XSF Discussion - 2018-11-24

  1. pep.

    https://wiki.xmpp.org/web/Philosophy_overview we should update this page with service names nowadays' youngters can relate to

  2. Kev

    OT, but any Go devs here? I'm going to write a web thingy and https://awesome-go.com/#web-frameworks lists far too many frameworks. Anyone an opinion on a sensible default to choose? Mostly RESTish.

  3. moparisthebest

    What about rust instead https://rocket.rs/ is good

  4. Zash


  5. Kev

    "Rocket makes abundant use of Rust's syntax extensions and other advanced, unstable features. Because of this, we'll need to use a nightly version of Rust." That sort of thing sounds like exactly what's needed to sell a library.

  6. Zash

    That's (part of) my impression of Rust overall :|

  7. Kev

    Rust definitely has some really nice features, just comes across as quite immature to me.

  8. guusdk

    Kev: I think Sam is a Go developer.

  9. Kev

    That's what I thought.

  10. ralphm

    He certainly made a lot of noise about that

  11. SamWhited

    I do a lit of Go and Rust web stuff, and can provide semi-informed opinions if they're not needed right away (I'm not at a computer until later tonight)

  12. Kev

    No great rush, thanks.

  13. SamWhited

    For Rust, this site is a bit optimustic (the answer is still 'no'), but informative: https://www.arewewebyet.org/

  14. SamWhited

    But all that should change soon, some festures in the latest release should make some frameworks that only work on nightly run on stable

  15. Kev


  16. SamWhited

    optimistic, even

  17. Kev

    But you wouldn't write a web app right now in Rust, you'd use Go?

  18. SamWhited

    Yah, personally I think the libraries for Rust are a bit immature. They're getting there

  19. Kev


  20. Kev

    I'll pick some Go framework at random :)

  21. SamWhited

    I never bother with the frameworks, personally, they all tend to lock you into bad practices that make things harder later

  22. pep.

    Kev, re rust, https://www.arewewebyet.org/ there are other frameworks usable with the stable channel

  23. pep.


  24. pep.

    It's been linked already

  25. Kev

    SamWhited: But solving CSRF, oauth etc. seem like things best done with a library than doing it myself?

  26. pep.

    Probably yes

  27. SamWhited

    oh yah, I use libraries

  28. Kev

    authboss looked quite sane at first glance, but I might be missing something.

  29. SamWhited

    https://godoc.org/golang.org/x/net/xsrftoken is always good

  30. SamWhited

    also https://godoc.org/golang.org/x/oauth2

  31. Kev


  32. SamWhited

    At a computer now if you have specific questions

  33. Kev

    Thanks Sam, not anything specific, I'm just about to start writing a hobby project, was thinking Go, that'll involve oauth-based calls to a service, user profiles, needs xsrf protection, some DB stuff.

  34. Kev

    If you had suggested libraries for any of that (you already helped with oauth and xsrf, thanks) I'd be grateful. I was intending using a framework to tie the bits together, but if you think they suck I'll not bother, thanks.

  35. SamWhited

    What DB?

  36. SamWhited

    I'm sure there are frameworks that are okay, but I've never found the need for one. Small composable bits tend to work well for me.

  37. SamWhited

    The frameworks I have tried are terrible.

  38. Kev

    Postgres most likely.

  39. SamWhited

    Use the standard library https://golang.org/pkg/database/sql/

  40. SamWhited

    and https://godoc.org/github.com/lib/pq for the driver

  41. SamWhited

    I've tried a handful of postgres drivers, and I always go back to that one

  42. Kev


  43. SamWhited

    User profiles don't sound like a thing that would be a library, but maybe I don't understand what that means?

  44. Kev

    User accounts, registration, tracking user sessions etc.

  45. Kev

    https://github.com/volatiletech/authboss looked that-ish, but no idea if it's any good.

  46. SamWhited

    Ah yah, I always just do that by hand, I'm not sure about good libraries for it.

  47. SamWhited

    I haven't heard of authboss

  48. SamWhited

    This API surface looks huge, which always makes me nervous; also a lot of useless interfaces I suspect, but I haven't used it so ¯\_(ツ)_/¯