The Big Programming Thread - Page 966

On June 12 2018 07:34 TheEmulator wrote:
I like bitbucket tbh. Some people are pretty against their UI tho.

On June 12 2018 07:34 TheEmulator wrote:
I like bitbucket tbh. Some people are pretty against their UI tho.

Slack uses PHP for most of its server-side application logic, which is an unusual choice these days. Why did we choose to build a new project in this language? Should you?

Most programmers who have only casually used PHP know two things about it: that it is a bad language, which they would never use if given the choice; and that some of the most extraordinarily successful projects in history use it. This is not quite a contradiction, but it should make us curious. Did Facebook, Wikipedia, Wordpress, Etsy, Baidu, Box, and more recently Slack all succeed in spite of using PHP? Would they all have been better off expressing their application in Ruby? Erlang? Haskell?

Perhaps not. PHP-the-language has many flaws, which undoubtedly have slowed these efforts down, but PHP-the-environment has virtues which more than compensate for those flaws. And the options for improving on PHP’s language-level flaws are pretty impressive. On the balance, PHP provides better support for building, changing, and operating a successful project than competing environments. I would start a new project in PHP today, with a reservation or two, but zero apologies.

On June 14 2018 11:18 WarSame wrote:
Have any of you ever done a site with just OAuth? Is there anything I should be aware of? How do you link an account with different OAuths together?

On June 14 2018 17:19 Manit0u wrote:


I've been doing stuff like that for the past 1.5 years.

Here are some things you have to look out for:

1. Sessions

How will you handle user sessions? Tokens are the most common way of handling this.

2. Authorization flow

You'll have to decide on one. Some are safer but result in more round trips to external providers, others are simpler but not as secure (account that has been disabled in the provider might still be able to use your website until next login so no instant propagation).

Here are simple explanations of those:
https://www.digitalocean.com/community/tutorials/an-introduction-to-oauth-2

We decided for an auth code grant flow. Where we checked people against external provider and then issued our own token to them so we don't have to do a round trip with every request.

3. Getting user data

Just read on OpenID Connect which is a superset of OAuth.

4. Multiple providers per account

Now this is a tricky thing. It's relatively easy to create identities instead of actual user accounts when using OAuth and then just hook identities to users. The problem arises when someone who already has an account and an identity tries to log in with a different provider. There simply is no common factor that will always be there. You could try checking emails but those can be different, if someone misspelled parts of their first and last name this is a no go too.

Basically, you can do automatic user + identity creation when first logging in and then give people an option to "add other login" where they sign in with different provider and you just add an identity to the user (and now they'll be able to sign in with different providers) since you can't guarantee that you'll be able to automatically link all identities to specific user.

If you have any additional questions just fire away

On June 14 2018 23:17 ShoCkeyy wrote:
WarSame, you should take a look at how Magento does it. Here's documentation on that. One of the CMS's I've worked with that brings OAuth.

https://devdocs.magento.com/guides/v2.2/get-started/authentication/gs-authentication-oauth.html

On June 15 2018 08:00 travis wrote:
Are any of you experienced with the processes involved in creating a tech startup? I think I want to do that but I have so many questions I don't know where to start, and I don't have any money. But I do have a valuable product that has no competition and should have high demand. My main question is how I can come up with a reasonable valuation of my product, and how I can go about getting legal advice/representation with no money.

On June 15 2018 08:00 travis wrote:
Are any of you experienced with the processes involved in creating a tech startup? I think I want to do that but I have so many questions I don't know where to start, and I don't have any money. But I do have a valuable product that has no competition and should have high demand. My main question is how I can come up with a reasonable valuation of my product, and how I can go about getting legal advice/representation with no money.

On June 15 2018 12:38 WolfintheSheep wrote:

If already have a product, get traction on it first. Successful Tech Startups are like 90% marketing and network, 10% everything else.

The value of your product is in its user base and nothing else.

On June 15 2018 17:04 Manit0u wrote:


Sure, but if you're going to approach potential investors with just an idea you better have a good business plan. That requires knowing how much it will potentially cost you to get a running prototype and how long will it take (for most things you'll probably need one or two developers and one graphic designer/front-end developer because it has to look pretty and a time frame of about 6 months).

On June 15 2018 08:00 travis wrote:
Are any of you experienced with the processes involved in creating a tech startup? I think I want to do that but I have so many questions I don't know where to start, and I don't have any money. But I do have a valuable product that has no competition and should have high demand. My main question is how I can come up with a reasonable valuation of my product, and how I can go about getting legal advice/representation with no money.

On June 16 2018 18:00 sc-darkness wrote:
Does anyone know why this works at all? It feels unsafe yet it works.

const char* SomeMethod()
{
    return "Hello!";
}

Pointer points to something that must exist. Does compiler do some magic?