OAuth Has Ruined Everything

Re:OAuth Has Ruined Everything by taspeotis on Thursday October 22, 2015 @10:07PM (#10436422)

The post complains about the dearth of resources for authenticating an ASP.NET application to Google via OAuth 2 but ... Microsoft do that for you [1].

[1] https://www.nuget.org/packages/Microsoft.Owin.Security.Googl...

I think it's thinly veiled advertising.

    At Telerik, we’re all about making the developer experience better,
    and I can’t think of a worse development experience than OAuth.
    Telerik Backend Services was designed to mitigate this sort of nonsense.
    Let’s take a look at how it works.

[ Parent | on HN ]

Re:OAuth Has Ruined Everything by muzmath on Thursday October 22, 2015 @10:09PM (#10436429)

A typical low quality Telerik rant followed up with product placement. After being forced into using Kendo UI, I will never willingly use one of their products.

[ Parent | on HN ]

Re:OAuth Has Ruined Everything by elijahlofgren on Thursday October 22, 2015 @10:50PM (#10436532)

I have really enjoyed Kendo UI but am now just getting into a world beyond jQuery based frameworks, what were you comparing Kendo UI to that you liked better?

[ Parent | on HN ]

Re:OAuth Has Ruined Everything by muzmath on Friday October 23, 2015 @12:10AM (#10436755)

My hate for Kendo is very biased, due to the fact that my use of Kendo was not by my choice, and I quickly left the company for many reasons - one of them being that the overall technical prowess was very low (programming was seen as a cost center there so this is no surprise).

...

I view Kendo as an attempt to create an all in one solution to UI, primarily used by 'enterprise' type companies (i.e. not very tech savvy). This is a fine goal but...

I hate the imperative syntax. The Razor based Imperative syntax for creating Kendo components is god awful. Simply look at what configuring one of those ridiculous grids imperatively looks like.

But you say, there is declarative syntax! Until you start needing some of the edge cases and you will start to find missing documentation that exists in the imperative syntax documentation but not declarative. There are countless subtle differences just enough so that you may spend hours trying to fix a damn kendo grid.

MVVM Kendo: Kendo has a half baked solution for MVVM which does not compare to other open source solutions. You are better off with using a more standard open source solution where there is an actual community surrounding the development.

I used to keep a list of all of the bugs I had found upon using declarative MVVM kendo, but it's been a long time and I will absolutely never work anywhere that uses Kendo again so I brain dumped all of my specific kendo knowledge.

When all things are considered, KendoUI trys to hold your hand very tightly, and it does a great job and spinning up complicated grids. When you want something that isn't explicitly accounted for, or combine things in novel ways - you are going to be in a world of hurt.

UI Kits I like better:

I think you will be better off with any widely used UI kit. I've played around with Material Design and Twitter Bootstrap. These are both significantly lighter weight than Kendo.

Over All Frameworks/Libraries to replace the MVVM portion:

I've fallen favor of React as opposed to Kendos attempt at databinding. There's tons of great resources out there for React so I won't even try to go into it but it's been a pleasure.

[ Parent | on HN ]

Re:OAuth Has Ruined Everything by blumkvist on Friday October 23, 2015 @05:13AM (#10437567)

I thought bootstrap was a CSS framework and Kendo was a collection of jquery widgets?

[ Parent | on HN ]

Re:OAuth Has Ruined Everything by muzmath on Friday October 23, 2015 @10:46AM (#10438882)

I seperated out my suggestions into UI and Frameworks. Kendo does many things, a non-standard MVVM framework is one of them: http://demos.telerik.com/kendo-ui/mvvm/index

Kendo also gives multiple ways to initiate their widgets, one of them being the standard jquery widget way.

Also bootstrap is more than just CSS, which is why it's distributed with a JS file. Samem with material design.

Frankly, I think the approach Kendo takes trys to do way to much, and in effect they make it difficult to do beyond what was accounted for.

If you simply are creating internal tools for a business to use and don't care about aesthetics or having great control/UX experience, Kendo is possibly an easy hand held solution for your company. On the other hand, the type of company who has this as a goal is likely a terrible company to work for and will not lead to very interesting work.

[ Parent | on HN ]

Re:OAuth Has Ruined Everything by blumkvist on Friday October 23, 2015 @01:05PM (#10439852)

That very much depends on what you're doing. For front-enders, probably yes. There are other job functions though. UI is very tedious to get done and Kendo offers an easy way out, leaving you to do your main job, be it business intelligence, custom predictive analytics or something else.

[ Parent | on HN ]

Re:OAuth Has Ruined Everything by muzmath on Wednesday November 04, 2015 @03:39PM (#10509524)

Definitely, which is why I mentioned the following:

> If you simply are creating internal tools for a business to use and don't care about aesthetics or having great control/UX experience, Kendo is possibly an easy hand held solution for your company. On the other hand, the type of company who has this as a goal is likely a terrible company to work for and will not lead to very interesting work.

[ Parent | on HN ]

Re:OAuth Has Ruined Everything by stephengillie on Friday October 23, 2015 @01:49AM (#10437016)

Got a good alternative to Fiddler? Wireshark doesn't have a headers view, does it?

[ Parent | on HN ]

Re:OAuth Has Ruined Everything by amatix on Friday October 23, 2015 @05:16AM (#10437578)

http://www.charlesproxy.com is great — http, ssl, throttling, decoding, filtering, replays, substitutions... It has it all. Works everywhere.

[ Parent | on HN ]

Re:OAuth Has Ruined Everything by mateuszf on Friday October 23, 2015 @04:08AM (#10437397)

https://mitmproxy.org/

Works on all major os-es, although it may be bit harder to setup. Also handles transparent SSL interception.

[ Parent | on HN ]

Re:OAuth Has Ruined Everything by rcurry on Friday October 23, 2015 @04:44AM (#10437496)

"Let’s take a look at how it works."

Yeah, let's not and say we did. Instead, how about we take a look at how Telerik works (satire, based loosely on my own experiences with them):

Customer: "I've found a show-stopping bug in RadFoobarWidget1... can you give me an estimate as to when you're going to fix this?"

Telerik: "You're still using RadFoobarWidget1?!? We found a bug in that control, so we rewrote the whole thing and called it RadFoobarWidget2."

Customer: "Uh. Okay. But it seems like RadFoobarWidget2 dropped features that we already depended on in our commercial product release... are you going to reintroduce those any time soon?"

Telerik: "You're still using RadFoobarWidget2?!? We rewrote that as RadFoobarWidget3... It's totally different now, but, like, way way better and stuff."

Customer: "Uh. Okay, but RadFoobarWidget3 has even less features than RadFoobarWidget2 (which totally screwed us), are you planning on fixing that any time soon?"

Telerik: "RadFoobarWidget3?!? That's so last week. Why aren't you using RadFoobarWidget4?!?"

Customer: "Sigh..."

[ Parent | on HN ]

Re:OAuth Has Ruined Everything by eterm on Friday October 23, 2015 @07:16AM (#10437876)