New answers tagged web-applications
2
What the user assumes the inputs - trial options - are […]
Don't allow the user to make such assumptions. With more that a handful of options, the user will guaranteed get some of them wrong.
Instead, let the user give each combination of options they want to use a descriptive name before starting a simulation. Then the user can recall that set of options ...
0
You are correct - don't use refresh tokens to keep users logged in, they are intended for "offline access", i.e. background processes where the user is not present. Keeping the user logged into your app after they have logged out of their OIDC provider may or may not be a security issue, but in any case if that is the desired behaviour then periodically ...
6
Usually the naming of the layers depend on the architectural approach:
The traditional layering is presentation / business logic / data access layer.
Another popular variant is Fowler’s presentation / domain logic / data source layer.
More recent architectures were inspired by the (data neutral) hexagonal architecture and use a more concentric idioms, ...
0
As I understood the access token and refresh token are meant for the client/rely party to have access to specific user resources stored by other providers. In your case the user allows your services to have access to his or her e.g. email address stored at google or facebook. The access token and refresh token represent this permission. It is not ...
0
Yes, this will work. I've done a SPA out of file storage with API services on Azure recently.
You will need to configure CORS on the client and the lambda. The browser will consider the API request cross-origin because it's not going to the site where it got the HTML from.
You likely will need a form of external authentication like OAuth/OpenID Connect
A ...
Top 50 recent answers are included
