption, and secure recovery. Delay of one day due to fatigue. Read More
-
Authentication Bearer
I created a login form and 2FA form, adding access controls to sensitive information within error logs. Endpoints were reconfigured to require a valid authorization header before allowing data to be returned. Read More
-
Two-Factor Authentication
Explore the intricate world of Two-Factor Authentication (2FA). Discover the role of QR codes in securely storing provisioning secrets and delve into the generation of Time-Based and Counter-Based one-time passwords. Learn strategies to mitigate security risks and navigate potential limitations in programming. Read More
-
Securing Data: Adventuring Beyond Obscurity
An ARPC security presentation about moving beyond obscurity to protect data, covering breach risks, legal concerns, weak encoding, hashing and salts, rainbow tables, encryption, challenge-response authentication, nonces, password creation, authentication flow, and strong password rules. Read More