« first day (2337 days earlier)      last day (2836 days later) » 

00:00
Angular reads the cookie, passes it to a custom service which sends an HTTP with the token in the header...
That should be enough to deal with CRSF, no?
@Allenph very much so, yes
@Allenph especially if you're doing this
How the crap are you supposed to store the JWT then?
@rlemon why does this shit always happen to me?
I like the Auth header for authentication tokens...
@SterlingArcher had the idea of making wooden pull up handles that attached to an i-beam...
00:01
you can also store it in-memory and add it to each request, there are mixed opinions on that
what you think? glue + some good lag bolts should hold 90kg?
@ssube My deal is that management wants it to be like Facebook.
Where you get logged out after 7 days of inactivity.
Otherwise I would just store it in memory.
that sort of behavior is how you interpret the token, unrelated to where it lives
I need to persist the JWT.
The point is that I need to store the JWT.
Local storage is not secure.
I thought this cookie would work.
there is no secure storage on the client
that's why your token should be encrypted
00:03
...
Then how am I supposed to access the info? Some kind of RSA scheme?
yeah, it's no more complicated than SSL
In which case the problem is just abstracted because I need the client to generate a private key!
the server is the only one with keys, ideally
Then what's the point of a JWT?!
you can let the client decrypt, but that's unnecessary risk, most of the time
JSON tokens? they're super useful, it's all your session data
before that the cookie was a "unique" ID for a session in-memory on the server
00:05
@ssube Digitally signed tokens...
Right, you can go stateless.
they're difficult (or impossible, if done well) to forge, stateless, can be sent with existing (non-cookie) headers...
you can verify them as part of the decryption process
The app is over SSL, they login, I hand them a signed JWT, every request the JWT is refreshed and they get the new one back. The new JWT is stored in a cookie with the secure flag.
@ssube I know. I'm passing them back and forth in the headers.
I just need to store the JWT when they close their browser.
Which is what I'm doing with the cookie.
@rlemon oh my god I don't know why I didn't think of it -- he might be married and that was his husband
lol
or his boyfriend
Same last name
00:08
or some dude from grinder
I keep thinking about it... they were definitely not joke dicks, they were "im thinking about you" dicks
I'm very invested in this dick now
5
@ssube The whole map will always be loaded, and I have specific ideas that require any tile to have the potential to influence any other tile.
@Shane youtube.com/user/Jayscustomcreations/videos new channel I've been digging
FYI
good stuff
I'm thinking maybe I can limit it to push-notification style, so I only need to process linked tiles when something updates.
i'm glad apple got ride of magsafe now there is aftermarket solution that works on other laptops
00:10
ok im heading home
!!afk too much work
@ssube You had me all scared. I'm fine because I send the cookie's content in the headers.
@rlemon does it give you a woody?
yes, yes it does
watching this right now
thinking I should make one.
probably cheaper to buy one
decorative
I have a useful one
00:20
@SterlingArcher You rang?
@Zirak SterlingArcher is afk: too much work
Of course you have too much work, all you do is post imgur links and dick jokes
@rlemon I'm having a really hard time making a science lab on wheels in KSP, they keep popping tires and then rolling over and exploding
more tires, more struts
also, add SAS modules
not sure I have those
I have a weird collection of bits
how do you manage the science lab's power consumption?
00:37
lots of batteries and solar cells
01:12
and not all solar panels are created equal.
rovers aren't KSP's strong area.
01:24
yeah, it's a shame
I'd very much like to ship a few rovers and a factory over to the moon and start building a base
go oversize on wheels, if the big ones are unlocked. it helps.
but makes for bigger rovers..
I need to farm my space stations more to get the biggest wheels
the next ones up work for small stuff, but pop for large science trucks
01:42
so they explain what a grilled cheese is
and accompany it with a picture of a melt
cancer
Is a melt a grilled cheese with meat?
Basically
A grilled cheese only has cheese
> the bread is the crispy
too much. it probably squirts butter when you bite into it.
You're making me hungry
02:15
What's the best way to install node on a fresh ubuntu server?
wget the binaries and link them into some /bin directory?
or should I point aptitude at something that will actually have the latest node version?
02:31
sudo apt-get IIRC, but you gotta do nodejs and not node, node is something entirely different
I want the latest version though, not whatever old version they have
nvm fools
@shriek damnit, you can't wear several pairs of shoes at once
02:36
nvm is convoluted, messy, and requires a persistent shell between commands
@FilipDupanović life is fun that way.
persistent shell?
yeah, doesn't it mangle the environment?
it relies heavily on the environment, which means you can't really run it without a shell
unlike apt(-get/dpkg)
it also means that things with their own env won't pick it up
not true. All it does is it installs in .nvm directory and the command manages that for you.
@ssube I saw nodesource mentioned, but they want me to do crazy ass shit like curl -sL https://deb.nodesource.com/setup_7.x | bash
02:39
@david that script is an apt-key and an apt repo, you can add them manually
I usually prefer to create them myself rather than run the script
ah, just found the manual section further down
either way, it's a repo with signed packages
@david you won't like the Rust installer: curl https://sh.rustup.rs -sSf | sh xD
with the xD and everything?
I mean i'm completely okay with that stuff if i'm dicking around in a VM i intend to destroy
02:41
docker fool. :P
but i'm setting up a production server :S so I want to be at least a little careful
^ aye, docker
docker would be great, but it's not happening within the timeframe this requires
nah live dangerously, its more fun that way
@derp knows what it's about
@FilipDupanović have you been playing with rust?
02:44
I did a bit, because rustc can target asm.js and wasm, so I did a "hello world" and stopped
I'm glad that web assembly is finally happening.
Windows puts ads in it's file explorer now?
wow.
yeah, they announced at the end of Feb that they finished all the design specs and it should be landing in all 4 major browsers soonish
03:43
where can we file requests for new emojis?
04:24
@ssube I think it went well
30 people were there
that's a decent crowd
yeah, I think one of my friends recorded it
I'm happy that it's over
@rlemon I can't view this...
Getting a 404
 
2 hours later…
06:10
m o r n i n g room
god morgon o/
@david this looks nice getfedora.org/en/atomic, maybe for the next client
07:11
hy
@UmarJamil Welcome to the JavaScript chat! Please review the room rules. Please don't ask if you can ask or if anyone's around; just ask your question, and if anyone's free and interested they'll help.
is there any c# developer
probably
i have a question
feel free to ask
although you'd probably be better off in the C# room
07:12
i want to make my desktop application to be show in system tray and if i close the app it should be in the tray
oka towc give me the link of c# room
that's fairly unrespectful
find it yourself
07:25
@UmarJamil that's why I hated skype.
08:00
@UmarJamil Google it. Has been answered on SO many times.
hi sheepy
how's with you and the lamb ?
hello guys, I have a misunderstanding into a simple function, maybe someone can look a little bit
function validateMinValue() {
    var elems = $("#foo").toArray().slice(0, 2);
    var elems = $("#foo:lt(2)").toArray();


    elems.forEach(function() {
        if ($(elems).val() < 0.01) {
            $(".btm").attr("disabled", "disabled");
            alert("null or less than 0.01 value");
        } else {
            $(".btm").removeAttr("disabled");
            alert("we have values !")
        }
    });

}
the problem is I want to validate if one of the input fields has value < 0.01
if ($(elems).val() <--
and I really don't know why if one of the fields contain a value first if is ignored
here is also a fiddle jsfiddle.net/fvs6u/35
also, you have assigned two results to one variable. So the first one is "lost"
i guess that the first one has to be commented out
08:12
yes
one of the two variables is removed :|
@KarelG He's undergoing a growth spurt which, um, make me a bit stressful. Hand control is getting better, can play toys on his own now. Somehow does not smile or talk as often as he used to. He now loves action games more. :|
his age ?
@KarelG if I add that foreach function inside if should work ?
Four and a half months old~
-
was reading it as years
@BurebistaRuler you're using jquery but are converting it to vanilla js. Then there are duplicate id's in your DOM which isn't allowed ...
try to be consistent, jQuery has .each function to loop through a jQuery collection. Or use javascript's document.querySelectorAll
08:18
oh
damn
thank you !
and try to use console.log for debugging. Alerts are annoying
hint: in the jQuery's each function, use this.value to get the input value. You don't need to put it as jquery object
@BurebistaRuler Consider switching to vanilla. Your code is simple and it may be easier to debug since it's more direct.
@KarelG might make sense to explain what this is in that context
I know what "this" is bro, but thank you anyway :)
my fault was using forEach instead of $.each
@BurebistaRuler errr, don't forget to change the id ... (use a class name instead)
08:28
thank's :)
08:59
Does await "not-a promise"; wait for the next tick or does it run immediately ?
09:55
Wait a second
@BurebistaRuler An ID can only appear once in the page
There can't be two elements with the same ID.
yes, I know that :)
Ah, already told him, carry on :P
That was a mistake trying to create an example to shown with you guys :)
all fix and done now thank's to @KarelG :)
10:45
Hello
                    window.location.href = "avaliacoes2.php?menuId=" + id + "&pcat=" + pcat.options[pcat.selectedIndex].value;
i have that line
and i want to select variou select options
what is the function to use?
11:13
wat
javascriptbluetooth eh
12:18
does anyone know what kind of a rate limiting algo I'm dealing against with an API if there is "gas" mentioned?
Highly interesting article on v8's for in implementation: v8project.blogspot.fr/2017/03/fast-for-in-in-v8.html
2
Zirak has made a change to the feeds posted into this room‌​
Added the v8project feed
git push
12:34
5 messages moved to Trash can (feed spam)
@towc oh, I remember this
I think CEF probably killed that one
Hello .I'm learning System.js , and I see a lot of ways to add scripts to the map section. Sometimes it's a simple URL and sometimes it's like :
 'typescript': 'npm:[email protected]/lib/typescript.js',
Is that related to PLNKR itself ? ( I know what's NPM is ) or is it a convention of something....?
dunno, my educated guess is that that there looks like aliasing
so System.import('typescript') would give you that module, instead of what is the default package module
s/System\.//
@FilipDupanović mmm
Ok I'll keep digging
12:45
@RoyiNamir oh, seems this might be what you're looking for unpkg.com
@FilipDupanović Yeah but I dont see unpkg.com in the link in my pic
you have {paths: {'npm:': 'https://unpkg.com'}} configured
What can I say , you're the man
Thank you.
@FilipDupanović BTW how would I know the file section ?
https://unpkg.com/package@version/file
For example , this : https://unpkg.com/[email protected]/dist/typescript.js doesn't work
where's the dongle?
12:57
@RoyiNamir uhh, well you can do a quick npm view <package> to inspect package.json
that won't tell you the contents, you'll have to download the package locally and scan through
user5886482
Is any one know? how to get the information related to browser name,version ,Ip address in java
looking at repos doesn't also help (to find pre-built minified distributions), since these are build artifacts that only exist in published packages
@vinay " browser name,version" -----> google "get user agent in java" , ipaddress -----> google "get remote address header in java"
but I guess most of the time relying on the main/?browser module should do the trick

« first day (2337 days earlier)      last day (2836 days later) »