Why can't it just be a useful tool? I'm looking forward to using it while writing project documentation and will be working on editor plugins using the JSON formatted output (https://github.com/stephencelis/syn/commit/d2d36473f7295c6cf...).
164 karma · joined April 8, 2011
Why can't it just be a useful tool? I'm looking forward to using it while writing project documentation and will be working on editor plugins using the JSON formatted output (https://github.com/stephencelis/syn/commit/d2d36473f7295c6cf...).
Advances in computing power seem to be a more worrisome threat to RSA, especially for RSA-1024 whose factorization is probably already feasible (http://www.cs.tau.ac.il/~tromer/papers/cbtwirl.pdf). And once advances in quantum computing become reality, quantum algorithms should be able to very quickly break even RSA-2048 (http://en.wikipedia.org/wiki/Shors_algorithm).
The primary client for an API I'm currently working on is an iOS app, so for the web version of the client, it just made sense to build on top of the same OAuth-authenticated API. Instead of traditional sessions, we store the access token in a cookie and sign each authenticated request just as you would any third-party API.
For those not wanting to deal with yet another language/server, Square's KIF testing framework is really well done, integrates right with your project in Xcode 4, you can write your tests in the same language you write your code in, and you also get screenshots when tests fail: https://github.com/square/KIF
The MFI program isn't the easiest process in the world, but it isn't impossible. Definitely doable as a side project if you're motivated.
It sounds like you haven't become familiar with Node's CommonJS compatible module system. Try starting there: http://nodejs.org/docs/latest/api/modules.html
Once you understand the basics of modules and requiring, I'd take a look at the ExpressJS example apps for organization ideas: https://github.com/visionmedia/express/tree/master/examples
If you're looking for a check-in API, Foursquare's seems like the best bet at this point. The Venues (ie. places) Platform is especially good, with rate limits starting at 5,000/hr: https://developer.foursquare.com/overview/venues.html
In my experience with both OAuth 1.0 and 2.0 libraries for iOS, Node.js, and Ruby (among others), OAuth 1.0 is just a lot harder to implement. It's not fun in any way...
As far as the iOS side of things, the OAuth2Client library by nxtbgthng has worked amazingly well for us: https://github.com/nxtbgthng/OAuth2Client
Also, I'd recommend spending some time looking at your architecture, as you should be able to handle 50,000 active users with a lot less metal. The extra infrastructure can often be more expensive than a well-designed architecture.
Really though, everything shown can be easily replicated with a bit of Connect middleware, and it'd be cleaner. I don't see the point?
There are benefits to MessagePack that have already been mentioned here, namely not having to base64 binary data first (smaller size), but that's true for any binary message format. I'd love to see some other binary formats thrown into the ring and see how they compare to MessagePack in both size efficiency and encode/decode performance. BSON seems like an interesting option, but I don't know enough about it to comment...
I've done several of my own benchmarks as well and can confirm that the current Node JSON implementation is much faster than MessagePack. Their benchmarks are most likely quite old.