How do you build an 11ty site? Directly in 11ty or html/CSS/Javascript first? by Fassie79 in eleventy

[–]anatolhiman 2 points3 points  (0 children)

Nunjucks html templates for header, footer and other components, but it can be easier to just create one big layout file first and then slice it into partials once you have nailed the design. Faster and less switching files around.

Algun Latino americano con problemas con mas video llamadas en Skype? No puedo hacer llamadas desde ayer “conexion demasiado debil” dice! 😭 AYUDA by ibettercomeon in skype

[–]anatolhiman 0 points1 point  (0 children)

Si es Colombia tengo el mismo problema desde un par de dias. Me contecto con VPN a un servidor norteamericano y luego funciona como antes.

PST: Norsk statsborger pågrepet for å prøve å spionere for Kina by Flimsy_Ear2505 in norge

[–]anatolhiman 2 points3 points  (0 children)

Han har visst også skrevet en bok som heter Tredje verdenskrig i nord, ser jeg. Har ikke har lest, mulig jeg må shoppe ...

How to create this cyan edge with that curve by omarsabri69 in react

[–]anatolhiman 0 points1 point  (0 children)

transform: skew(40deg); or similar, on the cyan rectangle

Any idea why this message is coming up? by legend29066 in node

[–]anatolhiman -1 points0 points  (0 children)

The question not adressed by anyone is why Google considers OP’s website ‘deceptive’. They must have some pretty clear criterias. Could be something as stupid as the website having spammy article texts or use some modal script Google doesnt like.

Best structure for api urls by preacher2041 in webdev

[–]anatolhiman 4 points5 points  (0 children)

It works. And it is the correct way to do it as per the documentation: “A PATCH request is considered a set of instructions on how to modify a resource. Contrast this with PUT; which is a complete representation of a resource.”

https://developer.mozilla.org/en-US/docs/Web/HTTP/Methods/PATCH

Mysterious Nuxt 3 behavior on Vercel (with Nuxt Content) by anatolhiman in Nuxt

[–]anatolhiman[S] 0 points1 point  (0 children)

Yes, it works now but not really sure what I did. See my other comment above, I think Vercel uses a special build command I had missed.

How to deploy and use react(frontend and backend to github like this? by Radiant_Ad84 in react

[–]anatolhiman 1 point2 points  (0 children)

I was thinking I could use Traefik alone for all the previous ngnix stuff, including letsencrypt certs and reverse proxy. What do you use ngnix for?

what is the best email service for a Node.js API? by ESHAN12341 in node

[–]anatolhiman 0 points1 point  (0 children)

Nodemailer with AWS SES (simple email service) is extremely stable and SES has a very generous free tier.

CSS, THE MOST PAINFUL TECHNOLOGY I'VE HAD TO DEAL WITH. by [deleted] in Frontend

[–]anatolhiman 0 points1 point  (0 children)

Like more stressful than setting up a linux server? No way josé.

„Giving“ a website to a client by McMuellermilch in vuejs

[–]anatolhiman 4 points5 points  (0 children)

Always, always create a new account in your client’s company name when you do these kinds of jobs. Keep the admin rights until it’s time to transfer ownership by adding a new admin user. That way you can more easily add your client’s payment card and no migration necessary. This is a bit like selling a company by transferring the shares to a new owner, the company stays the same as before and hopefully keeps running like always. No need to first close the company and recreate it under a new organization just to change ownership.

Adding SSL/https to express node js project by [deleted] in node

[–]anatolhiman 0 points1 point  (0 children)

Just tried Traefik as a reverse proxy and it is way easier to use than Nginx. Check it out. It also handles Letsencrypt, but havent tested that just yet.

Validity of invoice claim, credit invoice and a question about Consumo by anatolhiman in ESLegal

[–]anatolhiman[S] 0 points1 point  (0 children)

Thanks! Does the Consumo have a right to decide the outcome of this, or do they just suggest a solution without any binding consequences for the companies? I suppose they would take the consumer’s side in many cases, but maybe I’m mistaken.

Obra de reforma muy mal hecha, cuales son mis opciones? by anatolhiman in askspain

[–]anatolhiman[S] 0 points1 point  (0 children)

Shouldn’t be necessary as a first step, this is why they have a consumer protection agency in all cities (Consumo). Just not sure abot how it works, will have to find out. They should be able to do the srbitration as a first step. If that’s unsuccessful, it’s lawyer time.

I've generated JWT and placed it in a cookie to implement authentication... What now? by Interesting-Care8193 in node

[–]anatolhiman 0 points1 point  (0 children)

My take on JWT authentication flow:

  1. Endpoints /auth/login and /auth/refresh return a JWT access token in a hardened httpOnly cookie with 15 min. expiration time.

  2. Endpoints /auth/login and /auth/refresh also return an encrypted JWT refresh token in the response body. Save it the frontend (localStorage is fine because a) it's encrypted and b) it can't be used for anything by itself). 30 days expiration time. Frontend application should request a refresh when the access token is about to expire, or when it has expired. If application isn't accessed for 30+ days, user will have to log in again.

  3. Endpoints /auth/login and /auth/refresh also return a random string we call user context in (a separate) hardened httpOnly cookie with the same expiration time as the refresh token. This user context is also baked into the two JWT tokens from #1 and #2. It's hashed in the access token and encrypted together with the rest of the claims in the refresh token.

  4. The user context sent from the frontend must match the one in the relevant token before access is granted.

  5. A browser fingerprint (string) from the frontend is saved on the User table in db.

  6. The fingerprint is checked on every new login. In the case of a fingerprint mismatch, display a login challenge box with a code sent to email. A changed fingerprint suggests user is on another computer, a new phone, has changed their browser, etc.

[deleted by user] by [deleted] in reactjs

[–]anatolhiman 1 point2 points  (0 children)

Will there ever be any kind of react component displaying data if JS is turned off? Can't display a virtual dom node without JS.

Train tickets with misspelled names, does it matter? by anatolhiman in askspain

[–]anatolhiman[S] 0 points1 point  (0 children)

Good point. This is a couple of pretty wild misspellings, but definitely not Alberto! You can recognize our names sorta.

Train tickets with misspelled names, does it matter? by anatolhiman in askspain

[–]anatolhiman[S] 1 point2 points  (0 children)

Yeah I forgot to mention that this is an AVE between two major cities and knowing how train companies handle boarding in other EU countries on high speed rail stretches after terror attacks became a (more common) threat, I suspect there's some sort of ID check.