cben / mathdown

Collaborative markdown with math
https://www.mathdown.net
Other
419 stars 46 forks source link
collaborative editor firebase hacktoberfest markdown math

Source of https://www.mathdown.net

Online collaborative markdown with math. Main features:

Powered by CodeMirror, MathJax and Firebase's Firepad. I'm using "CM" = CodeMirror, "MJ" = MathJax abbreviations a lot in the project.

Alpha quality – will eat your math, burn your bookmarks & expose your secrets. I mean it. See for example #85 — saving would sometimes be silently broken, for half a year! I'm working to make it more robust (and tested) but for now, be careful.

Issues: mathdown HuBoard CodeMirror-MathJax issues

License

My code is under MIT License. Exception: font/ contains a subsetted Bitstream Charter font under a permissive license - see fonts/LICENSE.

Dependencies:

Document hosting and privacy(?) on Firebase

All user data is stored in Firebase, now owned by Google. Their privacy policy. Documents access (read AND edit) is by secret document id which is part of the url. This is grossly unsecure unless using HTTPS.

The downside is users can't really control their data. Running a "self-hosted" copy of the site still leaves all data in the hands of Firebase. See #4 for more discussion.

The upside is all forks interoperate; you can change the design or tweak the editor and still access same documents. E.g. https://mathdown.net/index.html?doc=demo and http://rhythmus.be/mathdown/index.html?doc=demo look different but access the same doc -- and real-time collaboration between them works!

I'm so far on the free Firebase plan - 100 devices (not sure if 1:1 with users), 1GB Data Storage (used < 100MB). => Will need 49USD/mo plan as soon as I get non-negligible usage. https://mathdown.firebaseio.com/?page=Analytics (only visible to me)

Deletion is impossible

The current Firebase security rules make document history append-only. That's a nice safety feature but it means that once a document's URL gets out, it's full history is forever accessible to the the world. This must change eventually (#92).

Browser support

Basically whatever CodeMirror supports: IE8+ and about everything else. But mobile is currently almost unusable (#81).

JavaScript is required (and this includes running the non-Free firebase.js in your browser). You can't even read documents without JavaScript; reading won't be hard to fix (#7) — but editing documents without JavaScript is implausible (I plan to settle for append-only form).

Cookies

The only cookies I'm aware of:

I'm not sure Firebase never sets cookies. Things will change once I implement login (#50).

Installing dependencies

Dependency Status devDependency Status Greenkeeper badge

  1. After checking out, run this to materialize client-side dependencies:

    git submodule update --init --recursive

    Append --remote to upgrade to newest versions of all submodules (need to commit afterwards if anything changed). Known constraints on updating all deps:

    (I'm directly working in gh-pages branch without a master branch. GH Pages automatically resolves https://... submodules. It's no longer the primary hosting but it's still useful to test the static version works.)

  2. To install server-side dependencies (and devDependencies) listed in package.json run:

    npm install

    (But when deploying to RHcloud or Heroku, npm install might run in --production mode and devDependencies won't be available.)

    To see whether any updates are needed/possible, run npm outdated. To update run:

    npm update --save npm shrinkwrap

    Then commit the new package.json and npm-shrinkwrap.json. TODO: find way to use same node.js version in dev and prod?

Test(s)

Travis test runner Saucelabs browser tests

test/browser-on-saucelabs.spec.coffee runs tests on several browsers using free browser testing courtesy of Sause Labs. There are pathetically few tests.

To run the tests:

npm install  # once
npm test

To run only some tests and/or browsers, use:

./node_modules/.bin/mocha --grep firefox

The test runs automatically on any commit and pull request. I've tried several free services for this, and currently prefer Travis:

Where it's deployed and how to run your fork

The main deployment currently runs on Heroku. See deployment/ subdirectory for details. I'm interested at going back to static hosting.

However you run it, you can open the same document ids (doc=...) and real-time collaboration will work!

Quick ways to run:

Deploy on Heroku:

heroku create my-mathdown --remote heroku-my-mathdown
git push heroku-my-mathdown gh-pages:master

some other ways to deploy on Heroku might not work due to my use of submodules (?)

Run local server (server.coffee):

npm install  # once
env PORT=8001 npm start  # Prints URL you can click

(you can choose any port of course. Ctrl+C when done.)

This app mostly works as pure static pages, and I intend to keep it this way.

The only benefits the dynamic server is going to bring (not implemented yet) will be:

  1. Including the document text in the HTTP response for search engines (#7).
  2. Prettier mathdown.net/foobar instead of mathdown.net/?doc=foobar URLs (#59).

Other things called "mathdown":

I should really talk to these folk whether it's OK that I'm using the name and the domain...