Published: Jul 09, 2017 Tags: security Category: Engineering OpenID Connect (OIDC) is an authentication layer on top of OAuth 2.0; while OAuth 2.0 is an authorization framework. The standard is controlled by the OpenID Foundation. This blog post will go through an example to use your google account to login a Node.js …

Published: Jul 05, 2017 Tags: security Category: Engineering The Open Web Application Security Project (OWASP) is an open community dedicated to enabling organizations to develop, purchase, and maintain applications and APIs that can be trusted. The goal of the Top 10 project is to raise awareness about application …

Published: May 07, 2017 Tags: security Category: Engineering With more and more data and software go to internet, the security becomes crucial for software development. OWASP (Open Web Application Security Project) lists top 10 security risks: Injection Broken Authentication and session management Cross-site scripting …

Published: May 1, 2017 Tags: database, nosql Category: Engineering NoSQL originally refers to "non SQL", "non relational", or "not only SQL". NoSQL databases are increasingly used in big data and real-time web applications. NoSQL databases are not replacing relational database, there are scenarios only fit for NoSQL …

Published: Aug 25, 2017 Tags: booknotes, process Category: Engineering Specification by Example is a set of process patterns that helps teams build the right software product. With Specification by Example, teams write just enough documentation to facilitate change effectively in short iterations (Scrum or XP) or in …

Published: Apr 20, 2017 Tags: telemetry Category: Engineering Telemetry technology plays more and more important role in the 'cloud era'. This blog will explain what is telemetry technology, how we can benefit from telemetry technology, and briefly discuss some technical choices. What is Telemetry According to …

Published: Apr 12, 2017 Tags: blog, opensource Category: Engineering Writing blogs is a good way to learn. The brain of human being has retention rate of what is learned. In order to learn efficiently, people need to be more active on discussing, practicing and teaching. No matter your blog has already got millions of …

Published: Apr 9, 2017 Tags: git Category: Engineering Git provides various tools to resolve conflicts during the merge process, and in this blog we only discuss one of them gvimdiff in Windows Operating System. Software installation gvimdiff needs Gvim installed, which is GUI Vi text editor and can be downloaded from: …

Published: Apr 8, 2017 Tags: vi Category: Engineering Among various text editors, I like Vi a lot. It help me a lot if I work on various operating systems and different environment since Vi is installed by default on most operating systems. There is GUI Vi tool available on Windows called Gvim, which can be downloaded …

Published: Jan 30, 2017 Tags: git Category: Engineering This blog will cover the Git commands which to transfer the changes between branches. If you are not familiar with the basic Git branch commands, you can have a look of my previous blog: git_branch-basic Merge Branch When you have two or more branches, you need to …