October 2015 - dancer-users - lists.preshweb.co.uk

Re: [dancer-users] Delayed template processing
by Joerg Fallmann 16 Oct '15

16 Oct '15

Hi again, Does anybody know if and how it is possible to render a template for the user and then forward to a new route, Something like |get '/routeA/:*?' => sub { my $id = params->{'id'}; my $blub = params->{'blub'}; delayed { my $tt = Template->new( {INCLUDE_PATH => "$path", WRAPPER => 'layout.tt', RELATIVE => 1, }) || die "Template error: $Template::ERROR\n"; $tt->process('view.tt', { 'id' => $id, 'bla' => $blub }; flush; content $tt; done; }; forward '/routeB/',{ | ||'id' => $id, 'bla' => $blub| }; }; ||get '/routeB/:*?' => sub { my $id = params->{'id'}; my $blub = params->{'bla'}; # Do something from here on }; | That would solve the async response troubles for me I guess. @John, I'd rather try to do as much as possible without having to handle JSON additionally, if async streaming is possible the way I like to use it, I will have no other choice anyway I guess. --joerg

3 2

Re: [dancer-users] Delayed template processing
by Joerg Fallmann 14 Oct '15

14 Oct '15

Dear John, what I would like to do is to stay in one route, display whatever information I already have, so that the user can start reading output, while I continue processing until I have everything I need and update what the user can see with the final information. So similar to what delayed does when I use strings as content, with the difference that I would like to use templates filled with the initial content and update that templates content once processing is done. So far I have a myhost/welcomepage where the user can select some stuff and is then redirected to myhost/results. From the user input I can quickly create some content, but some other content takes some time, and I would like to show what I have fast at myhost/results and update myhost/results when the rest is done without redirecting to yet another route, instead of computing everything and then /push/ it to the user after minutes. @Amelia, I was playing around with delayed, and for me it works as expected when I only want to return simple stuff like in the manual, but when I try to use templates as content nothing happens until the very end of the route, so just the final output is created and no in-between output. Hope what I want to do is possible with Dancer2 --joerg On 10/14/2015 01:00 PM, dancer-users-request(a)dancer.pm wrote: > Send dancer-users mailing list submissions to > dancer-users(a)dancer.pm > > To subscribe or unsubscribe via the World Wide Web, visit > http://lists.preshweb.co.uk/mailman/listinfo/dancer-users > or, via email, send a message with subject or body 'help' to > dancer-users-request(a)dancer.pm > > You can reach the person managing the list at > dancer-users-owner(a)dancer.pm > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of dancer-users digest..." > > > Today's Topics: > > 1. Re: Recommendation for REST API (Pedro Melo) > 2. Delayed template processing (Joerg Fallmann) > 3. Re: REST plugin (Rick Leir) > 4. Re: Delayed template processing (Amelia Ireland) > 5. Re: Delayed template processing (John J. McDermott, CPLP) > 6. Form Validation Profantity (Richard Reina) > 7. Re: Form Validation Profantity (Andrew Solomon) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Tue, 13 Oct 2015 12:03:10 +0100 > From: Pedro Melo <melo(a)simplicidade.org> > To: Nuno Carvalho <smash(a)cpan.org>, Perl Dancer users mailing list > <dancer-users(a)dancer.pm> > Subject: Re: [dancer-users] Recommendation for REST API > Message-ID: > <CACCxPi2dPiiW-U21Wc7u2CeDjt-b=pViQtSTtEt5qGGdNWQJGw(a)mail.gmail.com> > Content-Type: text/plain; charset="utf-8" > > Hi, > > On Tue, Oct 13, 2015 at 11:37 AM, Nuno Carvalho <smash(a)cpan.org> wrote: > >> On Mon, Oct 12, 2015 at 8:16 PM, Pedro Melo <melo(a)simplicidade.org> wrote: >>> need to build a REST API with Dancer2. Any recommendations on what >> plugins, >>> if any, to use? >>> >>> I see Dancer2::Plugin::REST, is that the recommended one? It looks good? >> any >>> experiences with it? >> I always end up doing serialization "myself", instead of relying in >> plugins. Because many times there will be some edge cases that using >> the plugin will require a huge workaround. While handling the >> serialization yourself it's always easier to adapt. And even so I >> usually end up with very simple and clean applications like: >> >> sub '/users' => sub { >> to_json MyModel->users; >> }; >> >> If you prefer you can also use the "set serializer" option, to omit >> the to_json parts, or if you intend to have more than one serializer >> possible >> > Yeah? I have a base class for all my models so I'll probably take that > route. > > Thank you all,

2 1

Re: [dancer-users] REST plugin
by Rick Leir 13 Oct '15

13 Oct '15

On Tue, Oct 13, 2015 at 7:00 AM, <dancer-users-request(a)dancer.pm> wrote: > I see Dancer2::Plugin::REST, is that the recommended one? It looks good? > any > experiences with it? > My code serves REST without the use of that plugin. It was good, but it did not seem to help me much. I have been writing a simple decorator plugin to help with JWT JSON Web Tokens. So my route can look like this: check_auth ['post', 'put'] => '/cr_user' => sub { my ($jwt_sub) = @_; my $dir = _connect_dir(); my $role_valid ; my $ret; if( $jwt_sub) { my $admin_user = $dir->get_user({ username => $jwt_sub }); The plugin has this: use Crypt::JWT qw(encode_jwt decode_jwt); ... register 'check_auth' => sub { my ( $dsl, $pattern, @rest ) = @_; my $default_methods = [ 'get', 'post' ]; # If the given pattern is an ArrayRef, we override the defaults # and pass these onto to DSL->any() if( ref($pattern) eq "ARRAY" ) { $default_methods = $pattern; $pattern = shift(@rest); } my $code; for my $e (@rest) { $code = $e if ( ref($e) eq 'CODE' ) } my $content_type = plugin_setting->{content_type} || 'text/xml'; my $authenticated_route = sub { # Default response content type $dsl->response->header('Content-Type') or $dsl->response->content_type( $content_type ); # must be authenticated # get token from header my $jwt_sub; my $token = $dsl->request->header('authorization'); if ( $token) { # check the JWT of this request my $secret = plugin_setting->{'jwt_secret'}; try{ my $data = decode_jwt(token=>$token, key=>$secret); Much of this is copied from Dancer2::Plugin::Auth::Tiny by D.A. Golden. Now I should try Yanick's Plugin2. Cheers -- Rick

1 0

Recommendation for REST API
by Pedro Melo 13 Oct '15

13 Oct '15

Hi, need to build a REST API with Dancer2. Any recommendations on what plugins, if any, to use? I see Dancer2::Plugin::REST, is that the recommended one? It looks good… any experiences with it? Thanks in advance, -- Pedro Melo @pedromelo http://www.simplicidade.org/ xmpp:melo@simplicidade.org mailto:melo@simplicidade.org

3 3

color for debug output
by Nick Knutov 10 Oct '15

10 Oct '15

Just ran some nodejs app and saw output. It was without timestamps and debug level was colored at the beginnings of line (debug|info|error|notice etc). It looks better to me. Is it possible to do the same with Dancer? -- Best Regards, Nick Knutov http://knutov.com ICQ: 272873706 Voice: +7-904-84-23-130

2 1

JSON serializer
by Mike Cu 10 Oct '15

10 Oct '15

I have an Ajax call like : $( "#City" ).selectmenu({ select: function( event, ui ) { $.ajax({ url: '/cities', type: "POST", data: {'City':$("#City" ).val()}}).success(function(data){ $("#display").html(data);}); }, }); does the default JSON serializer escape the data to prevent XSS, or should I escape it manually?

2 3

Stored XSS via AJAX
by Mike Cu 09 Oct '15

09 Oct '15

I was reading about Stored XSS via AJAX on Web Application Exploits and Defenses | | | | | | | | | | | Web Application Exploits and DefensesCross-Site Scripting(XSS) | | | | View on google-gruyere.apps... | Preview by Yahoo | | | | | where it says " Second, in the browser, Gruyere converts the JSON by usingJavascript's eval. In general, eval is verydangerous and should rarely be used. If it used, it must be used verycarefully, which is hardly the case here. We should be using the JSONparser which ensures that the string does not include any unsafecontent. The JSON parser is availableat json.org." So I'm wondering what does Dancer do? eval or uses a parser?

3 2

Multiple virtual hosts: one dancer instance or one per vhost?
by Tom Browder 07 Oct '15

07 Oct '15

I am investigating moving several virtual host web sites (some using plain CGI and some purely static) to using dancer2 and wonder (1) can one have one dancer process per vhost and (2) can one dancer process support multiple host? I would like to be able to choose either or a mix of the methods but it is important that the individual vhost sites be independent as far as the public views them. Some features that differ from host to host that must continue working: + TLS server certificates + client certificates (for private sections of a vhost) + mixed static and dynamic pages All sites will continue to be served with Apache 2.4. The candidate sites include: <https://usafa-1965.org> <https://psrr.info> <https://niceville.pm.org> <https://nwflug.org> <https://mbrowder.com> <https://computertechnwf.org> <https://freestatesofamerica.org> <https://novco1968tbs.com> <https://nwflorida.info> Only the first is using CGI currently, but I would like to expand most of the others to use some dynamic pages. Readers may be interested in the second site which has my own implementation of an animated steam loco and cars regularly crossing the front page. The scene includes flashing signals at a highway crossing. The scene uses only svg and html 5 code (and non-animated css). Thanks. Best regards, -Tom

3 4

Delayed and asynchronous Dancer2
by Amelia Ireland 06 Oct '15

06 Oct '15

Hello, I'm very interested in using Dancer2's streaming and async capabilities, and have a number of questions about using Dancer2 asynchronously: - Does the whole app have to be written to be asynchronous / non-blocking? (I assume so) - Do all apps running from the same .psgi file have to be non-blocking? E.g. in app.psgi: builder { mount '/app1' => $nonblocking_app; mount '/app2' => $blocking_app; }; - Are hooks safe to use in a non-blocking Dancer2 app or do they introduce a blocking element? - When I run the drums example in a browser (Safari), it waits until the entire drum loop has completed and then prints the content. Is that what is expected to happen? I expected the content to be written by the browser as it received it. The docs aren't very clear on what Dancer is actually doing under the hood -- it would be useful to have more explanation of what's going on. I'd be happy to write up something myself, but I don't know what's going on. ;-) Thanks! Amelia.

2 2

Template Toolkit Help
by Richard Reina 06 Oct '15

06 Oct '15

I have learned how to display variables in template toolkit with <% varname %>. However, these variables are being named from withing my dancer app and displayed on the template. Is there a way to display variables that a user is entering as they are entering it. So that if I have a menu like form where a user can pick several items and see them each added one by one in a list format before pressing a second submit button that submits his entire lists of entries? It would be a bit like a shopping cart but instead of the items being put in the cart they are displayed right there in the form as they are added. Thanks for any ideas. Richard

5 19