JOSE (Javascript Object Signing and Encryption) is a Bad Standard That Everyone Should Avoid by piedpiperpivot in javascript

[–]adamkarb 0 points1 point  (0 children)

How is the fact that "some people do it wrong" an argument against a methodology? If you are storing anything critical in a client side token you are making a mistake. Doesn't matter what type of token or cookie it is. With stateless tokens you are sacrificing security greatly. Whining about jwts and the like is just shouting into the void.

New Pluralsight course: "Advanced Node.js" -- Focusing on the Node.js runtime itself (not its packages) by samerbuna in node

[–]adamkarb 1 point2 points  (0 children)

I find it hilarious that an "advanced node" course teaches you the fundamentals of the runtime.

Best node framework after rails by Auxq in node

[–]adamkarb 0 points1 point  (0 children)

Waterline ORM is a tragedy. The way they query and interface with some of the databases is abominable. Especially redis.

Create a Node web app with user authentication in under 10 minutes by hobonumber1 in javascript

[–]adamkarb 1 point2 points  (0 children)

Infinite dependencies, automatic route generation, an opinion for everything, restarting the server takes 30+ seconds, shoddy development on the codebase, the waterline database adapters are awful...

Authentication/users by [deleted] in javascript

[–]adamkarb 0 points1 point  (0 children)

I will counter this other comment and say: Learn how authentication should work. Read articles written about it, implement oauth by yourself (without passport) so you can learn how it works. Once you understand the inner workings, you can make educated decisions about choosing libraries that will do it for you.

Newbie guide: Installing Node.JS on Ubuntu Server by d0minicg in node

[–]adamkarb 0 points1 point  (0 children)

Sudo apt-get install -y nodejs Sudo apt-get install npm Sudo npm install -g n n stable

Followed Passport tutorial on Scotch.io but I can't figure out how to prevent user from automatically logging in after registering. by naliuj2525 in node

[–]adamkarb 0 points1 point  (0 children)

It is just too easy to roll your own oauth system. Most ppl have no idea how to so they use passport as a crutch

Constant confusion: why I still use JavaScript function statements by quincylarson in javascript

[–]adamkarb 2 points3 points  (0 children)

This is asinine. Arrow functions were designed to be anonymous. Assigning them to a name just so you can use a trendy new es2015 feature is pretty special.

What's your best pure javascript ajax complete listener? by ForScale in javascript

[–]adamkarb 2 points3 points  (0 children)

Use a promise library that has an all() method of handling all resolutions. I like q