oli oliverjam

Vim Manipulation Cheat Sheet

Action

Key	Result
`v`	select
`y`	copy (yank)
`c`	change
`d`	delete

Stop using JWTs!

TLDR: JWTs should not be used for keeping your user logged in. They are not designed for this purpose, they are not secure, and there is a much better tool which is designed for it: regular cookie sessions.

If you've got a bit of time to watch a presentation on it, I highly recommend this talk: https://www.youtube.com/watch?v=pYeekwv3vC4 (Note that other topics are largely skimmed over, such as CSRF protection. You should learn about other topics from other sources. Also note that "valid" usecases for JWTs at the end of the video can also be easily handled by other, better, and more secure tools. Specifically, PASETO.)

A related topic: Don't use localStorage (or sessionStorage) for authentication credentials, including JWT tokens: https://www.rdegges.com/2018/please-stop-using-local-storage/

The reason to avoid JWTs comes down to a couple different points:

The JWT specification is specifically designed only for very short-live tokens (~5 minute or less). Sessions

Stuff I wish I'd known sooner about service workers

I recently had several days of extremely frustrating experiences with service workers. Here are a few things I've since learned which would have made my life much easier but which isn't particularly obvious from most of the blog posts and videos I've seen.

I'll add to this list over time – suggested additions welcome in the comments or via twitter.com/rich_harris.

Use Canary for development instead of Chrome stable

~~Chrome 51 has some pretty wild behaviour related to console.log in service workers. Canary doesn't, and it has a load of really good service worker related stuff in devtools.~~

	import { riff, route, html, indexRoute } from "../riff/riff.mjs";
	import { serve } from "../riff/riff-express.mjs";
	import {
	deleteTask,
	getProjects,
	getTasks,
	getUser,
	sendEmail,
	updateTask,
	createTask,

	name: Release

	on:
	push:
	tags:
	- v*

	jobs:
	create-release:
	runs-on: ubuntu-latest

	import SwiftUI
	import PlaygroundSupport

	struct ContentView: View {
	var body: some View {
	Text("Hello World")
	}
	}

	PlaygroundPage.current.setLiveView(ContentView())

	import { writable } from 'svelte/store'

	// returns a store with HTTP access functions for get, post, patch, delete
	// anytime an HTTP request is made, the store is updated and all subscribers are notified.
	export default function(initial) {
	// create the underlying store
	const store = writable(initial)

	// define a request function that will do `fetch` and update store when request finishes
	store.request = async (method, url, params=null) => {

	import { ApolloServer, gql } from 'apollo-server-micro';

	const typeDefs = gql`
	type Query {
	sayHello: String
	}
	`;

	const resolvers = {
	Query: {

	let UserContext = React.createContext();

	class App extends React.Component {
	state = {
	user: null,
	setUser: user => {
	this.setState({ user });
	}
	};

	:root {
	--ease-in-quad: cubic-bezier(.55, .085, .68, .53);
	--ease-in-cubic: cubic-bezier(.550, .055, .675, .19);
	--ease-in-quart: cubic-bezier(.895, .03, .685, .22);
	--ease-in-quint: cubic-bezier(.755, .05, .855, .06);
	--ease-in-expo: cubic-bezier(.95, .05, .795, .035);
	--ease-in-circ: cubic-bezier(.6, .04, .98, .335);

	--ease-out-quad: cubic-bezier(.25, .46, .45, .94);
	--ease-out-cubic: cubic-bezier(.215, .61, .355, 1);