Blog - page 3

How to build an OIDC provider using rodauth-oauth on Rails

One of my most recent ruby open-source projects is rodauth-oauth, a rack-based toolkit to help easily build OAuth and OpenID Connect providers, built on top of rodauth (the most advanced authentication provider library for ruby). I summarized my initial motivation for “rolling my own” in the project Wiki, namely the lack of a decent framework-agnostic alternative (I didn’t want to have to use Rails), and what I perceived as the limitations of the “de-facto” OAuth provider Rails extension, “doorkeeper”.

Read more...

HTTPX AWS Sigv4 plugin - Use cases

httpx v0.12.0 ships with new plugins to authenticate requests using AWS Sigv4 signatures.

Read more...

2020, a year in review

2020 has been an incredibly changing year for humanity. Being thrown head-on into a pandemic no one was prepared to deal with, we were forced to clumsily speed-up the transition into the digital age, being more and more dependent of digital identity, online shopping, remote work, and more gifs and memes than we could ever imagine could exist in the ether. Commuting fatigue was replaced by “notifications” fatigue. For all of its faults, the internet backbone managed to assimilate annd withstand way more activity than naysayers ever thought it was prepared for, and I can tell for a fact that I experience way less interruptions in video calls in 2020 than I used to in 2018. We were unfortunately forced to keep in touch with our loved ones at a “safety distance”, in most cases a video chat. I just hope that, whenever we’re done with this state of affairs, we can retain the good habits, while swiftly eliminating the bad.

Read more...

RBS, duck-typing, meta-programming, and typing at httpx

Ruby 3 is just around the corner, and with the recent release candidate, there’s been some experimentation in the ruby community, along with the usual posts, comments and unavoidable rants.

Read more...

HTTPX multipart plugin, lessons in the wild

Some say that open source maintainers should “dogfood” their own software, in order to “feel the pain” of its users, and apply their lessons learned “from the trenches” in order to improve it. Given that no one else is better positioned to make improvements big and small, it’s hard to dispute against this.

Read more...