teamolHuang

wait... did we get (sort of) sora back???

Complicated and unintuitive.

Our company has a few dozens of different project repos. I just created a repo for storing deploy manifests (versions, etc. for every repos of a product), and then let our automation pipeline commit the manifest. Simple to follow and no source-unrelated crap in source repos.

Agreed, writing db queries in Python is just plain pain compared to C# + EF. Loved how I have to handle runtime type errors for SQLAlchemy queries in a dynamically typed language.

Other aspects of it are fine, but this exact part strongly feels doing something un-python in python for me.

They edited the payload first but signature was never changed. A JWT's signature changes if payload changes; so it was never about the "none" algo, it was that Microsoft never validated the JWT with their signing key.

JWT is a great tool, Microsoft just failed to use it correctly.

Finally, automatic hand for single man