Live data from Hacker News

Hoodie – Fast web app development

hood.ie

51–60 of 147 posts

Re: Hoodie – Fast web app development

#53

So let's just deliver all our business logic as JavaScript to an entirely untrustworthy client! Whats the worst that could happen?

we don't deliver all our business logic as JavaScript to the client, we just provide a nicer API. All security / scaling / business logic still lives server side.

Take hoodie.email.send(properties) as an example. It just the same as `POST /email` with email properties JSON, with the only difference that it's simpler to understand and to handle for frontend people, and it works offline (syncs when connection is back).

Re: Hoodie – Fast web app development

#55
post #27

So let's just deliver all our business logic as JavaScript to an entirely untrustworthy client! Whats the worst that could happen?

Hoodie works no different than Gmail. What’s the worst that can happen there?

The difference is server-side validation of untrusted client requests.

Re: Hoodie – Fast web app development

#56
post #8

Team Hoodie here. Happy to answer any questions you might have :)

would like to know a bit more about comparisons with other realtime & offline-syncable BAAS like: Meteor, Firebase, AngularFire etc - As a non-dev, this looks very appealing, but before I start learning I wanted to know more about the strengths/weaknesses compared to others.

Re: Hoodie – Fast web app development

#57
post #47
post #43

Earlier quoted context omitted.

I wish we could stop calling things "broken" just because they work in a way that's well thought out but unconventional. How are we ever going to make progress on UI design if everyone immediately gets chastised for deviating from more orthodox web behavior by even the slightest amount? EDIT: lbarrow is correct that the hash tag navigation is borked. I thought people were just complaining about navigation to a previo…

This is clearly broken. You can't go back beyond the first part of the page you looked at. It doesn't work.

OK, I stand corrected, after further testing I agree the inter-page navigation doesn't work right.

Re: Hoodie – Fast web app development

#59
Giving full email privileges to the client is a terrible idea. Even if you do rate limiting, you're essentially allowing anyone to get your mail server(s) blacklisted and all future mail from anyone marked as spam.

In general, most people would be naturally apprehensive about federating their entire user authentication system through a third party. However, I suppose that by using hoodie you are supporting a group of people whose only job is to ensure security and fix vulnerabilities in your login system. It's also open-source, so you can vet it for yourself.

The JS library needs more work though - I could think of several basic use cases that it can't handle. It would also be great to see some full examples. Overall this is very cool stuff.

Re: Hoodie – Fast web app development

#60
post #52
post #8

Team Hoodie here. Happy to answer any questions you might have :)

Hi , from the docs " Hoodie will only sync data to the database if it belongs to a user!" will there be ways to manage some complex ACL scenarios ?

Yup :) — We are aiming for the Google Docs sharing model eventually. It is specced out and we are slowly implementing it bottom up based on current use-cases.
Post reply on HN