Fork me on GitHub
#announcements
<
2021-05-21
>
Jakub Holý (HolyJak)14:05:34

Tired of being forced to use the browser every time you need to refresh an OIDC token to authenticate with a backend service? Finally there is a CLI tool for that - the #babashka and Docker powered oidc_client.clj https://gist.github.com/holyjak/ad4e1e9b863f8ed57ef0cb6ac6b30494 Upon first invocation it opens up a browser for the OIDC provider login, thereafter it caches the refresh token and uses it as long as it remains valid.

👏 19
Jakub Holý (HolyJak)14:05:16

@U04V15CAJ feel free to copy this if you want to add it to the bb examples/

borkdude15:05:12

Looking good! I think we can add it to https://github.com/babashka/babashka/blob/master/doc/projects.md PR welcome

👍 5
Ivar Refsdal18:05:13

Looks good! Have you considered using - or recommending - mkcert for trusting self signed certs? It has worked effortlessly for me. https://github.com/FiloSottile/mkcert/

👀 5
Jakub Holý (HolyJak)17:05:06

Thx, @UGJE0MM0W, mkcert looks great!

❤️ 6
plexus15:05:13

First release of com.lambdaisland/dom-types https://github.com/lambdaisland/dom-types This is a ClojureScript library which adds print handlers for a bunch of built-in browser types, which generally makes working with them in the REPL much more pleasant. e.g. instead of #object[object HTMLElement] you'll get #js/Element [:p "hello world]. This also extends Datafiable to these types (great with Portal).

🎉 56
😍 8
portal 4
metal 4
Alex Miller (Clojure team)16:05:55

https://clojure.org/releases/tools#v1.10.3.849 is now available • Adds support for a https://clojure.org/reference/deps_and_cli#_trailing_map_argument in -X calls (similar to Clojure 1.11 trailing map to vararg calls) • Updates all Maven deps to latest (maven-resolver 1.7.0, maven core 1.8.3) to address these https://maven.apache.org/docs/3.8.1/release-notes.html ◦ CVE-2020-13956 - bumps deps on Apache HttpClient used by Maven ◦ CVE-2021-26291 - potential security problems regarding Maven repositories: ▪︎ Due to the possibility of MITM (man in the middle) attacks, http repo access is now blocked by default. tools.deps/Clojure CLI has always used https repos in the default repository list (central and clojars), so this mostly impacts any explicit http repositories defined in deps.edn ▪︎ Concerns over the "hijacking" of repository urls by transitive pom deps (or their super poms) to download artifacts from malicious repos. Maven made no changes here, but did clarify how repos are resolved on https://maven.apache.org/guides/mini/guide-multiple-repositories.html#repository-order. From a deps perspective, we only use repositories declared in the top-level deps.edn (if transitive deps need a custom repo, you will need to add it at top-level too). For tools.deps use of pom dependencies, we are providing the repos of the top deps.edn file (which should always put Maven Central and Clojars first), then deferring to Maven for the rest.

🎉 38
match3716:05:07

The link for "trailing map of kvs" is broken

Alex Miller (Clojure team)19:05:34

https://github.com/cognitect-labs/test-runner v0.3.0 is available • Fixes #17 - use default ns regex only if no specific namespaces or regexes are supplied

🙏 22
seancorfield17:05:00

@U064X3EF3 I just ran into the newly-introduced bug in the api -X runner — and saw someone already opened an issue for that.

Alex Miller (Clojure team)18:05:39

I must have changed the docstring after I ran the tests? don't remember

seancorfield18:05:31

I commented on the commit that introduced the bug, if that helps 🙂