potential Assignment6

[zoe-1]

Potential Road Map for Next Assignment. Please share your thoughts.

Static Assets, Partials, and TLS

Configure the application to use TLS/SSL

• Generate your own TLS/SSL certificate
• Make "certs" directory in ./lib.
• Place the certicate you generate into "certs" directory.

  Configure two server connections

• One labelled ['web'] on port 8000 with no TLS configured.
• The other labelled ['web-tls'] on port 8001 will use TLS.
  Configure this connection to use the certificates you just generated
  and placed in ./lib/certs
  • Example certs at npm newww

    Configure the home plugin to work with both connections 'web', 'web-tls' connections

• Make a new point in the home plugin called: "login"
  • Make login route display view template named login.html.
• Use partials to display the login form
  • make a directory inside of the ./views called partials
  • configure the home plugin to use the ./views/partials directory to load partials from.
  • In ./views/partials/ directory make a file named form.html.
    • form should have two inputs one type="text" named "username" and the second type="password" named "password".
    • form should have one submission button with text value "Login".
  • Inside login.html template use load the partial file named "form.html"

    Utilize the static assets.

• Make directory in root of project called "assets".
• Inside the assets directory, make three directories:
  "styles" for css, "scripts" for JS scripts,
  "images" for project images.
  • Place Hapi University logo into the images directory
    and display it on the home page (home.html). (image is in the repo ./images/logo.png)
  • Place a CSS file in the stylesheets directory (styles).
    Name css file styles.css:
  • Make one simple style:
    h3 { font-size: 24px; font-weight: bold; }
  • Use the stylesheet in home.html. Make a title inside h3 tags.
  • Make a script named login.js and put in ./assets/scripts
  • Make this script print a console message to the browser when the form button is clicked.
  • In the home plugin configure the application to serve these static assets.

    100% test coverage

    Issues to discuss

• Does the community want to enforce every route to utilize tls. This seems to have become the standard since this happened: Largest DDOS attack in history
• Do you have a issues to discuss? Please share it.

  Next After This Assignment

• Make POST request from our form.
• Validate the post request with Joi.
• Use hapi-auth-cookie to start session.
• Successful login goes to restricted access page.
• Error handling of login failure

Note: I really enjoy distributed learning in hapi university. It is a great way to learn. Plus, I consider it a privilege to maintain this project. However, I see many people stopped participating in the university during the last assignment when I began to maintain it. So, if the community finds a better maintainer I would be willing to stop. Whatever is best for the community is what I want to do! Otherwise, I will keep writing assignments and maintaining the project.

[ghost]

Nice assignment.

For me you can be the maintainer. That a lot of people do not give thier answers is not because of you. The problem is that on the last assignments of hueniversity there were almost no feedback and it took ages for a new assignment was placed.

[zoe-1]

Thank you for the feedback. I am about to upload a clean up of the project. Hold on a couple minutes before you sync up to the remote master. It's ready to go.

[hussainanjar]

Hi @zoe-1 I think you and @AdriVanHoudt are doing an awesome Job :+1: . I will continue to be part of this university and hope others join in too.

We need to market it more, may be using hapijs twitter account :smile:

[FennNaten]

I am about to upload a clean up of the project. Hold on a couple minutes before you sync up to the remote master.

Yes, sorry, I didn't have the possibility to clean up the PR according to comments this week-end. I'm sick (nothing too bad, just enough to waste the week-end) and I have difficulties concentrating on code ^^'

Assignment looks fine for me. I'm for TLS everywhere.

About your note: I also find community learning to be very interesting, and I think you do a great job as a maintainer. Perhaps the whole thing lacks a bit of advertisement in the node community?

[AdriVanHoudt]

First of all I now what you mean @zoe-1 it's hard to replace someone as experienced as @hueniverse and I think part of the charm of hueniversity was that is was lead by the creator of, but I do think you are doing a fine job! But yeah having someone with proven experience helps. Also thanks @hussainanjar!

My thoughts on the assignment:

• Maybe start the discussion before merging the previous one so the assignments follow up on each other!
• why not tsl on port 433? I thought this was standard
• Pretty much it :D I'm sure I will come up with more once I start haha (also a reason to start this process earlier ;))

[zoe-1]

Thank you for your responses!

• In respect to, TLS everywhere.
  Yes, I agree. Will put in assignment.
• In respect to, Why not port 443?
  Ports below 1024 are "privileged ports". Only root has access to
  run services or daemons to "privilege ports". So, when the proeject is in
  development state we do not use ports 80 (http) or 443 (https). When deploying the project
  port configs are changed and the server is run as root. At least that is how I do it.
  • Do we want to force everyone to configure their project to work with
    priliveged ports? I assume we do not.
• In respect to starting a discussion for next assignment sooner.
  Yeah, this is a good idea. Last week was extemely busy, so did not start
  it sooner, sorry. This week will begin it earlier. Maybe today or tomorrow :-)

@FennNaten No worries about the cleanup. And, hope you are feeling better:-)
@AdriVanHoudt Thank you for your feed back and all the work you put into the community.
@hussainanjar Good recommendation about the marketing! Glad you are involved with the project.
@roelof1967 Glad you like the assignment :-)

Marketing

In respect to promoting the university, @hueniverse said:

... if you just promote it on twitter and mention @hapijs I will retweet it.

See @hueniverse post

We should all make tweets promoting hapijs / university with the @hapijs tag in the tweet.
Then, @hueniverse can retweet them and get the word out. What do you think?

• My twitter account is jswenson74 I will make a tweet after I get the next assignment posted.

Cheers!

[rutaihwa]

I got tied up with school work and side projects I missed the assignment 5.

[ghost]

rutaihwa ; no problem. school is very important too even as family

[zoe-1]

@rutaihwa Glad you are back!

[AdriVanHoudt]

Good point in the ports! Also if you still do a PR for previous assignments I will still try to review them but ofc they won't get merged. And yeah the moment the next assignment is there I'll tweet as well @adrivanhoudt_ and again props for the work @zoe-1

On Mon, 1 Jun 2015 22:13 Jon Swenson notifications@github.com wrote:

Closed #142 https://github.com/hapijs/university/issues/142.

— Reply to this email directly or view it on GitHub https://github.com/hapijs/university/issues/142#event-319327457.

[AdriVanHoudt]

@zoe-1 can you set the due time of the milestone to the due date of the assignment?

[zoe-1]

@AdriVanHoudt Yes, the due date can be set in the milestone. Assignment6's milestone has it set.