Aijan

joined 7 months ago
[–] [email protected] -1 points 3 weeks ago (1 children)

Perhaps I was unclear. What I meant to say is that, whenever possible, we shouldn't have multiple versions of a field, especially when there is no corresponding plaintext password field in the database, as is the case here.

[–] [email protected] -5 points 3 weeks ago (5 children)

I appreciate the security concerns, but I wouldn't consider overriding the password property with the hashed password to be wrong. Raw passwords are typically only needed in three places: user creation, login, and password reset. I'd argue that having both password and hashedPassword properties in the user object may actually lead to confusion, since user objects are normally used in hundreds of places throughout the codebase. I think, when applicable, we should consider balancing security with code maintainability by avoiding redundancy and potential confusion.

[–] [email protected] 16 points 3 weeks ago* (last edited 3 weeks ago)

Thanks for the tip. password.trim() can indeed be problematic. I just removed that line.

84
Self-documenting Code (lackofimagination.org)
31
Firewalling Your Code (lackofimagination.org)
122
I Don't Trust My Own Code (lackofimagination.org)
[–] [email protected] 7 points 6 months ago

Seriously, why the negative tone? If I've offended you, I'm sorry. You might think that I'm wasting time, but there are multiple ways to skin a cat. I prefer not to use DEB packages for deployment, though others might.

[–] [email protected] 4 points 6 months ago

Cleanup can be as simple as deleting the latest deployment directory, if the script gets that far. The article is about using built-in Linux tools for 'easy' application deployments. One can also use dedicated tools, as you suggested, to further automate the deployment process.

[–] [email protected] 7 points 6 months ago (2 children)

Author here. In case it’s not clear, this article isn't about installing Linux packages; it's about deploying multiple versions of software to development and production environments.

[–] [email protected] 0 points 6 months ago* (last edited 6 months ago)

Author here. My blog is also generated with Hugo, and it's great. I just prefer not to generate HTML and CSS from JavaScript unless it's necessary.

Sorry, I haven’t seen that movie. Thanks for the recommendation though.

[–] [email protected] 3 points 7 months ago* (last edited 7 months ago)

That idea crossed my mind too, but you can’t really use the full capabilities of SQL in graph databases, and that’s a deal breaker for me.

[–] [email protected] 2 points 7 months ago

There's certainly the danger of creating too many ad-hoc or sparse relationships, which can cause issues. That said, when used for supplementing foreign keys, Tie-in can be a useful tool in a production system as well.

[–] [email protected] 3 points 7 months ago (5 children)

Yes, that's correct. Here's how an entry in the join table looks like:

{
  "id": 6,
  "sourceComp": "user",
  "sourceId": 2,
  "targetComp": "post",
  "targetId": 3,
  "type": "author",
  "createdAt": "2024-03-28T13:28:59.175Z",
  "updatedAt": "2024-03-28T13:28:59.175Z"
}
[–] [email protected] 3 points 7 months ago

AFAIK, no NoSQL database fully supports SQL, and only some offer support for transactions and joins. The idea here is to augment a relational database by adding capabilities for dynamic relationships.

15
Beyond Foreign Keys (lackofimagination.org)
submitted 7 months ago* (last edited 7 months ago) by [email protected] to c/[email protected]
 

In a relational database, foreign keys are normally used to associate records stored in different tables, but wouldn’t it be nice to define relationships dynamically without having to add extra columns or tables? And while we’re at it, how about having sparse relationships by associating a record directly with any other record like “post X was last edited by user #123” or “post X was flagged for review by user #456” (who happens to be a moderator)?

view more: next ›