Dmytro culttm

INTRO

Concurrency is a domain I have wanted to explore for a long time because the locks and the race conditions have always intimidated me. I recall somebody suggesting concurrency patterns in golang because they said "you share the data and not the variables".

Amused by that, I searched for "concurrency in golang" and bumped into this awesome slide by Rob Pike: https://talks.golang.org/2012/waza.slide#1 which does a great job of explaining channels, concurrency patterns and a mini-architecture of load-balancer (also explains the above one-liner).

Let's dig in:

Goroutines

Про токены, JSON Web Tokens (JWT), аутентификацию и авторизацию. Token-Based Authentication

Last major update: 25.08.2020

Что такое авторизация/аутентификация
Где хранить токены
Как ставить куки ?
Процесс логина
Процесс рефреш токенов
Кража токенов/Механизм контроля токенов

Make NestJs returns 404 when EntityNotFoundError exception is thrown

When using findOrFail() or findOneOrFail() from typeORM, a 500 error is returned if there is no entity (EntityNotFoundError).

To make it returns a 404, use an exception filter as described in https://docs.nestjs.com/exception-filters .

file /src/filters/entity-not-found-exception.filter.ts

	/* function that used as middleware */

	accessToken: async (name) => {
	if (typeof document === "undefined") return "";
	let token = document.cookie
	.split(";")
	.filter((cookie) => cookie.startsWith("token"))[0];

	if (!token) {
	const response = await fetch("/api/refresh", { method: "POST" });

	// app/modules/authentication/authentication.controller.ts

	import { Body, Controller, Post } from '@nestjs/common'

	import { RegisterRequest } from './requests'

	import { User } from '../../modules/user'

	import { UsersService } from '../users/users.service'

	map $sent_http_content_type $expires {
	"text/html" epoch;
	"text/html; charset=utf-8" epoch;
	default off;
	}

	map $http_upgrade $connection_upgrade {
	default upgrade;
	'' close;
	}

	#!/bin/bash

	set -euo pipefail

	openssl req -new -text -passout pass:abcd -subj /CN=localhost -out server.req -keyout privkey.pem
	openssl rsa -in privkey.pem -passin pass:abcd -out server.key
	openssl req -x509 -in server.req -text -key server.key -out server.crt
	chmod 600 server.key
	test $(uname -s) = Linux && chown 70 server.key
	docker run -d --name postgres -e POSTGRES_HOST_AUTH_METHOD=trust -v "$(pwd)/server.crt:/var/lib/postgresql/server.crt:ro" -v "$(pwd)/server.key:/var/lib/postgresql/server.key:ro" postgres:12-alpine -c ssl=on -c ssl_cert_file=/var/lib/postgresql/server.crt -c ssl_key_file=/var/lib/postgresql/server.key

	let isRefreshing = false;
	let refreshSubscribers = [];

	const instance = axios.create({
	baseURL: Config.API_URL,
	});

	instance.interceptors.response.use(response => {
	return response;
	}, error => {

	// Async/Await requirements: Latest Chrome/FF browser or Babel: https://babeljs.io/docs/plugins/transform-async-to-generator/
	// Fetch requirements: Latest Chrome/FF browser or Github fetch polyfill: https://github.com/github/fetch

	// async function
	async function fetchAsync () {
	// await response of fetch call
	let response = await fetch('https://api.github.com');
	// only proceed once promise is resolved
	let data = await response.json();
	// only proceed once second promise is resolved