Ranter
Join devRant
Do all the things like
++ or -- rants, post your own rants, comment on others' rants and build your customized dev avatar
Sign Up
Pipeless API
From the creators of devRant, Pipeless lets you power real-time personalized recommendations and activity feeds using a simple API
Learn More
Comments
-
@theabbie
@uyouthe
@OmerFlame
@SortOfTested
@F1973
@C0D4
@ScriptCoded
@JhonDoe
@Jilano
@iiii
@IntrusionCM
@Linux
@linuxxx
@cafecortado
**Please report bugs/suggestions to** [this GitHub](https://github.com/dr010001111/...) -
10Dev28534yAwesome! If you push the code to github, I'd happily contribute. (I need my hacktoberfest PRs)
-
asgs112754yMan, I like the UI. Clean and simple
The tags highlighted in blue background are refreshing to see -
Um, not sure how @dfox would feel about an app that's competing with the official dR web app for attention. I think you should check whether he's okay with this.
Especially because the url is similar and so's the UI. -
@RememberMe It’s main intend is mobile devices. The WebApp is only a side effect of it. I’m only waiting for Apple to support push Notifications.
(You can add it as Home Screen app!) -
@010001111 well, there are official apps for mobile devices (which work rather well). The previous dR unofficial apps were for platforms which dR didn't already support like dR UWP. Again, let's just see what dfox says.
-
BUG:
++/-- works (wrongly) without being logged in. It is not highlighted, but changes the number x to (x ±1). Clicking again leads to the opposite action, while it should simply undo the action.
Platform:
Firefox Android 68.6.0 -
@OmerFlame Do you mean the scrolling/back swipe? This is a known super annoying thing.
-
@Nanos Progressive Web Application.
You get constantly updated app without having to download it from store. With some careful considerations, it can even show data offline from last actual session. -
@Linux I actually wanted some cheap/free subdomain or something, but I couldn't find anything fitting. So I bought devrant.app as well as devrant.web and host it on DigitalOcean lol
@linuxxx Yes. Because of CORS I'm afraid you can't access the API from the browser under a different domain. Under the hood, it uses a modified version the NPM package "local-cors-proxy". The current version does not include any DB or Intended logging. For debug purposes, each proxied request is sent to stdout, but anything that matches /token[^=]*[^&]*/gi is completely removed. So I can't steal your session, but your userID will be visible.
A newer version is using the proxy for better cache-control on the client, as well as caching certain non-user-related requests. So if a rant is being looked at by multiple PWA users in a short period of time, they get a faster in-memory response. Therefor, only changes are sent through the proxy.
I'm planning to setup a mirror of the deployed server version. -
@Nanos Can you provide a time?
You can't fetch anything anymore likely because the server has been backlisted over night because of too many requests. The notifications are requested every 7-seconds right now, which is pretty high for devrant.
I've contacted @dfox and added him to the private repo. Waiting for response.
I might setup a new droplet later that day to get it working again. Probably only if I got most of the Issues already reported fixed. -
@Linux Oh and I was looking at the domain search bar and I was like "What domain should be appropriate? I don't want to buy any random domain... Fuck it, go big or go home ..." And it was free so idk 🤷♂️
-
@Linux See above. He didn't respond on this thread yet, nor on twitter a few days back and now I'm hoping he sees my request on github. If there is no response, I'll treat this as "tolerated".
-
dfox426034y@010001111 sorry for the delay, just saw this! The reason your app stopped working is because of some recent protection that was put into the API. There had been some heavy abuse recently so unfortunately we had to go from api usage being almost unlimited to having some limits to protect the community from abuse.
Since inception, we’ve had pretty strict rules on 3rd party apps that provide the same functionality as our apps do. One of those rules is the UI needs to clearly indicate the app is unofficial, and that is certainly not indicated in your PWA and the domain name makes that even more suspect.
The next issue is the proxying. I’d highly discourage anyone to give their credentials to a third-party app that isn’t open source and wasn’t build my multiple members of the community. I’m not at all saying you’re not trustworthy, and personally I think your intentions are good, but that doesn’t mean it’s ok to throw basic security principles in this regard out the window.
We’ve worked with devs in the past to enable endpoints in the devRant API for CORS, but all of them have talked to us beforehand and worked with us through the process.
Lastly, one of the reasons your API usage was flagged by our auto-flagger was because it was making many calls for each request in rapid succession. Ex. 10+ calls to load some profiles, which is 9 calls more than our apps make. This wasn’t terrible because usage was relatively low, but again, because of recent events, we have to be a little more careful of API usage that results in a many/rapid calls.
So we’re happy to help you with some of this stuff, but I generally encourage people to use the API for purposes that we’ve seen recently like useful add on bots (the code formatted was really cool idea), jsrant, etc. that our apps don’t explicitly cover. Mainly because of security/auth are difficult now. We’re also going to have some exciting news soon on our official apps. -
@theabbie We'll see how dfox responds to my mail.
Source is public and most of the concerns he had where done
@asgs
https://github.com/dr010001111/... -
asgs112754yNo matter what happens, I absolutely agree with the "contains a lot of ❤️" mentioned in the README
Related Rants
I'm happy to announce the very first public alpha of the devRant PWA.
https://devrant.app/
Have fun!
devrant
random