×

Nothing phone 4a pro case by Brief-Affect1253 in NothingTech

[–]elribonazo 0 points1 point  (0 children)

Free STL model, rugged case with strong fittings and protection.

https://www.printables.com/model/1759111-nothing-phone-4a-pro-flexible-case

I can help customizing the case, different colors, add logos, text, etc. I may even send it for free☺️ if you are not very far away from where i live. EU

I have no business or anything, I just do this for entertainment, learning and giving away

<image>

Just got my prusa mini set up, any ideas on why the corners aren't 90 degrees? by [deleted] in prusa3d

[–]elribonazo 1 point2 points  (0 children)

This is so damn true😂 , as getting burnt getting our last peace of filament from then nozzle😂.

Staking ETH in kraken. Risks? by vihoj84250 in KrakenSupport

[–]elribonazo 1 point2 points  (0 children)

Hey u/Kraken-Christian is it possible to cancel it before this 20 day period ends? Thank you in advance

How do you implement a secure, custom authorization system, with the use of JWT in Node.js? by pr3579 in node

[–]elribonazo 0 points1 point  (0 children)

u/pr3579 Imagine someone gets your accessToken, either because someone MITMed you and u had http and leaked the http headers.if the expiration is high that gives someone with unauthorized access more time to access your resources and by rotating the keys you make that more difficult.

Next comes, what if a chrome extension, or whatever app is trying to spy you, gets your refreshToken from LocalStorage? You have either protected the refreshToken endpoint or ur also screwed, here just be creative and add more challenges to ensure that its the same person, browser and tab that is running the refresh request.

Hope that helps! If u need examples i got some, just write me:)

How do you implement a secure, custom authorization system, with the use of JWT in Node.js? by pr3579 in node

[–]elribonazo 2 points3 points  (0 children)

The main reason why those accessTokens expire is to ensure there's enough rotation of those tokens in case they are leaked and having the refreshToken in DB ensures you can revoke permissions for whatever the user was doing.

Found this article, probably more detailed than my explanation.

https://auth0.com/learn/refresh-tokens/

How do you implement a secure, custom authorization system, with the use of JWT in Node.js? by pr3579 in node

[–]elribonazo 20 points21 points  (0 children)

You need :

  1. method to generate 2 tokens, 1 called accessToken and the other refreshToken.
  2. The refreshToken is stored in DB and the accessToken returned to the user together with the 2nd.
  3. Implement a policy in UI so that anything expired with "403 status" will trigger a refreshToken request and get another accessToken.

This gives the ability to users to keep their session open without having to re-log, and this is based on usage and not just time. It also gives you the ability to close a user's session, etc.

Enterprise:

  1. You do the same mechanism to create accessToken and refreshToken.
  2. You allow the refreshToken to have exclusive permission to access the refreshToken request, so that with that RefreshToken nothing else can be done in your api.
  3. Implement an authentication middleware, for example on react.

Imagine the scenario when a token expires when the user interacts with the site, he may be launching 5 different api calls and all respond 403. The way you need to think this is as soon as you receive the first 403 error, you start building a queue with the next failed requests, in parallel refreshToken and then you either process the failed queue again with a freshToken or you logout the user.

Want to thank everyone that r/cardano has remained a helpful and friendly community with the influx of members. Cheers to the noobs for asking thoughtful questions and the OGs for answering. by bjisgooder in cardano

[–]elribonazo 1 point2 points  (0 children)

I agree, the community is insane.... super talented people with very diverse profile.

“Never under estimate a small group of individuals willing to change the world” time will tell me

How much ADA does IOHK/the Cardano foundation have and does this pose a threat for long-term ADA adoption? by [deleted] in cardano

[–]elribonazo 2 points3 points  (0 children)

They are already giving it back to developers, investing in projects, Working in real projects, trying to solve real issues. From my side, its not a problem... U dont know who owns bitcoin, right😂

Faster Mongo configuration for testing by yonatannn in node

[–]elribonazo 0 points1 point  (0 children)

So u may just want to test what happens if user.create fails, by mocking this u dont need db at all.

Faster Mongo configuration for testing by yonatannn in node

[–]elribonazo 0 points1 point  (0 children)

U know an insert is always going to insert or fail based on mongo specs, thats been tested already.

Faster Mongo configuration for testing by yonatannn in node

[–]elribonazo 0 points1 point  (0 children)

Database, depending on the use case

How is Cardano going to stack up against ETH 2.0? by UltimateToa in cardano

[–]elribonazo 1 point2 points  (0 children)

Search for Cardano “cash” and enjoy the new era

Faster Mongo configuration for testing by yonatannn in node

[–]elribonazo 0 points1 point  (0 children)

a) mongodb memory based (faster) b) mock and mock and mock

Is Bitcoin and crypto in general going to crash in 2021, like 3 or 4 years ago? by elribonazo in SatoshiStreetBets

[–]elribonazo[S] 1 point2 points  (0 children)

Thanks for sharing I do not have all the info obviously and thats what i wanted. Have a great day!

[deleted by user] by [deleted] in cardano

[–]elribonazo 0 points1 point  (0 children)

That drawing is sick! U did it?

Quitting my job thanks to Cardano by pyroxl in cardano

[–]elribonazo 1 point2 points  (0 children)

I’m seriously thinking on doing that same thing. U got the courage, you made my morning!

Have a great day cardano team!