datomic 2021-01-21 | Slack Archive

David Pham06:01:05

Does anyone have an example of datomic running on MS SQL/SQL Server? :) I am interested in the config files for the tables.

genRaiy13:01:33

does the datomic team plan to check for CVEs prior to release? We are finding some from the most recent release and it would be good if they were fixed at source.

jaret13:01:35

This is on our radar we have an internal list that includes: CVE-2018-10237, CVE-2020-8908, CVE-2015-6420, CVE-2017-15708, CVE-2019-10086 Initial review has found it to not be a straightforward bumping of a dep. If you have another CVE that we need to look at, please share the ID here, on the forums (http://forum.datomic.com), the knowledgebase at http://ask.datomic.com or e-mail us directly <mailto:[email protected]|[email protected]>

jaret13:01:03

slack is the devil for tracking these things because of archiving.

genRaiy17:01:23

these version bump works in our tests though I would like to understand failure cases obviously. I’ll follow up on the official site.

genRaiy13:01:18

com.datomic/datomic-pro              {:mvn/version "1.0.6222" :exclusions [commons-beanutils/commons-beanutils
                                                                                        org.apache.httpcomponents/httpclient]}
             ;; To remove CVE warnings from Datomic deps
             commons-beanutils/commons-beanutils  {:mvn/version "1.9.4"}
             org.apache.httpcomponents/httpclient {:mvn/version "4.5.13"}

genRaiy13:01:12

I know we are all committed to hating semantic versioning but it’s working for us here

roland14:01:25

hello, I see that now index-pull has a :reverse option. Is there any plan to add it to the index-range function ?

jaret15:01:23

Hi @UBV3GR85Q it hasn't come up but I think this would make a good feature request. We are trying to track feature requests by polling http://ask.datomic.com. If you could log this as a feature request there we could see how much of the community would like this feature and it will work into our internal tickets for consideration.

roland11:01:38

Thanks, I asked there: https://ask.datomic.com/index.php/582/reverse-order-browsing-for-raw-indexes

👍 3

shields22:01:42

Hello all, I was wondering if anybody has experience with Datomic Ions and using Auth0 through the API-Gateway. Any suggestions on how to create the authorizer to hook to my Lambda Function? I basically want to be able to add the Auth token to the Header.

Joe Lane23:01:44

Are you using an Ion Lambda as the custom authorizer or are you using an Ion Lambda as the http-handler? I don't see how this has anything to do with ions. Isn't this just a matter of wiring up Auth0 as a https://auth0.com/docs/integrations/amazon-cognito? Once your request makes it past Cognito, isn't it smooth sailing?

shields00:01:07

I'm using a universal login, nothing to do with Cognito. Context is that I'm doing a refactor and the current stack had Auth0 default authorizer integration but it's only available using HTTP, not REST. But I think I found a solution here in the forums. Just need to pass the token through the header from the request and then have a middleware verify on the backend. https://forum.datomic.com/t/where-can-i-find-cognito-or-iam-details-from-api-gateway-when-using-http-direct/1675/7

2021-01-21

Channels