product engineer – code / ship / repeat
Florianópolis, Brazil
- Tweets 2,842
- Following 664
- Followers 4,502
- Likes 12,884
Learning more about HEEX slots & attributes - concepts aren't that different from regular JSX components
3
528
Alright, so the better way to handle CSRF vulnerability with GraphQL upload spec, is to rely on your own CSRF middleware based on session cookies
Especially if you're using Apollo Server, but not using Apollo Client, cause it won't send the default API headers for CSRF
Writing file uploading logic based on the GraphQL upload spec
Feels that it has not evolved, a ton of boilerplate, and even Apollo discourages if you don't have CSRF guards on your API
It is recommended to use signed upload URLs via mutations but still not a good DX for such a common thing 😅
1
2
5
1,328
So if you're using something like github.com/jasonkuhrt/graphq…, should be able to send a CSRF header that can be decrypted with a secret when it reaches the GraphQL API
1
184
There's no such better DX productivity than opening a stack of PRs with @withgraphite, developing the whole feature E2E without being blocked on code reviews 💫
1
1
5
655
My @cursor_ai has been acting super slow, however, it only happens on the biggest codebase in which I work daily
Has anyone else faced the same issue? I wonder if it's due to the AI indexing stuff
389
Learning client-server interaction on Phoenix LiveView - this time with some fun CSS animation💡
hexdocs.pm/phoenix_live_view…
2
2
519
Just found out that there's a package to use Class Variance Authority with Elixir HEEx function components
github.com/benvp/ex_cva
2
4
767
Writing file uploading logic based on the GraphQL upload spec
Feels that it has not evolved, a ton of boilerplate, and even Apollo discourages if you don't have CSRF guards on your API
It is recommended to use signed upload URLs via mutations but still not a good DX for such a common thing 😅
2
2
8
2,697
Still getting used to the HTML syntax for Phoenix, sometimes I caught myself writing "className" instead of "class" 😅
2
4
872
The statement "only learn the things you're going to use at your job" isn't always accurate (perhaps only at the beginning of your career, needs a bit more discipline)
Allow yourself to feel the joy of learning something completely new - you don't need to always ship it
4
390
So glad that we've shipped this - a lot of effort in terms of talking to developers and understanding their friction while integrating SSO
We're now increasing developer productivity even further, making it faster to go from sandbox to production
With Test SSO, developers can now perform rigorous end-to-end testing for the SSO integration without having to sign up with a third-party identity provider.
workos.com/blog/introducing-…
9
789
A common mistake in web development is to treat visual hierarch as equal to document hierarchy
An h1 element as a title makes perfect sense for semantics, but it doesn't need to be visually big
A lot of times titles should be small and page content should take focus instead
1
14
1,028
Started reading liveviewcookbook.com/ by @codestirring 📕
Keen to learn more about production-level stuff, and best practices when it comes to working on LiveView projects with a huge scale
1
1
6
966