Blade: a Java Web Framework

#1

Post by colund » Mon, Dec 21, 2015, 1:08 PM UTC

Blade: a Java Web Framework
github.com

Re: Blade: a Java Web Framework

#2

Post by eitland » Tue, Dec 22, 2015, 8:09 AM UTC

Seems nice. Apparently Apache Licensed as well.

Re: Blade: a Java Web Framework

#3

Post by reactor » Tue, Dec 22, 2015, 8:29 AM UTC

Looks like simpler Java frameworks are on the rise now (http://www.pippo.ro/, http://sparkjava.com/, http://www.rapidoid.org/)

Re: Blade: a Java Web Framework

#4

Post by dodyg » Tue, Dec 22, 2015, 8:30 AM UTC

hmmm...

public User signin(String username, String password) {

    String pwd = EncrypKit.md5(username + password);

    return model.select().eq("username", username)

    .eq("password", pwd).fetchOne();

}

Re: Blade: a Java Web Framework

#5

Post by memonkey » Tue, Dec 22, 2015, 8:44 AM UTC

I love Java and I love playing with lightweight Java frameworks.

Re: Blade: a Java Web Framework

#6

Post by tobyhinloopen » Tue, Dec 22, 2015, 8:51 AM UTC

dodyg wrote: post #4

hmmm... public User signin(String username, String password) { String pwd = EncrypKit.md5(username + password); return model.select().eq("username", username) .eq("password", pwd).fetchOne(); }

Gotta love them securitie

Re: Blade: a Java Web Framework

#7

Post by dmacvicar » Tue, Dec 22, 2015, 8:57 AM UTC

I fail to see the difference with http://sparkjava.com

We are using Spark four new code in our product and we are happy with it.

Re: Blade: a Java Web Framework

#8

Post by tluyben2 » Tue, Dec 22, 2015, 8:59 AM UTC

dodyg wrote: post #4

hmmm... public User signin(String username, String password) { String pwd = EncrypKit.md5(username + password); return model.select().eq("username", username) .eq("password", pwd).fetchOne(); }

You mean: as framework creator you should make your documentation reflect the latest security standards right? Just to make sure.

Re: Blade: a Java Web Framework

#9

Post by onion2k » Tue, Dec 22, 2015, 9:04 AM UTC

tluyben2 wrote: post #8

dodyg wrote: post #4

hmmm... public User signin(String username, String password) { String pwd = EncrypKit.md5(username + password); return model.select().eq("username", username) .eq("password", pwd).fetchOne(); }

You mean: as framework creator you should make your documentation reflect the latest security standards right? Just to make sure.

I think dodyg's point is more that someone using MD5 as a password hash is unlikely to have created a modern, secure, well-designed framework. If there's a problem as significant as poor password security then there's very likely to be other more subtle problems as well.

Re: Blade: a Java Web Framework

#10

Post by tluyben2 » Tue, Dec 22, 2015, 9:06 AM UTC

dmacvicar wrote: post #7

I fail to see the difference with http://sparkjava.com We are using Spark four new code in our product and we are happy with it.

It would be the forever (especially in Javascript frameworks); why don't more people combine forces instead of doing their own thing? But then coders have opinions which do not fit the other frameworks (like they don't like the deps or coding style or usage patterns) and then they roll their own while the alternatives are perfectly fine for most.