DEV Community: aben

How do you verify an email for sign-up ?

aben — Thu, 28 Jul 2022 13:33:00 +0000

Hi folks,
I hope you are doing well !

Please let me know what do you think about this ?! because I already implemented a basic verification mechanism.

So this was my response to someone asking for the same question:

I came across a Reddit post where one explained that one click on the link is not sufficient and might lead to errors and a failure of the verification. The logic is simple and legit, when the email containing the link is received, there might be link scanners (bots) on the SMTP server (Outlook, Gmail etc). Just like when you past a link on major social platforms, there is always a bot that hits the link. I did not try it myself but I believe Outlook scans some links (when you copy past a link it is converted to a thumbnail with page's content). So this process oblige you to do a verification by two steps, and I personally think of these two methods:

Maybe when the user clicks, he needs to past his own password used for sign-up (looks fine).
Or provide a one time password with the email so that the user along with the verification link (maybe split then re-concat) the same token you send for verification and ask the user to enter that second part (this seems easier).

Thanks !

Authentication strategy todos

aben — Sun, 29 May 2022 20:12:28 +0000

Hi friends,
I try to remember myself what is the normal and secure flow of an authenticated vs unauthenticated user. I've been using the web for eternity but I would like to be sure and maybe you guide me through this.

What are authentication rules ?

For instance, an authenticated user cannot sign-in until he/she sign-out. He cannot sign in while being signed in already. What about redirections after these actions... etcetera.

Is there any web resource to follow on this ?

Of course I'm using no library and implementing it myself via JWT.

All I need is a list to follow.

Thanks a lot 😀

await, then, return?

aben — Sat, 21 May 2022 06:21:04 +0000

Hi,

I'm using Sharp for compressing uploaded user images. I want to be sure that my approach is safe and performs in theory for all cases.

I'm rather hesitant, as I didn't set proper testing yet and for now I didn't deploy the app but doing big refactoring on the code then I will test everything the next days.

I am hesitant if my code is correct, and would like to hear from you also about it. Here it is:

const width_ = 200
try {
    thumbnailBuffer = await sharp(originalBuffer)
        .metadata()
        .then(({ width }) => {
            if(width > 400) {
                return sharp(originalBuffer)
                    .resize(Math.round(width * 0.5)).toBuffer()
            } else if(width > 200){
                return sharp(originalBuffer)
                    .resize(width_, { fit: 'inside' }).toBuffer()
            } else {
                return undefined
            }
        })
} catch (error) {
    req.log.error(`post/listings#postListingHandler#sharp: ${error.message}`)
}

Will thumbnailBuffer contain a value of a new buffer or a promise or this whole thing is incorrect ?

Thanks a lot !!

Looking for a devOps to assist setting a web service

aben — Tue, 10 May 2022 11:13:14 +0000

Hi,
I'm looking for a devOps with an experience in Linux systems. I will be deploying a NodeJS web-app on AWS EC2.

Stack specification:
MERN: NodeJS, MongoDB and Redis
Jenkins or other CI tool (non Java based preferably)
Other dependencies: pm2, node-gyp, webpack.

I'm looking for collaboration so I'm asking for a free assistance.
The project is not monetized and there is no business behind yet!

I will be working so much on it fixing bugs in the web-app itself before going prod. But I would like to see a dev version online...

If it works out well and then you want to be a collaborator, this is very feasible, we could arrange that.

It is a web-app of a year of work, it is BIG ! and sadly I have no business nor money yet to pay for it..

Thanks :)

visitor-counter: tracking the amount of visitors on your website

aben — Thu, 07 Apr 2022 06:51:00 +0000

Hello friends,
I'm happy to be back !

Disclaimer: I'm not the author of visitor-counter but I think it needs some attention.

I started using visitor-counter as a Fastify plug-in with minor tweaks as it is intended to integrate Express apps. Nevertheless, I think it's an amazing plug-in to talk about, as some nice repos might go and age unseen.

I talked with author about supporting other web (API/routing) libraries like Fastify, Koa, Nest ... So this post is to have a little kick back to the author. You may give him a star, and better if you could test it and advance support of other libraries.

Demo: https://counter.xxxxxxxxxx.xyz/

The reason why I'm liking it very much, is because I was looking for a visitors analytics solution; Well, I couldn't find any solution to integrate to my web-app, all other solutions are big tech, docker based, with so much constraints (separate service, so CORS, certificates, DB... ).

This is it for visitor-counter, I hope you like it, give him a star if you do :)

Have a nice day!

Any performant solution to link to a thumbnail instead of an image

aben — Thu, 31 Mar 2022 09:19:46 +0000

Hello friends,

I'm happy to be back and I hope you are doing well!

I have a question today. Is there in the web of today, a technology, library, API, standard or any solution to be able to have a thumbnail from an image living publicly on the internet on the fly ?

The reason is obvious, caring about UX so that in users browsers they have a thumbnail instead of the big picture (on the fly hopeful).

I think of a serverless function on AWS or other provider, to do the compression and resize on the fly ? what do you think ? any other
easier solution ?

Take care!