XSF Discussion - 2018-11-24

https://wiki.xmpp.org/web/Philosophy_overview we should update this page with service names nowadays' youngters can relate to

OT, but any Go devs here? I'm going to write a web thingy and https://awesome-go.com/#web-frameworks lists far too many frameworks. Anyone an opinion on a sensible default to choose? Mostly RESTish.

What about rust instead https://rocket.rs/ is good

https://cerdale.zash.se/upload/W8sl3dLXziwCN9uZ/2k1ut81gpcl01.png

"Rocket makes abundant use of Rust's syntax extensions and other advanced, unstable features. Because of this, we'll need to use a nightly version of Rust." That sort of thing sounds like exactly what's needed to sell a library.

That's (part of) my impression of Rust overall :|

Rust definitely has some really nice features, just comes across as quite immature to me.

Kev: I think Sam is a Go developer.

That's what I thought.

He certainly made a lot of noise about that

I do a lit of Go and Rust web stuff, and can provide semi-informed opinions if they're not needed right away (I'm not at a computer until later tonight)

No great rush, thanks.

For Rust, this site is a bit optimustic (the answer is still 'no'), but informative: https://www.arewewebyet.org/

But all that should change soon, some festures in the latest release should make some frameworks that only work on nightly run on stable

Ta.

optimistic, even

But you wouldn't write a web app right now in Rust, you'd use Go?

Yah, personally I think the libraries for Rust are a bit immature. They're getting there

TY.

I'll pick some Go framework at random :)

I never bother with the frameworks, personally, they all tend to lock you into bad practices that make things harder later

Kev, re rust, https://www.arewewebyet.org/ there are other frameworks usable with the stable channel

Ah

It's been linked already

SamWhited: But solving CSRF, oauth etc. seem like things best done with a library than doing it myself?

Probably yes

oh yah, I use libraries

authboss looked quite sane at first glance, but I might be missing something.

https://godoc.org/golang.org/x/net/xsrftoken is always good

also https://godoc.org/golang.org/x/oauth2

Ta.

At a computer now if you have specific questions

Thanks Sam, not anything specific, I'm just about to start writing a hobby project, was thinking Go, that'll involve oauth-based calls to a service, user profiles, needs xsrf protection, some DB stuff.

If you had suggested libraries for any of that (you already helped with oauth and xsrf, thanks) I'd be grateful. I was intending using a framework to tie the bits together, but if you think they suck I'll not bother, thanks.

What DB?

I'm sure there are frameworks that are okay, but I've never found the need for one. Small composable bits tend to work well for me.

The frameworks I have tried are terrible.

Postgres most likely.

Use the standard library https://golang.org/pkg/database/sql/

and https://godoc.org/github.com/lib/pq for the driver

I've tried a handful of postgres drivers, and I always go back to that one

Ta.

User profiles don't sound like a thing that would be a library, but maybe I don't understand what that means?

User accounts, registration, tracking user sessions etc.

https://github.com/volatiletech/authboss looked that-ish, but no idea if it's any good.

Ah yah, I always just do that by hand, I'm not sure about good libraries for it.

I haven't heard of authboss

This API surface looks huge, which always makes me nervous; also a lot of useless interfaces I suspect, but I haven't used it so ¯\_(ツ)_/¯