https://htmx.org logo
Powered by
# htmx-general
  • m
    "Splitting your Data & App APIs: Going Deeper"
  • s
    I use Django
  • c
    Django here too
  • u
    +1 on Django
  • b
    Hi guys! I'm new to htmx and I admit I really like it. How could I use oauth2 auth with it? Is there a special attribuire or something?
  • b
    *attribute
  • m
    htmx wouldn't really play a part in an oauth flow: you'd just do the "normal" thing bouncing back and forth between servers.
  • b
    I have a doubt: what should I do to make an authenticated request to the server? (I mean, including a token I received at login etc). I know I can use htmx request headers, but I can't see any example how to do it
  • g
    Try using cookies. That works best for pages when they are refreshed, were called directly.
  • g
    I made an extension that will let you use request headers, but abandoned it to use cookies instead.
  • b
    Thanks! Btw could you drop me a few lines of an example how to proceed? Thank you
  • b
    It would also be nice to improve the docs by adding this case
  • l
    Interesting architectural discussions and LiveView many similarities with HTMX https://news.ycombinator.com/item?id=28620490
  • s
    you should put a csrf token in any non GET requests, but from a security pov it is ok to read the token from the cookie with js.. you can insert a csrf header in all reqeusts by hooking into the htmx request event. (and obviously also validate the token from the server).
  • s
    But tbh it really depends on what you are building today browser are fairly secure and it would be hard to create an exploit that csrf protects against.
  • s
    I do think a section about csrf tokens should be added to the site though, htmx makes it really easy to fire non GET requests
  • m
    huge news
  • m
  • m
    great to see them continuing to make progress
  • m
    HTML Over The Wire is the way.
  • m
    definitely a fan of hypermedia for a lot of applications!
  • m
    simple, reliable and flexible, and now with all these libraries, you can build excellent user experience in it as well
  • m
    exciting times
  • m
  • m
    indeed
  • m
    would love to see some side by side comparisons of all the libraries building a todo app
  • m
    I think someone is doing that on twitter
  • f
    sparkjava.com looks pretty cool. certainly lighter than Spring Boot. Very nice for someone starting out in Java web dev.
  • m
    Yep, it's nice for small things, but requires a fair amount of experience to take it past that and feels a little incomplete/unpolished in a few places. I guess kind of like a sinatra.rb to spring's rails, or flask v. django
  • b
    Is there a way to replace the default 
    alert
    UI when 
    hx-confirm
    is called?
1...369370371...1146Latest