Hacker News

Show HN: Subtle.sh – Zero-setup E2E encrypted messaging using OpenPGP and Soketi

Hacker News - Sun, 09/08/2024 - 7:22am

Hey HN,

I've been playing around with OpenPGP.js and Soketi lately and decided to build a simple E2E encrypted messaging app. It's called subtle.sh.

The idea is pretty straightforward: you need to send a secret to someone, but you don't want to use Slack, email, or any other plain text medium. subtle.sh generates a fresh session with ephemeral keys, you share the link, and once the tab is closed, everything disappears.

Some key points: - Zero setup required (no accounts, no installation)

- E2E encryption using OpenPGP.js

- Real-time messaging with Soketi (an open-source Pusher alternative) - Built with Next.js, React, and Tailwind - Self-hostable backend

You can take control of as much of the stack as you want: 1. Use the official deployment as-is for quick, ephemeral sharing 2. Self-host the entire stack for complete control 3. Host just the backend and connect it to the official frontend

It's not meant to replace your password manager, but it could be handy when you need to quickly share credentials with someone you don't have a shared vault with. The whole thing is open source, and I've included docs on how to self-host if you want to keep full control of your data.

I've included detailed docs on self-hosting, making it accessible even if you're not a seasoned sysadmin. I'd love to get your thoughts, feedback, or any security considerations I might have overlooked.

Website: https://subtle.sh GitHub: https://github.com/ivstiv/subtle.sh

The reason I didn't just use Pusher's end to end capabilities was mostly because I wanted to Play with OpenPGP.js but also don't plan on having Pusher as the sole communication mechanism in the future.

P.S. Yes, I know carrier pigeons are a viable alternative, but they're not exactly zero-config and user-friendly.

Comments URL: https://news.ycombinator.com/item?id=41479748

Points: 1

# Comments: 0

Categories: Hacker News

Mix the City

Hacker News - Sun, 09/08/2024 - 7:17am
Categories: Hacker News

Warner Brothers Cartoon Companion

Hacker News - Sun, 09/08/2024 - 7:07am
Categories: Hacker News

Show HN: Node-scim / OpenAPI for SCIM v2

Hacker News - Sun, 09/08/2024 - 7:05am

I don't normally share work at such a raw / early stage of development, but I thought I'd share this as: - To my surprise I couldn't find a decent openapi specification for SCIM v2 - I also couldn't find any information about people using SCIM in conjunction with Firebase Auth / GCP identity platform

As I said this is incredibly raw / early - doesn't support much, and the openapi specification is still extremely inaccurate, but in case anyone else is looking for a SCIM client example thought I'd share.

It also makes use of one of my other projects https://openapi-code-generator.nahkies.co.nz to generate most of the boilerplate from the openapi specification, and will hopefully turn into a good example of how to effectively leverage that.

(also if anyone sees this and can direct me to a accurate/complete openapi specification for SCIM v2 that would be incredibly helpful)

Comments URL: https://news.ycombinator.com/item?id=41479672

Points: 1

# Comments: 0

Categories: Hacker News

Useful use of cat(1)

Hacker News - Sun, 09/08/2024 - 6:57am
Categories: Hacker News

Show HN: Automate API Testing with Record and Replay

Hacker News - Sun, 09/08/2024 - 6:34am

This is shailendra here. Founder at HyperTest - hypertest.co

We are trying to make integration testing easy for developers. A lot of other teams and tools have taken a stab at this problem and having seen them we believe we have improvised the approach to help developers achieve this with minimum effort and pain.

How it works: Developers set-up our SDK (2-lines) in the source code their (backend) services and configure it to record traffic from any environment. When HyperTest works in RECORD mode it collects end to end trace of every incoming request i.e. the request, response and outbound calls.

These requests (tests) can be replayed on a new build later (pre-push or at CI) to check for regressions in API responses and outbound calls. In the REPLAY mode HyperTest uses mocked responses of all dependent systems to keep tests non-flakey and results deterministic and consistent. 3-min demo - https://www.youtube.com/watch?v=x6hmDUNFGW4

What does it do: HyperTest SDK auto-instruments all key functions and methods across all libraries you use to make outbound calls. This helps HyperTest mock these calls in REPLAY without asking developers to make any change in their source code.

How is this better: 1. Set up is just like how you will set up an APM, i.e., 5 mins adding 2-lines of the SDK.

2. Support all protocols like http, graphQL, gRPC, Kafka and AMQP to cater to more use cases. Adding more as we speak

3. Test can be generated from any environment can be run anywhere even locally.

4. Active de-duplication to reduce the number of requests run on REPLAY. Optimise for code coverage & filter requests that don't cover additional lines of code

5. Distributed tracing to help developers debug root cause faster

6. Auto-updates mocks as dependencies change to keep test results trustworthy.

HyperTest is currently available only for node projects. We work the teams with 5 or more services at the moment and have 50+ teams using it actively.

If this seems valuable can set-up a quick intro and explain how to get started here -https://calendly.com/shailendra-hypertest/30min

Would love feedback!

Comments URL: https://news.ycombinator.com/item?id=41479555

Points: 1

# Comments: 1

Categories: Hacker News

Pages