CodeIsGo.com

Learn how to use JSON Web Token (JWT) to secure your Web and/or Mobile Application! Github resource explaining how tokens work - JSON Web Tokens (JWTs) make it easy to send read-only signed “claims” between services. Claims are any bits of data that you want someone else to be able to read and/or verify but not alter.

What does a JWT Look Like? There is example provided, with explanation what is in Header, Payload and Signature. Good descriptions of Claims on server side and further reading links are provided.

And authors added examples and tests and also FAQ with detailed answers and further reading section.

Rad G wrote an article has spent four years working on a large scale IoT cloud based project. He shares knowledge accumulated.

The team he was working with maintained a number of cloud deployments of ~70 machines each, they always had a minimum two of those. Platform was deployed every morning to AWS.

It mentions MQTT servers for data exchange, Kafka, Apache Samza running on YARN, Apache Storm, Node.JS web applications, Ganglia metrics collectors, Apache Cassandra, MongoDB, Apache Mesos.

It describes challenges with infrastructure, fast start, and how they used Chef server for orchestration. Quite in depth experience sharing…

Article explains internals of SSH. SSH, or secure shell, is a secure protocol and the most common way of safely administering remote servers.

SSH provides a mechanism for establishing a cryptographically secured connection between two parties, authenticating each side to the other, and passing commands and output back and forth.

Symmetric Encryption, Asymmetric Encryption, and Hashes and touched and explained. Further it mentions the SSH protocol client-server model to authenticate two parties and encrypt the data between them.

There is also explanation how Negotiating Encryption for the Session and Authenticating the User’s Access to the Server happens. Good read.

Ian Cordasco has written a few API client libraries and works on Requests - Python HTTP library and shares overlapping knowledge in this article.

Article outlines some good practices for using Requests in order to get best performance for you API client. Author suggests using:

• Requests Connection Pooling - Cruise Control for Better Performance
• Requests Adapters - Fine Tuning Your HTTP Experience
• and example code how to use them in efficient way all together

The example code allows users who know what they need to configure to do so and for the library to provide defaults that it deems necessary when the user doesn’t specify things.

Gabor Nagy (full stack in marketing) created this to the point and detailed article some time ago. It is great insight into various types of containers.

Many people simply want to use Docker because of its rising popularity, but without understanding if a Docker container is what they need. Article explains Hypervisor based Virtualization and Operating System/Container Virtualization. The difference between a container and a full-fledged VM is that all containers share the same kernel of the host system.

Author like to classify the containers into special types based on how they can be used. He also explains Layers of containers and how they are built on top of other technologies.

So in general when you want to package and distribute your application as components, application containers serve as a good resort. Whereas, if you just want an operating system in which you can install different libraries, languages, databases, etc., OS containers are better suited.

Nitin Agarwal neat article about Docker internals. Docker takes advantage of several features of the Linux kernel to deliver its functionality.

Article dives in to many features of the Docker including:

• Namespaces - provides a layer of isolation
• Cgroups - limits an application to a specific set of resources
• Union file systems - to provide the building blocks for containers
• Container Format - all above in a wrapper called a container format

Article also mentions Security. Docker Engine makes use of AppArmor, Seccomp, Capabilities kernel features for security purposes.

Good selection of supporting images and schema.

Max Veytsman post touches security consideration when working with HTTP headers. The article explains what secure headers are and how to implement these headers in Rails, Django, Express.js, Go, Nginx, and Apache.

Author explains that some headers may be best configured in on your HTTP servers, while others should be set on the application layer. Use your own discretion here. You can test how well you’re doing with Mozilla’s Observatory.

Detailed description with explanation when to use it include topics like:

• X-XSS-Protection
• Content Security Policy
• HTTP Strict Transport Security
• HTTP Public Key Pinning (HPKP)
• X-Frame-Options
• and more…

Bruno Terkaly from Microsoft excellent series of 12 posts with in depth information on Azure Open Source Cross-Platform DevOps.

In the series author describes his take on how he would automate the building, testing, and deployment of applications for both Windows and Linux. He also provides code written in the Python to do this. Posts are very detailed and you will be able to follow them step by step.

The goal of the code base was to keep it as small and tight as possible so that you could take the work here and expand it to meet your needs.

Examples of pipelines in Jenkins, managing the state of these pipelines, MySQL setup scripts, Docker, pushing images to Docker Hub, concepts of image building, Unit tests, Mesos - including reasoning why certain technology or process was used - all is included.

Steve Tidwell from RancherOS short post about RabbitMQ messaging broker running in a container. RabbitMQ is easy to set up, use, and maintain. It can be scaled to handle large numbers of messages between many different data producers and consumers in a variety of application use cases.

Article contains link to setting up RancherOS server and also suggests watching the latest Rancher Overview Training on YouTube before proceeding with the Rancher installation.

Then there is example of RabbitMQ setup, configuration and described testing including screen-grabs and example code. We’ve learned how to set up a simple RabbitMQ installation in a container using Rancher Server, as well as how to connect to the RabbitMQ management interface and send and receive messages using rabbitmqadmin.

Sebastian from CodingTheSmartWay.com who’s focusing on Angular 2 and Ionic 2 prepared short video tutorial about Material Design and Vue.js 2.

Vue.js 2 is great for building the view layer of single page web applications. It is great fit for Material Design. In the following tutorial you’ll learn how to add Material Design to your Vue.js 2 project.

This should provide you with a system of design that allows for a unified user experience across all platform.

A general introduction and overview of Google’s Material Design can be found at https://material.google.com/.