Live data from Hacker News

Viewing profile — mswehli

mswehli

HN member
Joined
Thu, Dec 10, 2015, 10:31 PM UTC
HN karma
101
Public activity
65 items

About mswehli

Software engineer helping startups and SMEs develop high performance web and mobile applications and platforms.

Recent public activity

  1. story
  2. story
  3. story
  4. story
  5. story
  6. story
  7. story
  8. story
  9. story
  10. story
  11. comment
    Comment #22955894

    what does money not spent have to do with anything? it's money that didn't exist that was created. The point of the article wasn't to talk about what causes inflation, its to talk …

  12. story
  13. comment
    Comment #22343572

    Ok... Getting a bit rude, so if you prefer we can end the discussion here, however first lets take a look at 2 links: https://oauth.net/2/scope/ "Scope is a mechanism in OAuth 2.0 …

  14. comment
    Comment #22341988

    > The author quote a case where an application have obtained a token on behalf of the user and that's valid too, but it's a less common (in my experience) scenario. quite common in…

  15. comment
    Comment #22341974

    >I think you're talking about delegation now. > Services which are acting on the user's behalf (delegated) can pass the user's claims through too; can pass the whole JWT through. T…

  16. comment
    Comment #22341405

    Well yes, but sometimes its not the user that authorizes the JWT token holder to perform the action to begin with, which is why there is the distinction between authenticating the …

  17. comment
    Comment #22341386

    Well the point is, Authenticating the user happens before the JWT token is issued, and authorizing an action happens after the JWT token is viewed. Authorizing a user on the backen…

  18. comment
    Comment #22341370

    Well no, JWT tokens are there to validate a call can be made. e.g., that whoever has made the HTTP call to your API server has been allowed to do so by the user. JWT tokens aren't …

  19. comment
    Comment #22341345

    Depends on where the permissions logic is stored, but to add information such as the example of can user a access the data of company x, then the IAM provider has to make a call ba…

  20. comment
    Comment #22341222

    Ah thanks. I disagree though, with JWT tokens and especially assuming you’re using the redirect flow, for the server especially, the server doesn’t need to know if the user was eve…

  21. story
  22. story
  23. comment
    Comment #22018939

    Not exactly newsletters, but there are 2 interesting podcasts from The Indie Hackers Podcast, one with John O'Nolan and one with Louis Nicholls and it seems like they suggest the b…

  24. comment
    Comment #22000216

    I mean, they talk about Walmart like it's the underdog, but its revenue is twice as large as Amazon's (despite its market cap being much lower). While Walmart is much better at sal…

  25. comment
    Comment #21912632

    No, Swift isn't like other langugaes which start from nothing. Most languages come out quietly and build a userbase slowly but steadily, which results in more organic growth, so th…