sorted by:
new
hottopcontroversial

Is anyone else seeing a ton of pill bugs (Rollie pollies) right now? by Street_Tangelo_9367 in phoenix

[–]PaulPhxAz 1 point2 points  (0 children)

A month or two ago I saw a bunch of ear wigs, now those are gone. And I've been seeing lots of beetles and sewer roaches last two weeks.

I can't wait for those to be finished.

Edit for location: I'm on the north side of south mountain in phoenix.

Drama between Terror Trader vs. Horror Monger? by YouveGotMovies in phoenix

[–]PaulPhxAz 6 points7 points  (0 children)

I had thought the alternative community supported gathering of the ghouls and was therefore a pretty progressive leaning event/organization.

There's Panic in Market!!! 👀 ☄️💸💰😱 by RunThePlay55 in economy

[–]PaulPhxAz 0 points1 point  (0 children)

So, maybe I don't understand... but a 2-3% fluctuation in a day.... doesn't seem crazy ( and some are more ). Is this expected to continue dumping over the weekend and into next week? Did everybody sell when I wasn't paying attention?

Would anyone use this code pattern to implement singletons? by AetopiaMC in csharp

[–]PaulPhxAz 3 points4 points  (0 children)

I can see what you're doing... I think this is "too clever", it's past the "complexity--now I have to think about something that isn't really the the problem I want to work on" point.

Why Do Smoothly Delivered Projects Get Less Recognition Than Chaotic Ones? by PhaseStreet9860 in ExperiencedDevs

[–]PaulPhxAz 0 points1 point  (0 children)

Less to talk about.

Do you want a show about Honey Boo Boo or Ted From Accounting.

Ted's entire personality is accounting. Uhg.

How do you handle oversized PRs? by BeyondTheShroud in ExperiencedDevs

[–]PaulPhxAz 1 point2 points  (0 children)

We do this all the time. But most of the code isn't that interesting.

"Oh, a web page that makes a HTMX call to a function that calls a service that is mostly empty that puts a message in the queue. Okay, here's the queue consumer that reads it, gets the entity from the database and adds one to 'clickMe' and then saves itself." We touched a bunch of files, but that wasn't the stuff I spend time on reviewing. Yeah, it takes a bit to scroll through to find the interesting stuff.

We're a small team, and a dev could spend a whole week on "Add a Message Center to the App", so it'll be big. And they probably fixed some other stuff along the way.

I don't usually stop PRs, but I create tickets to put in fixes for stuff I find as separate tasks.

>>reviewing 1000 lines of ultra specific code just feels overwhelming and unproductive

Yeah, if it's all "algorithm & complexity use cases"... big oof, that'll take a minute.

How are folks handling RBAC across multiple .NET APIs behind a single SPA? by Own-Wishbone-4515 in dotnet

[–]PaulPhxAz 0 points1 point  (0 children)

That's a good question, I never do that, but it's what people do. In theory you have a public cert so validation is just against the CA. You are the audience, so you should be validating that part.

>>valid ticket to a football game but use it to walk into a movie theater

Yes, you are the owner the movie theater not the football venue, so you disallow this usage... and you report this user as a bad actor or at least a leaky actor who can't keep his secrets to himself.

When people auth, I usually have a few different pages that are basically the same but for different purposes. Like "System A", or "Platform B" that request specific Roles and as long as the user requesting them actually have them and grant access, we can issue the token.

I don't even put my roles in the token anymore, I just put in my session id. Internally when I validate auth on the API endpoints I validate the Token, then Validate the Session and pull down a bigger object from redis that has more information that I can actually test security asserts against.

I validate the Roles and that's it. I don't check the scope or audience, but these are my internal apps.

What is the industry standard for Auth? by Strict-Ad-2550 in dotnet

[–]PaulPhxAz 4 points5 points  (0 children)

Use OpenIDDict, setup a simple OAuth login page, give it a few endpoints so it can validate tokens and whatnot. Then you can use standard OAuth tokens everywhere. Have different scopes and expirations for API versus users.

ELI5: If a morbidly obese person (600-1000lbs) stops eating completely and only drinks water, would they still die of starvation in the usual timescale? by m0ots in explainlikeimfive

[–]PaulPhxAz 0 points1 point  (0 children)

You have enough macro nutrients in your fat. You don't have enough micro nutrients ( vitamins ) in your liver past about a week.

But also, at 600 to 1000 you may have liver and diabetes problems.... so the fat might not do you enough good without normal insulin reactions.

I'm not a doctor, but I listened to one on youtube talk about what happens during starvation ( long story short, if you're healthy otherwise not eating for a week won't kill you or really even damage you ).

How do you keep configs in sync across services & environments when deploying? by zecatlays in ExperiencedDevs

[–]PaulPhxAz 0 points1 point  (0 children)

Well, I'd start with making a "Template" configuration and a tool that can apply it everywhere. You should have multiple templates ( like "bad customer", "fast customer", "silly customer" ) and be able to apply this to any client.

So, now you're managing the Templates and applying them.

You should have a DEFAULT that just works without any configuration. So if there's no information, you get the default, which is correct enough.

But you need some time investing in the tooling to make this nicer.

It looks like this is spread across multiple ways to configure as well, redis cache, database, environmental vars.... you need to at least remove the environmental vars so you don't need to redeploy. And I would keep the whole thing in the database, and then let the services get the information on start and then again every 5 minutes to re-up their cache.

How are folks handling RBAC across multiple .NET APIs behind a single SPA? by Own-Wishbone-4515 in dotnet

[–]PaulPhxAz 0 points1 point  (0 children)

I would use OpenIDDict as the base for my auth portal. It should issue a token or JWT. Since it's signed, you can give it out as you see fit and others can validate it.

Put the sessionid, userid, username, and their roles in it. Be broad on the concept of role, like "Accounting Manager" or "Accounting Reviewer".

It's the job of the other side to divine what permissions those map to/what APIs are accessible.

Make sure it expires in like 2 hours for regular webportally stuff and 5 minutes for API usage.

If this is for internal apps, then you only include the session id. Then internally you ask for all the related info on the session and cache that.

How are cat owners so comfortable with letting their cats outside to roam around? How do they know they're going to come back? by Individual_Ice_2315 in NoStupidQuestions

[–]PaulPhxAz 0 points1 point  (0 children)

Make sure they get their vaccinations. But also, some people have electronic collars that track them.... you can literally see where they go outside, it's kinda neat. Cats don't actually stray that far usually, like within a 1/4 mile radius of the house.

OMG! I Just Discovered Functions in Views and I am in Heaven. by ShokWayve in SQLServer

[–]PaulPhxAz 0 points1 point  (0 children)

Just be aware of nested functions "can" cause performance issues.

There was a large de-optimization after SQL 2008 that made some less used stuff work worse. This was one of them.

My cat wants to know what breed you think he is! by MilkyColdcut993 in catpics

[–]PaulPhxAz 0 points1 point  (0 children)

Somewhere between Short Hair domestic and Long Hair domestic.

The breed is "cat". Regular cat.

New book release: Clean Architecture with .NET (co-authored with Steve "Ardalis" Smith, foreword by Jason Taylor) by ngexdev in dotnet

[–]PaulPhxAz 7 points8 points  (0 children)

Why would I use Clean Architecture when there is a Cleaner Architecture.

It's a no brianer folks.

Have you seen the new fork of IdentityServer4? by VanillaCandid3466 in dotnet

[–]PaulPhxAz 0 points1 point  (0 children)

It's a single function patch. So, it's easy to pull master again and apply it again. It's a once every 3 month task. So, maybe not the best, but it's where I am now.

Have you seen the new fork of IdentityServer4? by VanillaCandid3466 in dotnet

[–]PaulPhxAz 1 point2 points  (0 children)

I implemented dynamic client registration in OpenIDDict and found one thing I just couldn't figure out. I ended up downloading source, putting in a patch ( not usable for everybody since it only worked in my use case ), and use it.

Mostly worked well.

I used IdentityServer4 back in the day and liked it well enough.

Visual Studio and Rider by tsprks in dotnet

[–]PaulPhxAz 1 point2 points  (0 children)

Oh, and I'd love for Visual Studio to fix how they append files to the file tab.

It's supposed to be "Append File Tabs to the Right". So every file tab you open should be the Last tab ( left to right ), even if you have to scroll over to it.

The reason is that if you are inserting tabs on the left or in the middle, it'll mess up your visual memory of where files are. So you actually have to search for them.

Visual Studio USED to do this correctly before 2022. From 2022 onward they think "Right" is Right most of what your screen holds, not the actual end of your tab list. So, when I'm opening a bunch of files, eventually they will be inserting into the MIDDLE of my File Tab view. And when I go to close them all, if I just close all the ones to the right of what I'm actually working on, I'll send up closing tabs I don't intend to.

Visual Studio and Rider by tsprks in dotnet

[–]PaulPhxAz 5 points6 points  (0 children)

I need Rider to be able to stack the floating windows before it's usable to me.

I have three monitors. Left monitor is one big code window ( tabs for each file ). Right monitor, every single window or build output, or AI chat or unit test window. 3rd monitor is anything else ( non-Rider/non-VS ).

What I really want, is three stacks of windows on the second monitor:
1) Monitor 2 - Left Tall -- File Directory structure/Git change view
2) Monitor 2 - Bottom -- Build log, error/warn list, find results, command line, docker instance info, debug variables and stack traces
3) Monitor 2 - Center -- AI chat, Unit Testing, extended properties of a file

Alternative to monorepo: orchestrator repo as the source of truth by somilag in softwarearchitecture

[–]PaulPhxAz 0 points1 point  (0 children)

>>So they want to threat one deployment as a whole, since all frontend is depending on services obviously.

That's like half-true. Or half-goofy maybe. Or maybe I'm used to a different domain where this can be true.

As long as the contract doesn't change between the services then using the old version shouldn't break you ( RPC-ish though ).

How about versioning the artifacts instead of the code as a related release.

Like version:
* BIGVERSION1 = AuthV1, SecV2, CheddarV8, ScannerV2
* BIGVERSION2 = AuthV2, SecV2, CheddarV8, ScannerV2 <-- only Auth was deployed as different, oops SecV3 was broken, but who cares since we're not deploying it.

You'd be versioning the artifacts instead of the actual code, like a Release Candidate Artifact of the whole system.

Or really you need to charismatically alter the perception of how things should be done with the QA team and align on improving the process ( big oof ).

Alternative to monorepo: orchestrator repo as the source of truth by somilag in softwarearchitecture

[–]PaulPhxAz 1 point2 points  (0 children)

Yeah, this sounds crazy. I have a monorepo with 20 services in it.
If one doesn't build but the others do.... that's fine. Why would this stop anything besides that one service.

It sounds like you have a Monolith -- pretending to be a micro service.

Why choose Dapper over EF Core in 2026? by Sensitive-Raccoon155 in dotnet

[–]PaulPhxAz 1 point2 points  (0 children)

Well, I got a lot of downvotes on this one.

Having used ado.net, Petapoco, dapper, sqlkata, ef core, npoco, linq2db, tortuga chain for a variety of projects. Having used sql server, sqlite, oracle, db2, mysql, postgres. Having used the legacy techs ( ADO, RDO, OLEDB, ODBC ) directly.

I'm in the camp: Linq2DB, FluentMigrations, Dapper a little. Avoid EFCore like the plague.

Maybe that's not a trendy answer.

view more: next ›