HNHacker News
TopNewBestAskShowJobs

clementd

7 karma · joined March 26, 2012

submissionscomments
clementd··on Biscuit authorization
(biscuit maintainer here)

thanks for the kind words!

as for the compliance suite, there is one: https://github.com/biscuit-auth/biscuit/tree/main/samples/cu... which has been instrumental when i implemented biscuit-haskell. It might not cover anything, but it is updated everytime a new corner-case is identified.

could you elaborate wrt backward compatibility? The current model is opt-in, so you only pay for the features you use (that allows incremental updates, with biscuit-rust and biscuit-haskell leading the pack).

I see two todos in the spec indeed, i'll have a go at filling them out (they are implied by the rest of the spec and are implemented consistently across the various libraries, so it's more of a "writing things down" issue. I do agree that the spec is not airtight as it is. The compliance suite is there for that as it disambiguates a lot of things.

Other points are about library specifics. I know biscuit-rust and biscuit-haskell very well, biscuit-java less so. It is a bit lagging since the company working on it has had trouble allocating time on it.

In any case, if you have issues with specific things in libraries, don't hesitate to ping maintainers or open issues to see what we can do. biscuit-rust and its derivatives are actively maintained. biscuit-haskell is rather stable (but lacks support for snapshots). biscuit-java and biscuit-go are in need of some love, but nothing undoable

clementd··on Docker Support Done Right
The OS is exherbo (http://exherbo.org), a source-based distribution. The kernels are tuned for virtualization and the system is overall very light.
clementd··on You've convinced me boss, I'll work with Windev and PC Soft
It was sent to my personal address. Which I've never gave them.
clementd··on You've convinced me boss, I'll work with Windev and PC Soft
To be fair, I've found France to be better than SV in this regard. Thankfully windev is just one company stuck in the 90s.
clementd··on Ask HN | http compliance if post with content-length:0
For instance for a plain text content-type, no string != empty string
clementd··on Ask HN | http compliance if post with content-length:0
To my mind, as long as the Content-type header is set, the server should try to parse the body accordingly.

In the case of JSON, an empty body cannot be a JSON representation, but for other formats an empty body can have a meaning.

clementd··on POD, the PHP preprocessor
The +- thing comes from objective-C IIRC
clementd··on POD, the PHP preprocessor
the \|/+- chars are a bit difficult to read. Maybe unicode chars would be easier to read?
clementd··on POD, the PHP preprocessor
I kinda like the function litterals which are way shorter than the cumbersome "function()" default syntax