3 ms·
This is a most excellent summary of how the technologies-de-jour seep their way into an organization! Out of interest how did you handle the Google OAuth integ
by dd-pwc 10y ago
This is a most excellent summary of how the technologies-de-jour seep their way into an organization!
Out of interest how did you handle the Google OAuth integration? Some kind of JWT module for httpd/nginx that validates the token, and acts on the subject?
- jsmthrowaway 10y agoExactly that, yes. It's not the software I was talking about in my essay, but I've used Openresty to do the JWT lifting in about 100 lines of lovely, readable Lua. Made a nice page with a "Sign on with Google" button from their docs, served it statically from nginx, and had it mostly working in a day. I wouldn't write it again, though; I wasn't confident in its complete security owing to there being far more clever people in the world than me, and I'd do that specific task differently this time around. Openresty/nginx is like an operations Leatherman. Very handy.