Posts

This profile is from a federated server and may be incomplete. Browse more on the original instance.

tbroyer, to Java
@tbroyer@piaille.fr avatar

connect2id's Nimbus OAuth2/OIDC SDK is underrated, particularly as a direct dependency!

https://connect2id.com/products/nimbus-oauth-openid-connect-sdk

Many people use it through Spring Security or Pac4j but the lib is relatively easy to use directly (particularly if you know the protocols) and can be used to add OIDC support to Java apps with much less complexity than those Spring or Pac4j authentication frameworks (but at the cost of having to handle some of the Web security yourself, mainly around CSRF)

#Java #OAuth2 #OIDC #OpenIDConnect #SpringSecurity #Pac4j

tbroyer, to random
@tbroyer@piaille.fr avatar

Have you ever heard Jacques Brel sing ABBA? (without AI)

https://youtu.be/69_k021ejhk

(that song is so powerful! btw, this a cover of a French cover by Mireille Mathieu in 1981)

tbroyer, to random
@tbroyer@piaille.fr avatar

Algorithmic timelines on social media resurface april fools the next day (and will probably continue for the next couple days)

This is not funny

tbroyer, to random
@tbroyer@piaille.fr avatar

"Gradle toolchains are rarely a good idea. But that’s a topic for next week…"
Yes please!
https://mastodon.jakewharton.com/@jw/112090423224676666

tbroyer, (edited ) to random
@tbroyer@piaille.fr avatar

Yesterday I was at a restaurant with this artwork on the wall. Can you find the three films whose posters were used here? (hint: two of them are french)

tbroyer, to webdev
@tbroyer@piaille.fr avatar

Announcing Platformer: a set of libraries to help implement:

• attribute reflection in web components following the HTML specification
• WebIDL type coercions for your public JS APIs (including web component properties)

https://github.com/tbroyer/platformer

Comes with ECMAScript decorators (compatible with TypeScript 5.2+ and Babel) for vanilla custom elements and Lit elements.

Currently not published on NPM (as I'm still evaluating whether all of this is a good thing worth pursuing 😂 feedback welcome!)

#webdev #WebComponents #buildWithLit

haydencodes,

@tbroyer love love love this work! Reading the associated blog post you say: Overall, I feel like, as far as primitive/simple types are concerned, boolean, integers, double (not float), string (WebIDL's DOMString), and enumerations are all that's needed

Does this library reflect that belief on what is implemented? If not what heuristic does it use to draw the line of what behavior is implemented?

Sorry if this explained somewhere feel free to link me if so 😅

tbroyer, (edited )
@tbroyer@piaille.fr avatar

@haydencodes Ha good point, but no, it implements all numeric and string types of WebIDL, as well as "less common" types like symbol or bigint. I thought about classifying them into distinct files to reflect that opinion (and possibly cut some bytes, depending on tooling) but haven't yet. This is still something I'm contemplating but… naming is hard 😄

(and thanks for the kind words, heartwarming)

tbroyer, to react
@tbroyer@piaille.fr avatar

I think I totally forgot what React Compiler and Offscreen API are. Majority of the rest has already been seen in Next.js, but I have to admit I never really understood what "transitions" are and how to use them (that said, I haven't coded with React for months). Appreciate the small note on web components support, at last!

It's really clear though that what once was a rather "simple" library (functions returning virtual dom; even the magic of hooks wasn't too hard to grok) has become something really really complex over time.

https://react.dev/blog/2024/02/15/react-labs-what-we-have-been-working-on-february-2024

#react #WebComponents

tbroyer, to random
@tbroyer@piaille.fr avatar

Ha ha, this is a fun (sic) phishing attempt:

  • mail posing as an UAE bank
  • but sent from an indian investment firm (with valid SPF, DKIM and DMARC, so probably a vulnerable/misconfigured SMTP server on their end);
  • call-to-action links to the canadian "bikers against pedophiles"' (‽) staging website (a page under wp-includes, so probably leveraging a WordPress vulnerability)
  • that redirects to a page on the czech Pandora website
  • that mimics the UAE bank, asking for credit card details (phishing page has already been removed and I forgot taking a screenshot a few hours ago)

#phishing #spam

tbroyer, (edited ) to random
@tbroyer@piaille.fr avatar

w00t! First PR to Web Platform Tests was just merged: https://github.com/web-platform-tests/wpt/pull/44355

Run them live in your browsers: https://wpt.live/html/dom/reflection-forms.html

Now expecting the browser bugs to be fixed as they see their WPT score drop a bit 😁
(in what was part of interop-2023)

tbroyer, to random
@tbroyer@piaille.fr avatar

For those interested, I just published on GitHub a series of tests for reflecting attributes in web components (see https://blog.ltgt.net/web-component-properties/ for the rationale, I'll update it soon following those tests), reusing the same tests as used by browsers for built-in elements.
Tests include (for now) vanilla custom elements and Lit custom elements.

https://github.com/tbroyer/custom-elements-reflection-tests

#WebComponents #buildWithLit

tbroyer,
@tbroyer@piaille.fr avatar

⬆️
Updated my post following those tests, as some code samples were wrong and I learned a few new things writing the tests:

https://blog.ltgt.net/web-component-properties/

BTW, also added FAST implementations to the test.

#WebComponents #buildWithLit #FASTDesign

tbroyer, to random
@tbroyer@piaille.fr avatar

Tell me you don't understand REST and HTTP without saying you don't understand REST and HTTP.

tbroyer,
@tbroyer@piaille.fr avatar

@mw @sergi …which then completely changes the semantics of the request. Doesn't that just confirm they don't understand HTTP then?

tbroyer,
@tbroyer@piaille.fr avatar

@sergi @mw I think you're reading too much into my message. My point is that DELETE /a with, say, a body like foo=bar still says "delete /a"; and DELETE /a?foo=bar has a different meaning.
And if you want to say "delete some data that matches foo=bar" then you'd better send a POST (if that "some data" is accessible at /a?foo=bar, then a DELETE there is ok though).
My point, really, is that if you're discussing this then you don't really understand REST and HTTP: what resources are, etc.

tbroyer, to random
@tbroyer@piaille.fr avatar

I didn't plan that for the same day as Interop 2024, but I just filed bugs to WebKit, Firefox and Chromium on their handling of attributes/properties of type "double" (attributes of the progress and meter elements), and to Web Platform Tests that didn't actually have tests for those (issue filed yesterday, PR sent today):

Web Platform Tests:
https://github.com/web-platform-tests/wpt/issues/44315
https://github.com/web-platform-tests/wpt/pull/44355

WebKit: https://bugs.webkit.org/show_bug.cgi?id=268542

Firefox:
https://bugzilla.mozilla.org/show_bug.cgi?id=1878074
https://bugzilla.mozilla.org/show_bug.cgi?id=1878045

Chromium:
https://bugs.chromium.org/p/chromium/issues/detail?id=1524017
https://bugs.chromium.org/p/chromium/issues/detail?id=1524023

tbroyer, to til
@tbroyer@piaille.fr avatar

TIL about git add -N for when I want to start tracking files but only want to include part of their content in the commit:

git add -N file.txt  
git add -p file.txt  

(I actually generally use git citool rather than git add -p, but the result is the same: you can now add only parts of the file, rather than an all-or-nothing)

https://git-scm.com/docs/git-add#Documentation/git-add.txt--N

tbroyer, to typescript
@tbroyer@piaille.fr avatar
tbroyer,
@tbroyer@piaille.fr avatar
tbroyer, (edited ) to 11ty
@tbroyer@piaille.fr avatar

I switched my blog https://blog.ltgt.net to @eleventy
3 alpha and ESM.
Saying it was straightforward would be an understatement (or overstatement? 😅 depends how you read that; couldn't be easier and in my case could probably have been automated).

https://github.com/tbroyer/blog.ltgt.net/commit/70a84ed1c8110578827e9ef9d5b8f5f3ba608bb4

  • All
  • Subscribed
  • Moderated
  • Favorites
  • anitta
  • ngwrru68w68
  • normalnudes
  • InstantRegret
  • magazineikmin
  • thenastyranch
  • rosin
  • everett
  • khanakhh
  • Youngstown
  • slotface
  • tacticalgear
  • kavyap
  • DreamBathrooms
  • JUstTest
  • ethstaker
  • provamag3
  • osvaldo12
  • cubers
  • Durango
  • mdbf
  • modclub
  • cisconetworking
  • megavids
  • tester
  • GTA5RPClips
  • Leos
  • lostlight
  • All magazines