{"componentChunkName":"component---src-pages-author-author-yaml-id-js","path":"/author/narendra-pareek/","result":{"data":{"allMarkdownRemark":{"edges":[{"node":{"id":"9e48255c-2de2-577e-b4e5-810ea773f45e","html":"

You might have already participated in Hacktoberfest as a contributor. But what if you have a project that you want to open source and get contributions during Hacktoberfest?

\n

Well, this guide covers everything you need to know:

\n\n
\n

Most Important: The project should be in Working Condition or at both Logical and Coding End (if coding project). Here are the list of OpenSource repos by LoginRadius and the issues/guidelines for contributers.

\n
\n

If your project satisfies the above condition, you can just go ahead and implement the steps described as follows. By implementing these steps, you can successfully open source your project and get contributions for your open source project, especially during Hacktoberfest.

\n

Title

\n

Your project should have a concise title. This title will be the name of your project repo on GitHub.

\n\n

Repository Description

\n\n

Topic/Labels

\n

As part of Hacktoberfest and to make it easy to find the project, the repository should have one or more of the following labels

\n\n

Project README

\n

Each project must have a README file.

\n\n

CONTRIBUTING.MD

\n

It should have instructions on how to contribute to the project. Contributions guidelines should have at least three different sections.

\n\n

License

\n

Choose an appropriate open source license for your project

\n

MIT license is one of the popular open source licenses used by many open source projects on GitHub. Click here to know more about open source licenses and choose the license most appropriate for your project.

\n

Issues in Repos

\n

Each repo should have at least 5-10 well-labeled issues to be considered for Hacktoberfest.

\n\n

As a maintainer, you could also be eligible to win swag from DigitalOcean for participating in Hacktoberfest. For more information, click here.

\n","frontmatter":{"title":"How to Participate in Hacktoberfest as a Maintainer","author":{"id":"Narendra Pareek","github":"pareek-narendra","avatar":null},"date":"September 28, 2021","updated_date":null,"tags":["Hacktoberfest","Hacktoberfest 2021","Open Source"],"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1.5037593984962405,"src":"/static/9b4d9cbebcded6e980c32d1f168669e4/ee604/cover.png","srcSet":"/static/9b4d9cbebcded6e980c32d1f168669e4/69585/cover.png 200w,\n/static/9b4d9cbebcded6e980c32d1f168669e4/497c6/cover.png 400w,\n/static/9b4d9cbebcded6e980c32d1f168669e4/ee604/cover.png 800w,\n/static/9b4d9cbebcded6e980c32d1f168669e4/f3583/cover.png 1200w","sizes":"(max-width: 800px) 100vw, 800px"}}}},"fields":{"authorId":"Narendra Pareek","slug":"/engineering/hacktoberfest-participation-as-maintainer/"}}},{"node":{"id":"687ad908-af0e-57f0-bf79-afa7bec315b9","html":"

Suppose, You have a massive amount of data and want to add them to your new product campaign. You are probably not sure that all of them belong to the right audience; some might be spam or disposable emails.

\n

Now, the actual problem is that how can I do validate so many email addresses?

\n

Well, it would be great to verify them all together in a single shot with 100% accurate results without any manual interaction.

\n

I am writing this article as so many of us have the same concern and are looking for a business email validator that can resolve this problem with high accuracy.

\n

Here we have the tool EVA (Email Verification APIs), which provides excellent email verification services with their open APIs.

\n

EVA service with Google Sheet

\n

Google allows you to create scripts using your custom functions with the service you wanted to use. You can make these functions in standard JavaScript with a basic understanding of JS. Here is the guide to start with Custom Functions in Google Sheets.

\n

Custom Function

\n

=eva(email)

\n

Eva needs the email address only from you and the rest will perform with their excellent service. You can also go through the Email Verification API (EVA) article for more details about EVA.

\n

Here is the custom function created using the EVA Services to validate email.

\n
function eva(email) {\n  var url = "https://api.eva.pingutil.com/email?email="+email;\n  var res = UrlFetchApp.fetch(url);\n\n  // Get status of the API\n  var status = res.getResponseCode();\n  if (status != 200) {\n    return false;\n  }\n  var contextText = res.getContentText();\n \n  var result = JSON.parse(contextText);\n \n // Logic to check Business Email\n  if (result["data"]["disposable"] === false && result["data"]["webmail"] === false &&  result["data"]["spam"]  === false && result["data"]["deliverable"] === true) {\n    return true\n  }\n  return false;\n}
\n

Add Script

\n

We are all set with our script and now need to add this script under Google Script Editor under tools and save it.

\n

\"Google

\n

Run Script

\n

That all! Now I need to drag this formula to the entire rows on which I want to perform validation.

\n

\"Drag\"

\n

Perfect :)

\n

Setup Trigger

\n

You can set up a trigger to action (i.e., on open, edit or change in sheet) by navigating tools -> script editor and click on the left alarm icon.

\n

\"Trigger\"

\n

Conclusion

\n

In this article, I've explained EVA services to validate email addresses in bulk using the google script editor. If you like what you read, leave a \"thank you note\" in the comment section.

\n","frontmatter":{"title":"How to Verify Email Addresses in Google Sheet","author":{"id":"Narendra Pareek","github":"pareek-narendra","avatar":null},"date":"February 22, 2021","updated_date":null,"tags":["EVA","Google Script","Email Validation"],"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1.5037593984962405,"src":"/static/532c1db0bab60ffa3eead6e63d119ff7/ee604/eva.png","srcSet":"/static/532c1db0bab60ffa3eead6e63d119ff7/69585/eva.png 200w,\n/static/532c1db0bab60ffa3eead6e63d119ff7/497c6/eva.png 400w,\n/static/532c1db0bab60ffa3eead6e63d119ff7/ee604/eva.png 800w,\n/static/532c1db0bab60ffa3eead6e63d119ff7/e6250/eva.png 1074w","sizes":"(max-width: 800px) 100vw, 800px"}}}},"fields":{"authorId":"Narendra Pareek","slug":"/engineering/eva-google-script/"}}},{"node":{"id":"0867dd59-ba31-51af-b5ab-f5c10842430c","html":"

PKCE is an OAuth 2.0 security extension for public clients on mobile devices intended to avoid a malicious programme creeping into the same computer from intercepting the authorisation code. The RFC 7636 introduction discusses the mechanisms of such an attack.

\n

PKCE has a different specification of its own. It allows applications to use the most reliable OAuth 2.0 flows in public or untrusted clients - the Authorization Code flow. In order to efficiently use a dynamically generated password, it achieves this by doing some setup work before the flow and some verification at the end of the flow.

\n

This is important because getting a fixed secret in a public client is not safe.

\n

In this blog, we will see how PKCE is useful in authorization code flow for OAuth and OIDC and how you can use this with your OAuth and OpenID Connect providers.

\n

What is PKCE

\n

Proof Key for Code Exchange as known as PKCE, is a key for preventing malicious attacks and securely performing code authorization flow.

\n

I would say, PKCE is used to provide one more security layer to the authorization code flow in OAuth and OpenID Connect.

\n

PKCE is mainly useful for the client-side application or any web apps that are using the client secret key and used to replace the static secret used in the authorization flow.

\n

This flow basically works with two parameters Code Verifier and Code challenge. Let's see what are these parameters, how we use them, and generate them.

\n

PKCE code verifier and challenge

\n

The code verifier is a cryptographically random string using the characters A-Z, a-z, 0-9, and the punctuation characters -._~ (hyphen, period, underscore, and tilde), between 43 and 128 characters long.\nOnce the client has generated the code verifier, it uses that to create the code challenge.

\n

For devices that can perform a SHA256 hash, the code challenge is a BASE64-URL-encoded string of the SHA256 hash of the code verifier.

\n

Generate code verifier and code challenge

\n

Here you can see the examples to generate the Code verifier and code challenge in different languages. Either you can find Node and Go Packages for this but I would recommend you to not depend on any package for such small things.

\n

NodeJs

\n
var crypto = require("crypto")\n\nfunction base64URLEncode(str) {\n    return str.toString('base64')\n        .replace(/\\+/g, '-')\n        .replace(/\\//g, '_')\n        .replace(/=/g, '');\n}\nvar verifier = base64URLEncode(crypto.randomBytes(32));\nconsole.log("code_verifier: ", verifier)\n\nif(verifier){\n    var challenge = base64URLEncode(sha256(verifier));\n    console.log("code_challenge: ",challenge)\n}\n\n\nfunction sha256(buffer) {\n    return crypto.createHash('sha256').update(buffer).digest();\n}
\n

Golang

\n
package main\n \nimport (\n    "crypto/sha256"\n    "encoding/base64"\n    "fmt"\n    "math/rand"\n    "strings"\n    "time"\n)\n \ntype CodeVerifier struct {\n    Value string\n}\n \nconst (\n    length = 32\n)\n \nfunc base64URLEncode(str []byte) string {\n    encoded := base64.StdEncoding.EncodeToString(str)\n    encoded = strings.Replace(encoded, "+", "-", -1)\n    encoded = strings.Replace(encoded, "/", "_", -1)\n    encoded = strings.Replace(encoded, "=", "", -1)\n    return encoded\n}\n \nfunc verifier() (*CodeVerifier, error) {\n    r := rand.New(rand.NewSource(time.Now().UnixNano()))\n    b := make([]byte, length, length)\n    for i := 0; i < length; i++ {\n        b[i] = byte(r.Intn(255))\n    }\n    return CreateCodeVerifierFromBytes(b)\n}\n \nfunc CreateCodeVerifierFromBytes(b []byte) (*CodeVerifier, error) {\n    return &CodeVerifier{\n        Value: base64URLEncode(b),\n    }, nil\n}\n \nfunc (v *CodeVerifier) CodeChallengeS256() string {\n    h := sha256.New()\n    h.Write([]byte(v.Value))\n    return base64URLEncode(h.Sum(nil))\n}\n \nfunc main() {\n    verifier, _ := verifier()\n    fmt.Println("code_verifier: ", verifier.Value)\n    challenge := verifier.CodeChallengeS256()\n    fmt.Println("code_challenge :", challenge)\n}\n
\n

Implement the OAuth 2.0 Authorization Code with PKCE Flow

\n

Get the Authorization code

\n

In the OAuth Authorization flow, we need to have the code verifier and code challenge to start with the authentication and obviously an OAuth provider to connect.

\n

For the initial request, we need to pass the codechallenge and codechallenge_method to the OAuth or OIDC provider that supports PKCE based flow.

\n

The request will look like:

\n
Provider + /oauth/redirect?\nclient_id={client_id}\n&redirect_uri={Callback URL}\n&scope={Scope}\n&response_type=code\n&state={random long string}\n&code_challenge={code challenge}\n&code_challenge_method=SHA256
\n

The provider should redirect you to the authentication/login page and where you’ll get the code after successful authentication.

\n

Code Exchange

\n

In the code exchange request, we need to pass the code we have received through the above request and the code verifier that we have generated in our first step.

\n
POST Provider + /oauth/access_token\n\nRequest body:\n{\n   client_id:{client_id},\n   client_secret:{client_secret},\n   redirect_uri:{redirect_uri},\n   response_type:token,\n   Code:{code} // That we have received in authorization request\n   code_verifier: {code verifier // generated in the first step\n}
\n

Once the codeverificer hash matches with the codechallenge of the authorization request, You will get the token in the response with status code 200 OK.

\n
{\n    "access_token": "c5a****b-****-4*7f-a********e4a",\n    "token_type": "access_token",\n    "refresh_token": "5*****82-b***-**82-8c*1-*******7ce",\n    "expires_in": 11972\n}
\n

That's it and you've implemented PKCE flow in your application.

\n","frontmatter":{"title":"PKCE: What it is and how to use it with OAuth 2.0","author":{"id":"Narendra Pareek","github":"pareek-narendra","avatar":null},"date":"September 03, 2020","updated_date":null,"tags":["PKCE","Oauth","OIDC"],"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1.5037593984962405,"src":"/static/7ba5011bcf44e895dd050e8766d4d005/2a4de/pkce.png","srcSet":"/static/7ba5011bcf44e895dd050e8766d4d005/69585/pkce.png 200w,\n/static/7ba5011bcf44e895dd050e8766d4d005/497c6/pkce.png 400w,\n/static/7ba5011bcf44e895dd050e8766d4d005/2a4de/pkce.png 600w","sizes":"(max-width: 600px) 100vw, 600px"}}}},"fields":{"authorId":"Narendra Pareek","slug":"/engineering/pkce/"}}},{"node":{"id":"10a0485a-b55e-5ccf-b264-53d9645898a1","html":"

Migrating your existing code to a new programming language is a very tedious task. We need to have a proper set of requirements and some obvious benchmarking between the new and existing technology.

\n

So here our journey started to transform (not convert) our existing code to a new language. You might be thinking why I have used the word transformation instead of conversion, so -

\n

Conversion: Conversion is just about writing your existing code in different languages as it is.

\n

Transformation: Transformation is about leveraging all possible benefits of a new language and convert accordingly.

\n

Why we decided to change?

\n

The idea of migrating code to a new programming language started with a simple requirement: we wanted to take our cloud solution to on-premise as well. Till now, our services were written in NodeJS for a cloud solution and it was doing pretty well. The performance was also good but there is nothing that cannot be improved upon. So, along with performance improvement, we started to find out that can we make a GUI or CLI using existing NodeJS code that can take our solution on-premise?

\n

Answer for that was practically YES. but, technically NO. If we’re writing apps with a GUI, Node can’t do it on its own. We had to use some other projects which provide GUI creation capabilities (eg: ElectronJS, NW.js, etc). Making CLI seemed doable but there were also problems like the inablility to have single file distribution for our code. And the ability to download a single file and execute commands - without an installer, or even a setup process - does wonders for a user. This also makes the product easily backward-compatible.

\n

Also, another factor came in that it was better to switch to a technology that works closely with gRPC.

\n

So, we drew out a few goals for our new solution

\n\n

After research with our requirement, we were able to figure out that we can achieve these with GoLang, developed by Google.\nOn the basis of our research, we also did some benchmarking on different node js frameworks and GoLang.

\n

Benchmarking sever we’ve used with below configurations

\n

\n \n \n

\n

The benchmarking result was pretty much similor to what we are thinking. Here are the benchmarking results -

\n

100000 Requests 5000 Concurrency

\n

\n \n \n

\n

Request per second (s) and Time per request (ms)

\n

The below chart is showing that the Number of requests is very high compared to other node js frameworks.

\n

\n \n \n

\n

Total Data Transferred

\n

\n \n \n

\n

All the data clearly shows the direction so we decided to move to GoLang.

\n","frontmatter":{"title":"A journey from Node to GoLang","author":{"id":"Narendra Pareek","github":"pareek-narendra","avatar":null},"date":"August 11, 2020","updated_date":null,"tags":["NodeJs","Golang","Performance"],"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1.5037593984962405,"src":"/static/0cb80044e5634c85f2b1002c7c3661d8/2a4de/node-go.png","srcSet":"/static/0cb80044e5634c85f2b1002c7c3661d8/69585/node-go.png 200w,\n/static/0cb80044e5634c85f2b1002c7c3661d8/497c6/node-go.png 400w,\n/static/0cb80044e5634c85f2b1002c7c3661d8/2a4de/node-go.png 600w","sizes":"(max-width: 600px) 100vw, 600px"}}}},"fields":{"authorId":"Narendra Pareek","slug":"/engineering/a-journey-from-node-to-golang/"}}}]},"authorYaml":{"id":"Narendra Pareek","bio":"Narendra is a Product Manager at LoginRadius, where he is utilizing his skills in driving vision and roadmap for businesses. He focuses on collaboration between customer and company. He is also having a 5 years of develoment experience in different NodeJS, GO and PHP language projects.","github":"pareek-narendra","stackoverflow":"13819129","linkedin":"narendra-pareek","medium":null,"twitter":"PareekNaren","avatar":null}},"pageContext":{"id":"Narendra Pareek","__params":{"id":"narendra-pareek"}}},"staticQueryHashes":["1171199041","1384082988","2100481360","23180105","528864852"]}