zaiste

const { compile } = require('pure-engine')
const escape = require('escape-html')
const fs = require('fs-extra');

async function example() {
  const content = await fs.readFile('./index.html');
  const { template } = await compile(content.toString())
  console.log(template({ foo: 'bar' }, escape))
}

zaiste

Creating Secure REST APIs in Node.js without JWTs

Before we go on creating an actual RESTful API, let's address the elephant in the room: how to make an HTTP endpoint sufficiently secure in Node.js ?

I say sufficiently because, the topic of security is broad and constantly evolves. This article is a response to other Node.js articles I've seen that contain security mistakes. It may not be perfect, either, but is hopefully a good evolution on the topic.

Check the full article.

zaiste

zaiste

const Szelmostwo = require('./');
const { ok, json, created } = require('./response');

const { serve, security } = require('./middleware');

const app = new Szelmostwo();

app.get(
  '/',
  security(),

zaiste

const Szelmostwo = require('./');
const { ok, json, created } = require('./response');

const app = new Szelmostwo();

app.get('/', async ({ params }) => `Hello, uWS -> ${JSON.stringify(params)}`);
app.get('/throw', async ({ params }) => {
  //
  throw 'Bajlango';
});

zaiste

const Szelmostwo = require('./');
const { ok } = require('./response');

const app = new Szelmostwo();

app.get('/', async _ => ok({ hello: 'world' }));

app.listen(3000);

zaiste

zaiste

Node.js, PostgreSQL Authentication & Session Management

The following flow is implemented in Huncwot - Macro framework for monolithic JavaScript applications, with batteries included.

Setup

Register/Signup

login/signin corresponds to a create method (a HTTP POST action) for Person entity.

zaiste

.password
Downloads/

zaiste

Debugger entered--Lisp error: (wrong-type-argument stringp nil)
  string-match("^/tmp_mnt/" nil)
  abbreviate-file-name(nil)
  #f(compiled-function (file name) "Look up the directory hierarchy from FILE for a directory containing NAME.\nStop at the first parent directory containing a file NAME,\nand return the directory.  Return nil if not found.\nInstead of a string, NAME can also be a predicate taking one argument\n(a directory) and returning a non-nil value if that directory is the one for\nwhich we're looking." #<bytecode 0x43bbfe51>)(nil ".git")
  funcall(#f(compiled-function (file name) "Look up the directory hierarchy from FILE for a directory containing NAME.\nStop at the first parent directory containing a file NAME,\nand return the directory.  Return nil if not found.\nInstead of a string, NAME can also be a predicate taking one argument\n(a directory) and returning a non-nil value if that directory is the one for\nwhich we're looking." #<bytecode 0x43bbfe51>) nil ".git")
  (if (file-remote-p defaul