Questions tagged [web-development]
Web development is a broad term for the work involved in developing a web site for the World Wide Web or an intranet.
1,550
questions
0
votes
0
answers
23
views
Architecture Design using Queue and JWT Token for session management
I am planning to design a microservice system architecture for a ticketing platform. It will be similar to "TicketMaster". Here is the flow of my architecture:
client web browser
API ...
1
vote
2
answers
39
views
frontend server obtain data from backend server, or frontend server return page with javascript that obtain data from backend server?
I'm currently learning how to separate frontend server and backend server. However, i'm not sure which approach should i take between the two
Frontend server obtain data from backend server and ...
1
vote
3
answers
167
views
Handling a Refactoring Project with Limited Access to Source Code
I recently finished an interview with a company as a web developer. I'm the first and only developer that is about to be hired in this company.
They have a web application that was created by a ...
3
votes
1
answer
145
views
Is it good practice to always use "use strict" in modern web apps? [closed]
I'm learning JavaScript and just came across "use strict". It sounds like to me it should always be in play but me being a beginner I was wondering if there are scenarios/environments when ...
1
vote
2
answers
110
views
When writing automated tests for a website relying heavily on a template language, how do I gain confidence while maintaining fast feedback?
I'm working on a website that, for all intents and purposes, functions as a Choose Your Own Adventure book rendered as a single page app (SPA). Starting at the left, this is the user experience:
Each ...
2
votes
1
answer
86
views
What is the proper pattern for a singleton SETTINGS class load using composer?
I have a class file Settings.php that loads an ini file and assigns the content to a constant for global access and reducing clutter. The class file contains the logic for loading the settings and ...
1
vote
2
answers
100
views
Best way to protect action links from CSRF
An application has a multifactor login.
The user logs in with its e-mail and password, and then the following screen asks for a one time password received via e-mail or generated by a mobile app.
In ...
0
votes
1
answer
61
views
Resolvers and Adapters
In the web development application context, when someone says resolver, they talk about getting the data and modify it and then return it?
What about adapters? are adapters essentially resolver ...
0
votes
1
answer
231
views
How should the structure of external API calls in an electron application be designed?
In this scenario, my renderer process' goal would be to make an HTTP request to an external web server and receive responses.
My question is: which options below would be more secure, give a future ...
0
votes
0
answers
36
views
GRPC request from web client to backend
Suppose there is a third-party application which offers GRPC services with authentication. You want to use these services in your web application. So you will basically use that service behind the ...
0
votes
0
answers
76
views
REST API design - Categorised response objects - All, Sub, Dub movies paged response
I am having trouble deciding what is the best way to implement a REST API which does the following:
When page gets loaded, it displays a list of Movies and above is a category selector tab (ALL, SUB, ...
0
votes
1
answer
47
views
How can a web application distinguish between sessions from trusted and non-trusted devices?
For compliance reasons, we want admins of a web app to work on it from devices (phones or computers) approved by IT. Or rather, they can work from other devices, but should get logged out quickly, so ...
1
vote
1
answer
90
views
How should I approach the development of an app with an parallel independent library?
I'm currently working on an ERP Blazor WebAssembly app that works alongside its base Razor Class libraries. The app could have some custom pages that aren't the same for all the customers and are ...
-1
votes
1
answer
38
views
What is the convention for deciding which resource to place an endpoint under? [closed]
I have an endpoint that teachers can use to invite students to a virtual classroom by providing their emails in a list format. Let's call it POST invite-students. I have these four resources:
api/v1/...
-1
votes
1
answer
40
views
Options for sharing frontend workflows across disparate applications
I am working on a form building feature that will be used across different applications within our organization. Since each app has a slightly different stack we are planning to implement this feature ...
1
vote
1
answer
70
views
How to develop data bound html with strong typing and intellisense?
I'm a huge believer in the value of Intellisense for showing you what syntax is expected and allowed (and also saving typing, though this is a secondary consideration).
When you build a web component (...
-2
votes
2
answers
300
views
What should my next SemVer version number be?
For a frontend web app version 3.9, we have a visual change that I would constitute as a backwards compatible (as far as the API) new feature. Therefor, my SemVer instinct is to bump the minor version ...
0
votes
1
answer
120
views
Is the BEM methodology in the large project used correctly
I am creating SCSS for the large project, I decided to use BEM methodology. I will have a lot of containers. I have question about BEM and about best practices.
My current code:
.footer {
&...
0
votes
1
answer
74
views
How to estimate scaling up costs/resources-needed of a project? [closed]
Let's consider an entrepreneur decides to create a new company like Airbnb, Netflix, etc. The problem is about the software part. He doesn't know how long it takes to create the mobile/web app? How ...
1
vote
4
answers
482
views
Avoiding Synchronous Communication Between Microservices
Something that annoys me when reading about decoupling microservices is that the problem is often stated, with either poorly explained, bad, or no solutions provided, which seems to especially be the ...
0
votes
0
answers
46
views
In (Django) web application should if-else logic be at a high level (view) or a low level (template)?
Given a (Django) web application following the model-template-view model, when returning a template based on an object should if-else logic be in the view or the template?
The API endpoint (view) gets ...
1
vote
0
answers
38
views
Storing SQL for table creation
I am currently working on a small web-app stored in a monorepo and using PSQL as database (hosted on GCP). It's my first time working for a web app and I have to create a lot of tables manually such ...
0
votes
2
answers
1k
views
Store static data in public folder as json file or directly in .js file?
I'm busy working on a website – somewhat new to this – and I don't quite know where I should store static data: in the public folder as a separate json file, or within the .js file as an object.
In ...
1
vote
0
answers
92
views
How do I make Design Templates like Canva Templates that are unique but can be modified & exported as an image? Should I use Canvas or WebGL?
Canva has Templates that are unique & can be easily modified by anyone & replaced with their own text, images, etc...
I want to build something like that.
I have multiple options to use but ...
-1
votes
1
answer
101
views
How to measure the impact of a website speed optimization
Given:
You have a list of opportunities* that may improve the speed metrics of your website. For example Total Blocking Time (TBT) is one metric that heavily impacts the experience of a visitor.
You'...
2
votes
4
answers
517
views
When Is it worth writing your own CRUD generator for project?
I need to make an app for employees & employers.
When is it worth writing your own CRUD generator for a project with the aim of process automation?
With such a generator I wouldn’t need to create ...
-2
votes
2
answers
50
views
How to split and estimate work in multi layer application [closed]
So, I'm trying to understand how this is done in real life... If I have a website with an API and a UI, and a User Story comes in like... as a user I want to be able to login that requires changes ...
1
vote
0
answers
86
views
With cookie regulations (GDPR) in Europe and Google's phase out of 3rd party cookies, do analysis tools like Mixpanel etc. still work?
With the cookie regulations (GDPR) in Europe and Google's phase out of 3rd party cookies, do analysis tools like Mixpanel, Google Analytics, Heap etc. still work properly and continue to provide ...
2
votes
3
answers
550
views
How do you reduce security risks when using NPM packages in commercial Web development?
This is a question for software engineers who are tasked with managing the development cycle for a Web application using NPM packages for deployment on a customer's Intranet or the Internet.
This is ...
2
votes
1
answer
160
views
Would invisible custom elements make sense?
The use case I was thinking about was something like this.
I want to make a calendar for a month as a custom element, and I don't think passing up all the event data as JSON or something is the best ...
0
votes
0
answers
30
views
Outbound HTTPS connection used as inbound control channel
I have an application which is configured through a web management interface accessed from the same network as the application is running on. I've been asked to make it manageable from the cloud using ...
6
votes
2
answers
562
views
Is "this" in JavaScript out of fashion?
I'm not a frontend dev, but I recall that a few years ago, the this keyword was commonplace in frontend codebases.
In recent years, I haven't seen this get used anymore. In the last few frontend ...
-2
votes
1
answer
128
views
Are there real examples of using reflection design pattern to achieve partial deployment? [closed]
This site mentions such thing: http://software-pattern.org/Reflection. It says that it is possible to replace part of the application behaviour dynamically. Does it mean that we can achieve partial ...
0
votes
1
answer
475
views
Passing set of flags from browser to backend by message header or body?
I am exploring two ways of passing certain flags representing user behaviour to the backend. When should I pass flags via headers and update routing based on header, and when is it more appropriate to ...
0
votes
1
answer
33
views
Should I check the ownership of every "somethig_id" fields from a POST request?
I have an endpoint API for a POST request in a multi-tenant application, let's say it is for a Payment, where we have to store these fields:
tenant_id (this is the account owner)
amount
date
payer_id ...
-1
votes
2
answers
596
views
What's the most appropiate http status code for 'not possible' or 'not available' [closed]
I am working on a booking app where I need to book appointments, I want to return the most appropriate HTTP code that says that the booking slot wanted by the user is not available, that it's not ...
1
vote
2
answers
510
views
Should a client / server share error codes?
I am in two minds about sharing client / server errors codes. We are writing both ends of the system, if our API was external this would not be possible, but that requirement is very unlikely.
So an ...
4
votes
1
answer
395
views
API Design for Error Handling
I'm working on a semi-complex web API, the high level design so far looks like this:
|--------| |------------| |------------|
| |--| | | |
| core | | | | ...
0
votes
0
answers
122
views
Should I use ETag Cache on all HTTP Responses?
I was wondering if there is any downside to using E-Tag cache for every request and response.
To be more specific, I'm building a data heavy SPA connected to a Laravel API and the client insists that ...
0
votes
1
answer
100
views
How to model users in multiple workspaces
In Slack and other apps, a user's email can be tied to multiple workspaces.
What’s the best approach to architecting that? Do you list workspace IDs on the user record, or do you maintain a list of ...
0
votes
0
answers
190
views
Blazor server side or client side, towards backend DB
I'm wondering, although as I think both options are possible.
Currently, there are two versions for Blazor projects in visual studio 2019.
If you want to connect to a backend DB then there are two ...
2
votes
5
answers
136
views
Storing scraping functions code inside a database
We are building a system that scrapes data from many websites (curated list of 200+). Same data is scraped from all websites every fixed amount of time, but every website is required its own unique ...
0
votes
3
answers
539
views
Should I separate the public and private portions of an application into two separate apps?
So I'm currently running an analysis task for my company. I won't go into too much detail but we are dealing with medical records and other confidential data. Previously this application was only used ...
5
votes
5
answers
733
views
How should I handle software requirements as a developer?
I'm a junior web developer at my first company. We have a business analyst that communicates with the sales team and developers. The business analyst is responsible in creating specifications for the ...
0
votes
3
answers
172
views
How do web apps provide support without revealing customer data?
I'm on a dev team where the product manager wants to allow internal users to "impersonate end-user and show the site exactly as the user sees it". I argue that this raises security flags and,...
0
votes
1
answer
692
views
Should integration tests cover calls from web app to API?
My solution consists of an API for data access and a web application that calls it.
I have integration tests set up for the API. However, the actual Web application that calls the API is not a part of ...
0
votes
1
answer
56
views
Anyone have data on impact on UX of shipping profiling build in production to users?
I understand that using the React Profiler in production should have a small or negligible impact on user experience at least for profiling 20-50 (guess) components on a page.
I would like to know if ...
5
votes
1
answer
3k
views
Is module federation the right approach to microfrontends?
Background
I'm trying to come up with an approach to building microfrontends.
Here are the facts of my circumstance:
Team 1: Develops the shell web app called "ShellApp" that will embed (...
0
votes
1
answer
117
views
How encrypting website data works
If i wanted to encrypt a password on my website before its sent to the server, would i have to encrypt the password in javascript on the frontend for it to be hidden over the interent or could it be ...
1
vote
3
answers
1k
views
What cookies are sent to the server during an API call?
I have tried to look this up online a lot but have found no concrete explanation that answers my question hence hoping someone can help me answer my question—-
My question revolves around cookies and ...