Viewing profile — mswehli
mswehli
HN member- Joined
- Thu, Dec 10, 2015, 10:31 PM UTC
- HN karma
- 101
- Public activity
- 65 items
- HN profile
- View on Hacker News ↗
About mswehli
Recent public activity
- story
- story
- story
- story
- story
- story
- story
- story
- story
- story
-
comment
Comment #22955894
what does money not spent have to do with anything? it's money that didn't exist that was created. The point of the article wasn't to talk about what causes inflation, its to talk …
- story
-
comment
Comment #22343572
Ok... Getting a bit rude, so if you prefer we can end the discussion here, however first lets take a look at 2 links: https://oauth.net/2/scope/ "Scope is a mechanism in OAuth 2.0 …
-
comment
Comment #22341988
> The author quote a case where an application have obtained a token on behalf of the user and that's valid too, but it's a less common (in my experience) scenario. quite common in…
-
comment
Comment #22341974
>I think you're talking about delegation now. > Services which are acting on the user's behalf (delegated) can pass the user's claims through too; can pass the whole JWT through. T…
-
comment
Comment #22341405
Well yes, but sometimes its not the user that authorizes the JWT token holder to perform the action to begin with, which is why there is the distinction between authenticating the …
-
comment
Comment #22341386
Well the point is, Authenticating the user happens before the JWT token is issued, and authorizing an action happens after the JWT token is viewed. Authorizing a user on the backen…
-
comment
Comment #22341370
Well no, JWT tokens are there to validate a call can be made. e.g., that whoever has made the HTTP call to your API server has been allowed to do so by the user. JWT tokens aren't …
-
comment
Comment #22341345
Depends on where the permissions logic is stored, but to add information such as the example of can user a access the data of company x, then the IAM provider has to make a call ba…
-
comment
Comment #22341222
Ah thanks. I disagree though, with JWT tokens and especially assuming you’re using the redirect flow, for the server especially, the server doesn’t need to know if the user was eve…
- story
- story
-
comment
Comment #22018939
Not exactly newsletters, but there are 2 interesting podcasts from The Indie Hackers Podcast, one with John O'Nolan and one with Louis Nicholls and it seems like they suggest the b…
-
comment
Comment #22000216
I mean, they talk about Walmart like it's the underdog, but its revenue is twice as large as Amazon's (despite its market cap being much lower). While Walmart is much better at sal…
-
comment
Comment #21912632
No, Swift isn't like other langugaes which start from nothing. Most languages come out quietly and build a userbase slowly but steadily, which results in more organic growth, so th…