peak debt posted:

Am I correct in assuming that there is no way to implement an oauth login with only client side scripting? As in, any implementation of that will always be vulnerable to a hacker forging some request - by manually editing his session storage, or faking a referer etc - and be able to log in as another user.
I had a look around the internet and did find a few Youtubes and stuff that do implement it in only Javascript, but they all had really obvious security holes

Janitor Prime posted:

Speaking of MongoDB, does anyone have any experience using Elasticsearch as your primary data store? We are trying to ship application generated json messages from a networking appliance that is processing 40Gbps and generating about 14GBs of data per day. We have found that Elasticsearch becomes unresponsive after a few days of querying it and requires a process restart. I expect our application data to grow 4x when it starts pushing 40Gbps and am worried that this DB isn't up to snuff. We're using fluentd to send the logs and it's built in retry logic is causing it to insert duplicate data when it does get in that stuck state which sucks but whatever.

Steve French posted:

I wouldn't say that I'm necessarily a huge fan of Elasticsearch, and generally wouldn't trust it as a primary system of record (though I haven't tried using it as such, and have not experienced data loss).

However, a few years ago I more or less single-handedly set up a (smallish, single digit nodes) Elasticsearch cluster that handles roughly ~10x the data you mentioned, and it's been humming along fine for the duration.

Not saying it's appropriate for your use case, but it's definitely not difficult to scale it to much more data than you're currently ingesting.

baquerd posted:

You stored 140 Gigabytes a day in Elastisearch? On what kind of hardware with what kind of retention?

Bob Morales posted:

Does anyone know of good articles relating to chat servers/clients?

Just looking to read about different ideas regarding storing messages (or not to), clients that poll for new messages, servers that push messages to clients, scaling multiple servers, both chat directly between two users and channels/rooms...

Like at what point does a message forum or email system 'become' a chat program?

leper khan posted:

Sure, check out the RFCs for IRC or XMPP. Or god help you SIP.

Bob Morales posted:

Does anyone know of good articles relating to chat servers/clients?

Just looking to read about different ideas regarding storing messages (or not to), clients that poll for new messages, servers that push messages to clients, scaling multiple servers, both chat directly between two users and channels/rooms...

Like at what point does a message forum or email system 'become' a chat program?

Bob Morales posted:

Does anyone know of good articles relating to chat servers/clients?

Just looking to read about different ideas regarding storing messages (or not to), clients that poll for new messages, servers that push messages to clients, scaling multiple servers, both chat directly between two users and channels/rooms...

Like at what point does a message forum or email system 'become' a chat program?

it is posted:

I'm trying to make a Pokemon Trading Card Game webapp. Eventually I'll have thousands of cards with diverse, but simple-to-code, effects.

I think I wanna store the cards as individual Javascript files and import the small number required for each game before the game starts. Is this a terrible idea? Is this the right thing to do? Does the answer change if they're only imported as your opponent reveals their deck to you?

it is posted:

I'm trying to make a Pokemon Trading Card Game webapp. Eventually I'll have thousands of cards with diverse, but simple-to-code, effects.

I think I wanna store the cards as individual Javascript files and import the small number required for each game before the game starts. Is this a terrible idea? Is this the right thing to do? Does the answer change if they're only imported as your opponent reveals their deck to you?

piratepilates posted:

Write out one of these cards with all of the properties you expect it to have, then add a bunch of properties you don't expect just in case, then copy and paste all of the rules data you have for that card a couple of thousand times. Save that file, gzip it, and see how big it is -- it'll almost certainly come out far under a megabyte and take almost no time to transfer if you put it all in one big file.

If you want to write them as separate files for your own productivity then you can certainly do that and have your build script concatenate it all in to one file, which is probably the best way to go.

it is posted:

Whoa I really like this. There are even javascript libraries to unzip gzip files.

Also in case I wasn't clear, I'm talking about implementing an existing game that's had almost 20 years to amass thousands of cards.

cybertier posted:

I hope this is a good place to start and get some pointers.

For the last ~7 years I have mostly worked on existing applications and extended those, but somehow we lost our other most senior developer so that role falls to me now and now we want to build something new.
Since all the old stuff we have is terrible designed with no clear philosophies behind it we are starting mostly from scratch and I need some advice about a good tech stack and even some right terms to research.

We are going to build a mobile app that should at least run on Android and iOS, mobile Windows devices would be a huge plus.
The big caveat is that we want to make an app that is highly modular with exchangeable behaviours since we have dozens of customers that have very specific workflows.
The idea is that we have a default application, that can for example process orders by showing information about them, starting an order, requesting information about that order from the user and finishing that order.
Now one customer might need additional information (i.e. delivered amount of X) and calculations based on those. This specific change to the general process should be somehow modular and not require an update of the original app.
Today we all those extra features for specific customers are programmed into the main app and activated by setting hundreds of different parameters. This often leads to breaking features when seemingly unrelated features are modified.

My abstract idea is that every action in the main application fires events and those modules that we somehow get into the app, when activated, listen to those events and execute their own code before continuing with the main application (or completely replacing the original event).

The problem is that I have no idea about a sane tech stack for such an application and neither do I know the right terms I even need to google for this kind of modular programming. Since afaik iOS is rather squeamish about loading librarys/installing apps on the fly, I assume that those modules need to be scripted, so probably written in some kind of JS.

So if anyone can give me advice if this approach seems like a sane idea, if there are some terms or frameworks I should google, and maybe what compontents should go into building such an app, that help would be much appreciated. Or if this is too specific and I should look into another thread.

cybertier posted:

cybertier posted:

piratepilates posted:

I brought up gzip because it's defined in the HTTP specs already. Don't do anything with gzip yourself, just make sure the server that the browsers will connect to has gzip compression enabled over HTTP and don't worry about it.

20 years and thousands of cards may sound like much but create fake data and test it yourself. Unless it actually ends up being so much data that loading the page with the one big concatenated .js file takes like 30 seconds you shouldn't worry about it and just opt for the easy route of "one big js file" that popular toolchains already embrace.

Dr. Stab posted:

Yeah, I do some stuff that works on a data set of every card ever printed in magic the gathering, and that poo poo is super small.

Also, I think the same text copy pasted a few thousand times probably gzips a lot better than the actual thing. But, it will probably still be under a meg. MTG JSON, which is what I'm using, zips to just under a meg. The only thing you should need to download as required is card images. It'll probably end up being slower if you have to make an http request for every single card file.

Also, Pokemon cards may feel like they're simple, but there's some very tricky effects in there. You could get 95% of cards implemented in a snap once you have the basic rules set up, but those few remaining cards will end up making this a massive undertaking, especially once you realize that those cards also happen to be the ones that people want to play with.

it is posted:

Thanks for the suggestions guys, I'm pretty sure I know where I'm going with this.

And actually Pokemon cards pretty much all have very simple effects. This is probably the card with the highest density of weird special-case effects in Standard; if this were an MtG card, this would be a creature with a free activated ability "discard all cards attached to this creature. It becomes an Aura enchantment with with 'Enchanted Pokemon has protection from Mega Evolution Pokemon. Discard this enchantment at your opponent's end step.'"

kloa posted:

Playing around with C#/ASP.NET and I'm curious about DRY and LINQ queries.

Say I have something like this repeated many times throughout a project:

code:

var form = _conn.form.Where(x => x.id == form_id && x.user_id == user_id).First();
var formFields = _conn.form_fields.Where(x => x.form_id == form_id && x.user_id == user_id).First();
var attachments = _conn.attachments.Where(x => x.form_id == form_id && x.user_id == user_id).AsEnumerable();
...

Should I be creating a custom Where/extension method for "x => x.id == form_id && x.user_id == user_id" or is there a better way to go about this?

Munkeymon posted:

You can write an extension method that encapsulates that, sure. Might make more sense to establish a repository layer you can stick related functionality in (and then it becomes injectable for testing).

Are there no foreign keys linking form and form_fields or form_fields and attachments? You should be able to get attachments from eg. form_fields.Attachments if there are and you're using Entity Framework. Otherwise, your DB schema is probably janky.

Dr. Stab posted:

That looks exactly right.

LP0 ON FIRE posted:

Sort of a math question, but in java script: I remember someone telling me before a few years ago how to make a simple oscillator function without using sine. I think it just uses addition and subtraction. Anyone know what this is?

LP0 ON FIRE posted:

Sort of a math question, but in java script: I remember someone telling me before a few years ago how to make a simple oscillator function without using sine. I think it just uses addition and subtraction. Anyone know what this is?

LP0 ON FIRE posted:

Sort of a math question, but in java script: I remember someone telling me before a few years ago how to make a simple oscillator function without using sine. I think it just uses addition and subtraction. Anyone know what this is?