Live data from Hacker News

Show HN: Restfox – Open source lightweight alternative to Postman

restfox.dev

61–70 of 209 posts

Re: Show HN: Restfox – Open source lightweight alternative to Postman

#62

Earlier quoted context omitted.

Can you chain requests together? Like if a request requires auth it will invoke login then take the token for use in the next request.

I haven't used it myself, but there is an option to parse responses with JavaScript and set variables. GET https://httpbin.org/get > {% client.global.set("my_cookie", response.headers.valuesOf("Set-Cookie")[0]); %} https://www.jetbrains.com/help/idea/exploring-http-syntax.ht...

Interesting. I have 2 endpoints (login and get settings) I use for testing in a desktop app and sometimes firing up insomnia for that project is a hassle. But rider has that rest client too so maybe I’ll try it for this one thing.

Re: Show HN: Restfox – Open source lightweight alternative to Postman

#63
post #40
post #14

Nice. If you want to implement another feature: see the error response. My server returned 428, but I couldn't see the contents nor header, only a generic "preview".

That's very odd. Will look into this.

And the Cookie header isn't sent? (using it on Firefox 106.1).

Re: Show HN: Restfox – Open source lightweight alternative to Postman

#64
post #24

Earlier quoted context omitted.

Unless I'm mistaken, Paw isn't owned by MacPaw? It's an unrealted product with a one time purchase price.

There is some financial relationship there. You get PAW with a SetApp bundle that MacPaw sell as a subscription.

You currently get 239 apps with the setapp bundle, I don't think there's anything special about that relationship.

Re: Show HN: Restfox – Open source lightweight alternative to Postman

#65

Be careful with Postman. It seems they upload all your secrets to their servers. We stopped to use it a time ago. I don't know if they changed in this regard.

Does anyone have a source for this? I need to present this to our team if it's true.

They sync everything. If you store stuff in collections, requests, or environments, it’s uploaded.

Presuming it’s end-to-end, but don’t know about at rest encryption

Re: Show HN: Restfox – Open source lightweight alternative to Postman

#66
If you are a minimalist, and are using VS Code, try https://marketplace.visualstudio.com/items?itemName=humao.re... which is a pure text syntax to describe API requests, and execute them right from the editor window. I now have api.http text file in every API-first project I am building and I love it.

Re: Show HN: Restfox – Open source lightweight alternative to Postman

#67
post #61

InvalidStateError: A mutation operation was attempted on a database that did not allow mutations. [Edit]: I'm on Firefox (with ublock origin). I see others having issues too.

Firefox with ublock origin should not cause any issues. The issue might be caused by Firefox's private window implementation which does not allow IndexedDB operations, which is what Restfox uses for storing the data of the application locally.

Re: Show HN: Restfox – Open source lightweight alternative to Postman

#69

I like it but please dont make me right click to do something! please add a little plus or something like it. Otherwise great work! needs a little disclaimer though that you will not save any of my requests =)

Thank you. Will look into preventing the right click requirement and provide an alternative for that.

It should be saving your requests automatically. Maybe your browser is blocking IndexedDB somehow? That's what's used by the application to store the data locally. Also do make sure you're not in incognito mode, as changes will be lost once you're out of it.

Re: Show HN: Restfox – Open source lightweight alternative to Postman

#70
post #46
post #45

Earlier quoted context omitted.

I got a bulletin from our security team saying Postman stores it all in plain text on their servers. Unbelievable if true. Haven't used it since. They have all your passwords.

I had this gut feeling, but no way to check. The handling of secrets is not explicitly states, i.e probably bad. I like the looks of httpie’s new desktop client but no idea if their secret handling is any better.

This is from their website: https://www.postman.com/trust/security/

> Depending upon its sensitivity classification, customer data is AES-256-GCM encrypted at the server-side before storage. Postman environment variables are covered in this classification and we strongly encourage you to use them to store your authentication keys and passwords. We have also added sessions in the 6.2 release onwards of Postman. We recommend using session variables for any data that you do not want to be synced to Postman's servers.

Post reply on HN