Latest Posts

Showing posts with label security. Show all posts
Showing posts with label security. Show all posts


Hey, Allocaters! Hoping you are good wherever you are. Today,  want to share about something cute named CORS. Because it isn't April 1st, I will not give you any kind of fake information absolutely.

So, what's CORS?

Cross-origin Resource Sharing (CORS) is a mechanism that allows restricted resource on a web page to be requested from another domain outside the domain which the first resource was served. [1]

This image from http://www.wikipedia.com/ will explain how CORS works:
File:Flowchart showing Simple and Preflight XHR.svg

Simply, we often use CORS if our application will interact with some kinds of external resources (API). In this case, our allocateam project is dividing the front-end and the back-end into different microservices, and the back-end is served as a API. So, we have to use CORS to be allowed accessing the API.

There are many ways and modifications that can be applied when we are going to use CORS. The simplest way is put the Access-Control-Allow-Origin: http://www.example.com in the response's header on the requested resource. http://www.example.com is an example of the allowed domain. We also can change the link to be * to allow all domains, according to the credentials and functionality of the service. So CORS can support the security of our application.

I think that's enough. Maybe in the future I will discuss more about the functionality of CORS along the development of allocateam that will modify -a lot- the features of CORS.

See you!

Reference
[1] July 6, 2009 by Arun Ranganathan (2009-07-06). "cross-site xmlhttprequest with CORS ✩ Mozilla Hacks – the Web developer blog". Hacks.mozilla.org. Retrieved 2012-07-05.


Hello buddies!

It's me again. Haven't you thought that you don't want anyone to make changes to your work? Thanks to gitlab feature that you can lock specific file or folders.

So, what happened if you lock specific file or folders? When you lock something, only the one who locked them could make changes and push them into the repository. I have decided to lock so no one could mess-up with my things. You know that it's locked when there's padlock logo beside the file/folder name like this:



Want to know how to lock them? My work-partner, Bthari will tell you how :) 

And so hello guys, here Bthari come!

Click to the folder at any branch (because it will affect all branch you had), and click the lock button in the upper right section. The button surrounded by orange square below. The reason why the lock button there can't be clicked, because I already lock another file inside peach/app folder.


If you want to lock a specific file, then go to it's directory and click the lock file button.