zmts

Про токены, JSON Web Tokens (JWT), аутентификацию и авторизацию. Token-Based Authentication

Last major update: 25.08.2020

• Что такое авторизация/аутентификация
• Где хранить токены
• Как ставить куки ?
• Процесс логина
• Процесс рефреш токенов
• Кража токенов/Механизм контроля токенов

rondy

FWIW: I (@rondy) am not the creator of the content shared here, which is an excerpt from Edmond Lau's book. I simply copied and pasted it from another location and saved it as a personal note, before it gained popularity on news.ycombinator.com. Unfortunately, I cannot recall the exact origin of the original source, nor was I able to find the author's name, so I am can't provide the appropriate credits.

---

Effective Engineer - Notes

• By Edmond Lau
• Highly Recommended 👍
• http://www.theeffectiveengineer.com/

What's an Effective Engineer?

havvg

# Disables any PHP by unlinking all PHP versions and stopping all PHP services
# 
# Enables the PHP of the provided version.
# If no version is provided, no PHP will be enabled, effectively disabling homebrew PHP.
# 
# Usage: php-switch 70
php-switch() {
    brew list | grep -e ^php..$ | xargs brew unlink
    brew services list | grep started | cut -d" " -f1 | grep -e ^php | xargs brew services stop

mindplay-dk

This page provides a full overview of PHP's SessionHandler life-cycle - this was generated by a set of test-scripts, in order to provide an exact overview of when and what you can expect will be called in your custom SessionHandler implementation.

Each example is a separate script being run by a client with cookies enabled.

To the left, you can see the function being called in your script, and to the right, you can see the resulting calls being made to a custom session-handler registed using session_set_save_handler().

sdepablos

<?php
# More info at http://lukasmartinelli.ch/web/2014/11/17/php-dos-attack-revisited.html

$file = 'https://github.com/lukasmartinelli/php-dos-attack/blob/master/collision_keys.txt';
$handle = fopen($file, 'r');
$a = [];
while (($buffer = fgets($handle)) !== false) {
    $a[$buffer] = $buffer;
}
fclose($handle);

mpalourdio

parameters
    --level=psr2 --verbose fix $FileDir$/$FileName$
working directory
    $ProjectFileDir$

fgm

<?php
/**
 * @file
 *   gvdump.php
 *
 * @author: Frédéric G. MARAND <fgm@osinet.fr>
 *
 * @copyright (c) 2014 Ouest Systèmes Informatiques (OSInet).
 *
 * @license MIT

ogrrd

Installing a Web Developer setup on OS X Mavericks

Install Command Line Tools

This is a requirement for brew in the next step. You can install XCode and then install Command Line Tools through the XCode preferences, or you can install just the Command Line Tools.

Install Command Line Tools

$ xcode-select --install

willurd

Each of these commands will run an ad hoc http static server in your current (or specified) directory, available at http://localhost:8000. Use this power wisely.

Discussion on reddit.

Python 2.x

$ python -m SimpleHTTPServer 8000

barneycarroll

.fileContainer {
    overflow: hidden;
    position: relative;
}

.fileContainer [type=file] {
    cursor: inherit;
    display: block;
    font-size: 999px;
    filter: alpha(opacity=0);