{"componentChunkName":"component---src-templates-blog-list-template-js","path":"/engineering/14","result":{"data":{"allMarkdownRemark":{"edges":[{"node":{"excerpt":"A list is a set of index-accessible objects that provides functionality for searching, sorting, and manipulating list items. C# List class…","fields":{"slug":"/engineering/list-csharp/"},"html":"

A list is a set of index-accessible objects that provides functionality for searching, sorting, and manipulating list items. C# List class represents a collection of strongly typed objects that can be accessed by using the index. In this article, we learn how to work with lists in C# using the C# List class to add, remove, and search items in a collection of objects using List class methods and properties.

\n

What is List in C#?

\n

List<T> class in C# cotains a strongly typed list of objects. It provides functionality to create a list of objects, add list items, search, sort and manipulate list items. In List<T>, T is the type of objects like int, string, or any user-defined object.

\n

List<T> is required when we have multiple items with the same object, like data of student's marks or data of various subject's names (string). In that case, we can use List<T> to maintain that data into a list.

\n

List<T> comes under the System.Collection.Generic namespace and the index start from 0.

\n

How to Create a List?

\n

We can create a list by calling the List<T> constructor; It takes an argument of int type that is the list's capacity. If we do not define the capacity, then the list size will be dynamic and every time an element is added, the list size is increased. The list can be created using the below syntax.

\n
List<int> lst=new List<int>(); // list with dynamic capacity\nList<int> lstCapacity=new List<int>(10); // list with capacity of 10 elements
\n

As we have discussed above, Here T is the type of object for which we have to create the list. The type is int in the above code, which means we can store the int type of variable's value.

\n

Note: If we have created the list using the capacity value and when more than the defined capacity elements are added, the list size will automatically increase.

\n

Add elements into a list

\n

We can add elements directly into when we have created a list or add elements after creating a list. I will discuss both methods here.

\n
    \n
  1. Create list
    2. \n
\n
List<int> lst = new List<int>\n{\n    1,2,3,4,5,6\n};
\n
    \n
  1. Add items after creating list
    2. \n
\n
List<int> lst = new List<int>();\nlst.Add(1);\nlst.Add(2);\nlst.Add(3);\nlst.Add(4);\nlst.Add(5);\nlst.Add(3);
\n

Properties of a list

\n

The list has mainly two properties.

\n
    \n
  1. Capacity- This property tells the capacity of a list, which means how many elements a list can contain.
    2. \n
\n
List<int> lst = new List<int>();\nConsole.WriteLine(lst.Capacity); //Prints 0-- Default\nList<int> lst1 = new List<int>(5);\nConsole.WriteLine(lst1.Capacity); // Prints 5
\n
    \n
  1. Count- This property tells that how many elements are there in a list
    2. \n
\n
List<int> lst = new List<int>(5);\nConsole.WriteLine(lst.Count); // Prints 0\nlst.Add(1);\nlst.Add(2);\nConsole.WriteLine(lst.Count); //Prints 2
\n

Read all elements of a list

\n

To get all the elements of a list, we have to loop through the list. We can use for or foreach loop to get the elements. Below is the code to get all the elements using both the loops and print the element's values.

\n
    \n
  1. \n

    Using a foreach loop

    \n
    2. \n
\n
foreach (var item in lst)\n{\n    Console.WriteLine(item);\n}
\n
    \n
  1. \n

    Using for loop

    \n
    2. \n
\n

In this method, we have to run the loop till the last element of the list. For that, I have used the Count property of the list

\n
for (int i = 0; i < lst.Count; i++)\n{\n    Console.WriteLine(lst[i]);\n}
\n

Both the methods will give the same output. I am taking the above list example so the result will be

\n

Output:

\n
1\n2\n3\n4\n5\n3
\n

Remove element from a list

\n

To remove items from a list, we can use various list methods.

\n
    \n
  1. Remove(T item)- This method removes the first occurrence of an element from a list. We have to pass the element into this method as a parameter.
    2. \n
\n
lst.Remove(3); // Removes the fist occurance of element 3
\n
    \n
  1. RemoveAll(Predicate<T> match)- This method removes all elements from a list that matches the condition defined by the specified predicate. We have to pass the predicate as a parameter.
    2. \n
\n
lst.RemoveAll(x=>x==3); // Removes all the elements 3
\n
    \n
  1. RemoveAt(int index)- This method removes the element from the given index. We have to pass the index as a parameter.
    2. \n
\n
lst.RemoveAt(0); // Removes 0th index element from a list
\n
    \n
  1. RemoveRange(int index, int count)- This method removes the element from the given index to the specified count. We have to pass the starting index and count as a parameter.
    2. \n
\n
lst.RemoveRange(0,2); // Removes element 1,2 because the starting index is 0 and count is 2
\n
    \n
  1. Clear()- This method clears all the elements from a list.
    2. \n
\n
lst.Clear(); // Removes all elements from a list
\n

Conclusion

\n

In this article, we have discussed the basics of List<T>, properties, and some methods. The main advantage of using the list is that it is faster and it is more friendly because it gives us many inbuilt methods to use and do the manipulation according to ourselves. If you want to learn more about C# here is an article written by me on How to Work with Nullable Types in C#

\n","frontmatter":{"date":"February 25, 2021","updated_date":null,"description":"In this article, we will learn how to create lists in C# also how to use the C# list class to add, remove, and search items in a collection of objects.","title":"How to Create List in C#","tags":["C#","List"],"pinned":null,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1.3333333333333333,"src":"/static/90961274d154a2d133945ce7dcb461ed/14b42/coverimage.jpg","srcSet":"/static/90961274d154a2d133945ce7dcb461ed/f836f/coverimage.jpg 200w,\n/static/90961274d154a2d133945ce7dcb461ed/2244e/coverimage.jpg 400w,\n/static/90961274d154a2d133945ce7dcb461ed/14b42/coverimage.jpg 800w,\n/static/90961274d154a2d133945ce7dcb461ed/47498/coverimage.jpg 1200w","sizes":"(max-width: 800px) 100vw, 800px"}}},"author":{"id":"Hemant Manwani","github":"hemant404","avatar":null}}}},{"node":{"excerpt":"Did you know that in only a few minutes, a DDoS attack can bring your website down? Hackers are targeting your site and overloading your…","fields":{"slug":"/engineering/how-to-mitigate-ddos-attack/"},"html":"

Did you know that in only a few minutes, a DDoS attack can bring your website down? Hackers are targeting your site and overloading your network and your server. Your website becomes unresponsive, unavailable and can even go entirely offline. We'll show you how DDoS attacks can be avoided.

\n

What is DDoS Attack?

\n

\n \n \n

\n

A Distributed Denial of Service (DDoS) is a targeted cyber attack on a website or device where a malicious attacker's flood of traffic is sent from single or multiple sources. The primary purpose of DDoS is to make a machine or network resource unavailable to its genuine users by temporarily or disrupting the services of a host connected to the Internet. If we do not use appropriate security practices or tools, it makes your application into a non-functional situation.

\n

The malicious attacker uses multiple compromised computer systems or devices or IoT devices for the attack. These all compromised devices make the DDoS attacks more effective.

\n

What is DDoS mitigation?

\n

DDoS mitigation is a process in which we have used a set of techniques or tools for minimizing or mitigating the impact of distributed denial-of-service (DDoS) attacks on the targeted servers or networks.

\n

Types of DDoS Attacks

\n

1. Volume Based Attacks

\n

The Volume Based Attack DDoS attack is the most common DDoS attack. An attacker uses multiple methods to generate massive traffic volumes to overwhelms a machine's network bandwidth because of creating massive volume traffic that makes it impossible for legitimate traffic to flow into or out of the targeted site. The machine continually has to check the malicious data requests and has no room to accept legitimate traffic. We can detect this type of attack easily.

\n

2. Protocol Attacks

\n

The Protocol attacks target Layer 3 and Layer 4. Attackers use malicious connection requests for consuming the processing capacity of network infrastructure resources like servers, firewalls, and load balancers.

\n

An SYN flood (half-open attack) is the most common way; in this attack, the attacker sends repeated initial connection requests and overwhelms all available ports on a targeted server machine or device.

\n

3. Application Layer Attacks

\n

The Application attacks target Layer 7, which is the topmost layer in the OSI network model. This layer is closest to the end-user, which means both the OSI application layer and the user interact directly with the software application. These attacks are typically small in volume compared to the other layers attacks, so these attacks are not easy to catch, i.e., a small number of HTTP requests on a login page.

\n

DDoS attack examples

\n
    \n
  1. In September 2016 - An attack on the Internet of Things (IoT) devices by Mirai malware impacted Internet platforms and services (Brian Krebs, DNS solution provider Dyn, etc.).\nHere is the list of sites or services (Github, Twitter, etc.) were unavailable in Europe and North America.
    2. \n
  2. In Feb 2014 - According to a report on Gigaom, Cloudflare datacenters hit by the world's largest distributed denial-of-service attack (DDoS) in Europe and the U.S. This DDoS attack estimated at approximately 400 gigabits per second of traffic.
    3. \n
  3. In February 2018 - A most potent distributed denial-of-service attack (DDoS) on the Developers platform GitHub. This DDoS attack estimated approx 1.35 terabits per second and lasted for roughly 20 minutes.
    4. \n
  4. In February 2020 - Amazon Web Services was hit by a powerful gigantic DDoS attack. The attack was running for three days and was estimated at approximately 2.3 terabytes per second.
    5. \n
\n

Best Practices for Preventing DDoS attacks

\n

\n \n

3. Activate a WAF

\n

A Web Application Firewall (WAF) is a set of rules or policies that helps protect web applications or APIs from malicious traffic. WAF sits between an application and the HTTP traffic and filters the common web exploits that can affect availability.

\n

There are various WAF solutions available, but you need to analyze which WAF solution is suitable for your application.

\n

4. Rate Limit

\n

Attackers can make so many repeated calls on the APIs. It can make resources unavailable to its genuine users. A rate limit is the number of API calls or requests that a user can make within a given time frame. When this limit is exceeded, block API access temporarily and return the 429 (too many requests) HTTP error code.

\n

I m adding node js examples to implement the rate limit. multiple npm packages are available for node js

\n

NodeJs

\n
import rateLimit from 'express-rate-limit';\n\nexport const apiRatelimit = rateLimit({\n  windowMs: 60 * 60 * 1000, // 1 hrs in milliseconds\n  max: 100,\n  message: 'You have exceeded the 100 requests in 1 hrs limit!', \n  headers: true, // it will add X-RateLimit-Limit , X-RateLimit-Remaining and Retry-After Headers in the request \n});\n\n//  you can add this in the middleware. it will apply a rate limit for all requests \napp.use(API rate limit);
\n

5. Passive cache

\n

Active cache means if the service first attempts to read from the cache backend and falls back to reading from the actual source. The service is not dependent on requesting the data from the real upstream server. A cache backend is a key-value store (e.g., Redis) or In-Memory cache, and the actual source of data is SQL, MongoDB, etc.

\n

Passive cache architecture ensures high volume traffic never hits to actual server or service.

\n

I m adding node js examples to implement the passive cache. multiple npm packages are available for node js

\n

NodeJs

\n
import nodeCache from "node-cache";\n\nconst myCache = new nodeCache();\nap\n// set object in the cache \n\nobj = { userid: 909887, name: "example" };\n\nsuccess = myCache.set( "userKey", obj, 600 ); // ttl is 600 seconds \n\n\n//read object from the cache \nvalue = myCache.get( "userKey" );\nif ( value == undefined ){\n  // handle miss!\n}
\n

6. Cloud-Based DDoS Mitigation

\n

Several vendors provide DDoS mitigation services as software as a service model. They have charged a license fee the first time then charge according to service usages.

\n

The Cloud-based DDoS mitigation solution has a lot of advantages. They have dedicated staff, better reaction time, High network bandwidth than private networks to perform better in case of volume-based DDoS attack. Multi cross-region availability with auto replica or backup so you can switch to your application load next available region without impacting your actual users, updated policies or rule set, a better experience for handling DDoS attacks.

\n

Conclusion

\n

The DDoS attacks are increasing day by day. Organizations need to prepare for any attack. If the organization does not prepare in advance and any attack happens, that case damage control can take months and impact the organization's reputation.

\n

LoginRadius has all processes and policies well defined, 24X7 monitoring by delegating security team. Please see Security Overview document for more information.

\n","frontmatter":{"date":"February 24, 2021","updated_date":null,"description":"Learn what a DDoS attack is, including the various classifications of attacks, and how to defend your site from one.","title":"What is a DDoS Attack and How to Mitigate it","tags":["DDoS","DDos mitigate","DDoS Prevention"],"pinned":null,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1.3333333333333333,"src":"/static/e82159853c0c436c7ad2b509619a9a01/ee604/What-is-a-DDoS-attack.png","srcSet":"/static/e82159853c0c436c7ad2b509619a9a01/69585/What-is-a-DDoS-attack.png 200w,\n/static/e82159853c0c436c7ad2b509619a9a01/497c6/What-is-a-DDoS-attack.png 400w,\n/static/e82159853c0c436c7ad2b509619a9a01/ee604/What-is-a-DDoS-attack.png 800w,\n/static/e82159853c0c436c7ad2b509619a9a01/a8378/What-is-a-DDoS-attack.png 1024w","sizes":"(max-width: 800px) 100vw, 800px"}}},"author":{"id":"Vijay Singh Shekhawat","github":"code-vj","avatar":null}}}},{"node":{"excerpt":"Suppose, You have a massive amount of data and want to add them to your new product campaign. You are probably not sure that all of them…","fields":{"slug":"/engineering/eva-google-script/"},"html":"

Suppose, You have a massive amount of data and want to add them to your new product campaign. You are probably not sure that all of them belong to the right audience; some might be spam or disposable emails.

\n

Now, the actual problem is that how can I do validate so many email addresses?

\n

Well, it would be great to verify them all together in a single shot with 100% accurate results without any manual interaction.

\n

I am writing this article as so many of us have the same concern and are looking for a business email validator that can resolve this problem with high accuracy.

\n

Here we have the tool EVA (Email Verification APIs), which provides excellent email verification services with their open APIs.

\n

EVA service with Google Sheet

\n

Google allows you to create scripts using your custom functions with the service you wanted to use. You can make these functions in standard JavaScript with a basic understanding of JS. Here is the guide to start with Custom Functions in Google Sheets.

\n

Custom Function

\n

=eva(email)

\n

Eva needs the email address only from you and the rest will perform with their excellent service. You can also go through the Email Verification API (EVA) article for more details about EVA.

\n

Here is the custom function created using the EVA Services to validate email.

\n
function eva(email) {\n  var url = "https://api.eva.pingutil.com/email?email="+email;\n  var res = UrlFetchApp.fetch(url);\n\n  // Get status of the API\n  var status = res.getResponseCode();\n  if (status != 200) {\n    return false;\n  }\n  var contextText = res.getContentText();\n \n  var result = JSON.parse(contextText);\n \n // Logic to check Business Email\n  if (result["data"]["disposable"] === false && result["data"]["webmail"] === false &&  result["data"]["spam"]  === false && result["data"]["deliverable"] === true) {\n    return true\n  }\n  return false;\n}
\n

Add Script

\n

We are all set with our script and now need to add this script under Google Script Editor under tools and save it.

\n

\"Google

\n

Run Script

\n

That all! Now I need to drag this formula to the entire rows on which I want to perform validation.

\n

\"Drag\"

\n

Perfect :)

\n

Setup Trigger

\n

You can set up a trigger to action (i.e., on open, edit or change in sheet) by navigating tools -> script editor and click on the left alarm icon.

\n

\"Trigger\"

\n

Conclusion

\n

In this article, I've explained EVA services to validate email addresses in bulk using the google script editor. If you like what you read, leave a \"thank you note\" in the comment section.

\n","frontmatter":{"date":"February 22, 2021","updated_date":null,"description":"Directly checking email addresses for authenticity in the Google spreadsheet using EVA has never been easier. In this article, you will learn how to validate email addresses using EVA services in Google Sheets.","title":"How to Verify Email Addresses in Google Sheet","tags":["EVA","Google Script","Email Validation"],"pinned":null,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1.5037593984962405,"src":"/static/532c1db0bab60ffa3eead6e63d119ff7/ee604/eva.png","srcSet":"/static/532c1db0bab60ffa3eead6e63d119ff7/69585/eva.png 200w,\n/static/532c1db0bab60ffa3eead6e63d119ff7/497c6/eva.png 400w,\n/static/532c1db0bab60ffa3eead6e63d119ff7/ee604/eva.png 800w,\n/static/532c1db0bab60ffa3eead6e63d119ff7/e6250/eva.png 1074w","sizes":"(max-width: 800px) 100vw, 800px"}}},"author":{"id":"Narendra Pareek","github":"pareek-narendra","avatar":null}}}},{"node":{"excerpt":"Whenever we talk about asynchronous programming in JavaScript, there is sometimes confusion in how it can be asynchronous if it is single…","fields":{"slug":"/engineering/concurrency-vs-parallelism/"},"html":"

Whenever we talk about asynchronous programming in JavaScript, there is sometimes confusion in how it can be asynchronous if it is single-threaded. To answer this correctly, I think it's a good thing first to understand the difference between concurrency and parallelism, two terms that are commonly brought up with multithreading.

\n

Concurrency

\n

Concurrency describes independent parts of a program to run in an arbitrary order without affecting the outcome. A concurrent application can execute multiple tasks over an overlapping period. This means that while we can start new tasks before the previous one is complete, we cannot perform work on each task simultaneously.

\n

\n \n \n

\n

You can think of a concurrent execution model as a single chef preparing a meal. Any chef worth their salt can work on multiple dishes (or various parts of a dish) at once. They might chop the vegetables for their stir-fry while the rice is steamed in the rice cooker or leave the vegetables to fry in the pan while cleaning up their workspace. In this scenario, the chef can perform multiple tasks at once; however, at any given time, he is only able to work on a particular unit of work at a given time.

\n

You might point out that the chef can perform other actions in this example scenario while something like the rice is steaming, which is technically work still being done. However, the concurrency in this scenario only applies to the chef's context, who is not actively working on the rice as it is being steamed.

\n

Similarly, the JavaScript Event Loop allows your scripts (the chef) to hand off tasks like HTTP requests and timeouts to the browser Web API (rice cooker), allowing the script to execute other code portions while waiting for a response. Once the Web API task is complete, it is pushed back into the Event Loop call stack. While the Web API acts as a separate thread where it can complete certain tasks outside the main thread's scope, your actual JavaScript code is still executed on a single thread concurrently.

\n

Parallelism

\n

Parallelism describes the ability for independent parts of a program to be physically executed at the same time. A parallel application can distribute its tasks to independent processors (such as different cores or threads of a CPU) to be executed simultaneously.

\n

\n \n \n

\n

You can think of a parallel execution model as multiple chefs individually each preparing a meal. These individual chefs may be preparing their dishes in a concurrent manner (like the above) or a sequential one; either way, the result is that rather than producing a single meal, the kitchen has prepared multiple meals over a unit of time.

\n

Modern browsers allow you to program parallelly by using Web Workers. These spawn separate threads to execute JavaScript independently from the main thread.

\n

Concurrency or Parallelism which one is better?

\n

So we've established that multiple chefs can get a kitchen to produce multiple dishes in the same amount of time as a single dish from a kitchen with a single chef. Modern hardware almost always has multiple threads, so why isn't all code run in parallel? If it takes one chef 10 minutes to prepare one stir-fry and five chefs 10 minutes to prepare five stir-fries, can five chefs produce one stir-fry in 2 minutes? This is where parallel computation can get difficult.

\n

Tasks can speed up by distributing the workload onto multiple threads. However, this requires splitting up the workload in a way that can work independently and effectively. Think of how five chefs would prepare a single stir fry together:

\n\n

Similarly, on the computing side, parallel programming solutions are generally harder to implement and debug. Depending on the task, they can sometimes even perform worse than serially run counterparts due to the various costs of overhead (transferring data between threads, creating and destroying threads, synchronization of work, etc.).

\n

Conclusion

\n

To conclude this post, neither are inherently superior to the other. Both execution models are useful tools for producing efficient and reliable solutions and are used together in many cases. I hope this helps to clear up the differences between the two, or if not, at least provided a mildly entertaining analogy to illustrate each.

\n","frontmatter":{"date":"February 19, 2021","updated_date":null,"description":"Concurrence and parallelism in relation to multithreaded applications are two concepts sometimes used. The distinction between concurrency and parallelism is clarified in this tutorial.","title":"Concurrency vs Parallelism: What's the Difference?","tags":["Concurrency","Parallelism","Multithreading","JavaScript"],"pinned":null,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1.5037593984962405,"src":"/static/c34eed6e80876a068d90b6b2d463b284/14b42/unsplash.jpg","srcSet":"/static/c34eed6e80876a068d90b6b2d463b284/f836f/unsplash.jpg 200w,\n/static/c34eed6e80876a068d90b6b2d463b284/2244e/unsplash.jpg 400w,\n/static/c34eed6e80876a068d90b6b2d463b284/14b42/unsplash.jpg 800w,\n/static/c34eed6e80876a068d90b6b2d463b284/47498/unsplash.jpg 1200w","sizes":"(max-width: 800px) 100vw, 800px"}}},"author":{"id":"Nick Chim","github":"nickc95","avatar":null}}}},{"node":{"excerpt":"Git is an important part of daily programming and is commonly used in the software industry. Since you can use a lot of different commands…","fields":{"slug":"/engineering/git-commands/"},"html":"

Git is an important part of daily programming and is commonly used in the software industry. Since you can use a lot of different commands, mastering Git needs time. But some commands are more commonly used. So I'm going to share the most useful Git commands in this post that every developer should know.

\n

But first you need to know the fundamentals of Git to understand this article.

\n

Useful Git Commands List

\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
CommandDescription
git initInitialize a local Git repository
git clone repo_urlClone public repository
git clone ssh://git@github.com/[username]/[repository-name].gitClone private repository
git statusCheck status
git add [file-name]Add a file to the staging area
git add -AAdd all new and changed files to the staging area
git commit -m \"[commit message]\"Commit changes
git rm -r [file-name.txt]Remove a file (or folder)
git branchList of branches (the asterisk denotes the current branch)
git branch -aList all branches (local and remote)
git branch [branch name]Create a new branch
git branch -d [branch name]Delete a branch
git branch -D [branch name]Delete a branch forcefully
git push origin --delete [branch name]Delete a remote branch
git checkout -b [branch name]Create a new branch and switch to it
git checkout -b [branch name] origin/[branch name]Clone a remote branch and switch to it
git branch -m [old branch name] [new branch name]Rename a local branch
git checkout [branch name]Switch to a branch
git checkout -Switch to the branch last checked out
git checkout -- [file-name.txt]Discard changes to a file
git merge [branch name]Merge a branch into the active branch
git merge [source branch] [target branch]Merge a branch into a target branch
git stashStash changes in a dirty working directory
git stash clearRemove all stashed entries
git push origin [branch name]Push a branch to your remote repository
git push -u origin [branch name]Push changes to remote repository (and remember the branch)
git pushPush changes to remote repository (remembered branch)
git push origin --delete [branch name]Delete a remote branch
git pullUpdate local repository to the newest commit
git pull origin [branch name]Pull changes from remote repository
git remote add origin ssh://git@github.com/[username]/[repository-name].gitAdd a remote repository
git remote set-url origin ssh://git@github.com/[username]/[repository-name].gitSet a repository's origin branch to SSH
git logView changes
git log --summaryView changes (detailed)
git log --onelineView changes (briefly)
git diff [source branch] [target branch]Preview changes before merging
git revert commitidRevert commit changes
git config --global user.name \"your_username\"Set globally Username
git config --global user.email \"your_email_address@example.com\"Set globally Email id
git config --global --listGet global config
\n

So these are the most helpful git commands I find in my everyday programming. There are several more things to learn about Git, I will explain them in a separate post.

\n","frontmatter":{"date":"February 17, 2021","updated_date":null,"description":"In this article, I will talk about the Git Commands that you will be using often when you are working with Git.","title":"35+ Git Commands List Every Programmer Should Know","tags":["GIT"],"pinned":null,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1.5037593984962405,"src":"/static/dcc4ef7c6f6e2161d168898cf518845d/ee604/git.png","srcSet":"/static/dcc4ef7c6f6e2161d168898cf518845d/69585/git.png 200w,\n/static/dcc4ef7c6f6e2161d168898cf518845d/497c6/git.png 400w,\n/static/dcc4ef7c6f6e2161d168898cf518845d/ee604/git.png 800w,\n/static/dcc4ef7c6f6e2161d168898cf518845d/f3583/git.png 1200w","sizes":"(max-width: 800px) 100vw, 800px"}}},"author":{"id":"Abhimanyu Singh Rathore","github":"abhir9","avatar":null}}}},{"node":{"excerpt":"One of the leading NoSQL databases, MongoDB is well known for its fast performance, versatile schema, scalability and great capabilities for…","fields":{"slug":"/engineering/full-text-search-in-mongodb/"},"html":"

One of the leading NoSQL databases, MongoDB is well known for its fast performance, versatile schema, scalability and great capabilities for indexing. Let us look at some context before we get into some details. Full-text search is an essential feature when we talk about finding content on the internet. A google search is the best example for this when we see the content using the phrases or keywords. In this article, we will learn about full-text search capabilities in MongoDB based on text index.

\n

Create a Sample Database

\n

Before we begin, we will create a sample database that will be used during the tutorial.

\n

We will create a database with the name myDB and create a collection with the name books. For this, the statement would be as follows.

\n
> use myDB\n> db.createCollection("books")\n>
\n

Let's insert some documents by using the following statement.

\n
> db.books.insert([\n\t{\n      "title": "Eloquent JavaScript, Second Edition",\n      "subtitle": "A Modern Introduction to Programming",\n      "author": "Marijn Haverbeke",\n      "publisher": "No Starch Press",\n      "description": "JavaScript lies at the heart of almost every modern web application, from social apps to the newest browser-based games. Though simple for beginners to pick up and play with, JavaScript is a flexible, complex language that you can use to build full-scale applications."\n    },\n    {\n      "title": "Learning JavaScript Design Patterns",\n      "subtitle": "A JavaScript and jQuery Developer's Guide",\n      "author": "Addy Osmani",\n      "publisher": "O'Reilly Media",\n      "description": "With Learning JavaScript Design Patterns, you'll learn how to write beautiful, structured, and maintainable JavaScript by applying classical and modern design patterns to the language. If you want to keep your code efficient, more manageable, and up-to-date with the latest best practices, this book is for you."\n    },\n    {\n      "title": "Speaking JavaScript",\n      "subtitle": "An In-Depth Guide for Programmers",\n      "author": "Axel Rauschmayer",\n      "publisher": "O'Reilly Media",\n      "description": "Like it or not, JavaScript is everywhere these days, from browser to server to mobile and now you, too, need to learn the language or dive deeper than you have. This concise book guides you into and through JavaScript, written by a veteran programmer who once found himself in the same position."\n    },\n    {\n      "title": "Programming JavaScript Applications",\n      "subtitle": "Robust Web Architecture with Node, HTML5, and Modern JS Libraries",\n      "author": "Eric Elliott",\n      "publisher": "O'Reilly Media",\n      "description": "Take advantage of JavaScript's power to build robust web-scale or enterprise applications that are easy to extend and maintain. By applying the design patterns outlined in this practical book, experienced JavaScript developers will learn how to write flexible and resilient code that's easier-yes, easier-to work with as your codebase grows."\n    },\n    {\n      "title": "Understanding ECMAScript 6",\n      "subtitle": "The Definitive Guide for JavaScript Developers",\n      "author": "Nicholas C. Zakas",\n      "publisher": "No Starch Press",\n      "description": "ECMAScript 6 represents the biggest update to the core of JavaScript in the history of the language. In Understanding ECMAScript 6, expert developer Nicholas C. Zakas provides a complete guide to the object types, syntax, and other exciting changes that ECMAScript 6 brings to JavaScript."\n    }\n])
\n

Creating a Text Index

\n

We need to create a text index on the fields to perform the text search. We can create this on single or multiple fields. The following statement will create a text index on a single field.

\n
>db.books.createIndex({"description":"text"})
\n

We will create a text index on the description and subtitle fields for this tutorial. We can create only one text index per collection in MongoDB. So We will create a compound text index using the following statement.

\n
>db.books.createIndex({"subtitle":"text","description":"text"})
\n

$search

\n

Now we will try to search documents that have the keywords 'ECMAScript' in the description and subtitle fields. For this, we can use the below statement.

\n
db.books.find({$text: {$search: "ECMAScript"}})
\n

Example

\n
>db.books.find({$text: {$search: "ECMAScript"}},{ subtitle: 1, description: 1 })\n\t{\n    "_id" : ObjectId("602b09cb3cb6144ada1c62fe"),\n    "subtitle" : "The Definitive Guide for JavaScript Developers",\n    "description" : "ECMAScript 6 represents the biggest update to the core of JavaScript in the history of the language. In Understanding ECMAScript 6, expert developer Nicholas C. Zakas provides a complete guide to the object types, syntax, and other exciting changes that ECMAScript 6 brings to JavaScript."\n\t}\n>
\n

Phrases

\n

You can search for phrases using the text index. By default, text search performs an OR search for all words in the phrase. If you want to search 'modern design patterns', it will search for documents with the keywords either modern, design, or patterns.

\n

Example

\n
>db.books.find({$text: {$search: "modern design patterns"}},{ subtitle: 1, description: 1 })\n\t{\n    "_id" : ObjectId("602b098f3cb6144ada1c2ea1"),\n    "subtitle" : "A JavaScript and jQuery Developer's Guide",\n    "description" : "With Learning JavaScript Design Patterns, you'll learn how to write beautiful, structured, and maintainable JavaScript by applying classical and modern design patterns to the language. If you want to keep your code efficient, more manageable, and up-to-date with the latest best practices, this book is for you."\n\t},\n\t{\n    "_id" : ObjectId("602b09b93cb6144ada1c4bca"),\n    "subtitle" : "Robust Web Architecture with Node, HTML5, and Modern JS Libraries",\n    "description" : "Take advantage of JavaScript's power to build robust web-scale or enterprise applications that are easy to extend and maintain. By applying the design patterns outlined in this practical book, experienced JavaScript developers will learn how to write flexible and resilient code that's easier-yes, easier-to work with as your code base grows.",\n\t},\n\t{\n    "_id" : ObjectId("602b095c3cb6144ada1c1028"),\n    "subtitle" : "A Modern Introduction to Programming",\n    "description" : "JavaScript lies at the heart of almost every modern web application, from social apps to the newest browser-based games. Though simple for beginners to pick up and play with, JavaScript is a flexible, complex language that you can use to build full-scale applications."\n\t}\n>
\n

If you want to search for exact phrases like documents with 'modern design patterns' together, you can do so by specifying double quotes in the search text.

\n

Example

\n
>db.books.find({$text: {$search: "\\"modern design patterns\\""}},{ subtitle: 1, description: 1 })\n\t{\n    "_id" : ObjectId("602b098f3cb6144ada1c2ea1"),\n    "subtitle" : "A JavaScript and jQuery Developer's Guide",\n    "description" : "With Learning JavaScript Design Patterns, you'll learn how to write beautiful, structured, and maintainable JavaScript by applying classical and modern design patterns to the language. If you want to keep your code efficient, more manageable, and up-to-date with the latest best practices, this book is for you."\n}
\n

Negations

\n

If you want to exclude the documents containing a particular word, you can use a negation search. For example if you're going to search all documents with the 'JavaScript' but not 'HTML5' or 'ECMAScript', you can search as the below example.

\n

Example

\n
>db.books.find({$text: {$search: "JavaScript -HTML5 -ECMAScript"}},{ subtitle: 1, description: 1 })\n\t{\n    "_id" : ObjectId("602b098f3cb6144ada1c2ea1"),\n    "subtitle" : "A JavaScript and jQuery Developer's Guide",\n    "description" : "With Learning JavaScript Design Patterns, you'll learn how to write beautiful, structured, and maintainable JavaScript by applying classical and modern design patterns to the language. If you want to keep your code efficient, more manageable, and up-to-date with the latest best practices, this book is for you."\n\t},\n\t{\n    "_id" : ObjectId("602b09a83cb6144ada1c4973"),\n    "subtitle" : "An In-Depth Guide for Programmers",\n    "description" : "Like it or not, JavaScript is everywhere these days, from browser to server to mobile and now you, too, need to learn the language or dive deeper than you have. This concise book guides you into and through JavaScript, written by a veteran programmer who once found himself in the same position."\n\t},\n\t{\n    "_id" : ObjectId("602b095c3cb6144ada1c1028"),\n    "subtitle" : "A Modern Introduction to Programming",\n    "description" : "JavaScript lies at the heart of almost every modern web application, from social apps to the newest browser-based games. Though simple for beginners to pick up and play with, JavaScript is a flexible, complex language that you can use to build full-scale applications."\n\t}
\n

Text Search Score

\n

The text search provides a score to each document representing the relevancy of the document with the search query. This score can be used to sort all the records returned in the search result. A higher score will indicate a most relevant match.

\n

Example

\n
>db.books.find({$text: {$search: "JavaScript "}},{score: {$meta: "textScore"}, subtitle: 1, description: 1 }).sort({score:{$meta:"textScore"}})\n\t{\n    "_id" : ObjectId("602b098f3cb6144ada1c2ea1"),\n    "subtitle" : "A JavaScript and jQuery Developer's Guide",\n    "description" : "With Learning JavaScript Design Patterns, you'll learn how to write beautiful, structured, and maintainable JavaScript by applying classical and modern design patterns to the language. If you want to keep your code efficient, more manageable, and up-to-date with the latest best practices, this book is for you.",\n    "score" : 1.43269230769231\n\t},\n\t{\n    "_id" : ObjectId("602b09cb3cb6144ada1c62fe"),\n    "subtitle" : "The Definitive Guide for JavaScript Developers",\n    "description" : "ECMAScript 6 represents the biggest update to the core of JavaScript in the history of the language. In Understanding ECMAScript 6, expert developer Nicholas C. Zakas provides a complete guide to the object types, syntax, and other exciting changes that ECMAScript 6 brings to JavaScript.",\n    "score" : 1.42672413793103\n\t},\n\t{\n    "_id" : ObjectId("602b09a83cb6144ada1c4973"),\n    "subtitle" : "An In-Depth Guide for Programmers",\n    "description" : "Like it or not, JavaScript is everywhere these days, from browser to server to mobile and now you, too, need to learn the language or dive deeper than you have. This concise book guides you into and through JavaScript, written by a veteran programmer who once found himself in the same position.",\n    "score" : 0.818181818181818\n\t},\n\t{\n    "_id" : ObjectId("602b095c3cb6144ada1c1028"),\n    "subtitle" : "A Modern Introduction to Programming",\n    "description" : "JavaScript lies at the heart of almost every modern web application, from social apps to the newest browser-based games. Though simple for beginners to pick up and play with, JavaScript is a flexible, complex language that you can use to build full-scale applications.",\n    "score" : 0.801724137931034\n\t},\n\t{\n    "_id" : ObjectId("602b09b93cb6144ada1c4bca"),\n    "subtitle" : "Robust Web Architecture with Node, HTML5, and Modern JS Libraries",\n    "description" : "Take advantage of JavaScript's power to build robust web-scale or enterprise applications that are easy to extend and maintain. By applying the design patterns outlined in this practical book, experienced JavaScript developers will learn how to write flexible and resilient code that's easier-yes, easier-to work with as your codebase grows.",\n    "score" : 0.792857142857143\n\t}
\n

Stop Words

\n

The $text operator filters out the language-specific stop words, such as a, an, the and in English. The below search will not return any document in the result.

\n

Example

\n
>db.books.find({$text: {$search: "is"}},{subtitle: 1, description: 1 })\n\tFetched 0 record(s)
\n

Stemmed Words

\n

The $text operator matches on the complete stemmed word. So if some document field contains the word learning or learn, a search on the term learning or learn would result in the same.

\n

Example

\n
>db.books.find({$text: {$search: " learn"}},{subtitle: 1, description: 1 }) or >db.books.find({$text: {$search: " learning"}},{subtitle: 1, description: 1 })\n\t{\n    "_id" : ObjectId("602b098f3cb6144ada1c2ea1"),\n    "subtitle" : "A JavaScript and jQuery Developer's Guide",\n    "description" : "With Learning JavaScript Design Patterns, you'll learn how to write beautiful, structured, and maintainable JavaScript by applying classical and modern design patterns to the language. If you want to keep your code efficient, more manageable, and up-to-date with the latest best practices, this book is for you."\n\t},\n\t{\n    "_id" : ObjectId("602b09a83cb6144ada1c4973"),\n    "subtitle" : "An In-Depth Guide for Programmers",\n    "description" : "Like it or not, JavaScript is everywhere these days, from browser to server to mobile and now you, too, need to learn the language or dive deeper than you have. This concise book guides you into and through JavaScript, written by a veteran programmer who once found himself in the same position."\n\t},\n\t{\n    "_id" : ObjectId("602b09b93cb6144ada1c4bca"),\n    "subtitle" : "Robust Web Architecture with Node, HTML5, and Modern JS Libraries",\n    "description" : "Take advantage of JavaScript's power to build robust web-scale or enterprise applications that are easy to extend and maintain. By applying the design patterns outlined in this practical book, experienced JavaScript developers will learn how to write flexible and resilient code that's easier-yes, easier-to work with as your codebase grows."\n\t}
\n

Conclusion

\n

I hope you learned something new today. Here is an interesting article on Self-Hosted MongoDB. I also invite you to try stuff on your own and share your experience in the comment section. Furthermore, if you face any problems with any of the above definitions, please feel free to ask me in the comments section below.

\n","frontmatter":{"date":"February 16, 2021","updated_date":null,"description":"MongoDB full text search tutorial. In this blog, we will learn how to perform a full-text search in MongoDB using text index.","title":"How to do Full-Text Search in MongoDB","tags":["MongoDB"],"pinned":null,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1.5037593984962405,"src":"/static/4baf4f017625700154de23531c7ef2a8/ee604/coverImage.png","srcSet":"/static/4baf4f017625700154de23531c7ef2a8/69585/coverImage.png 200w,\n/static/4baf4f017625700154de23531c7ef2a8/497c6/coverImage.png 400w,\n/static/4baf4f017625700154de23531c7ef2a8/ee604/coverImage.png 800w,\n/static/4baf4f017625700154de23531c7ef2a8/f3583/coverImage.png 1200w,\n/static/4baf4f017625700154de23531c7ef2a8/5707d/coverImage.png 1600w,\n/static/4baf4f017625700154de23531c7ef2a8/eeb1b/coverImage.png 1920w","sizes":"(max-width: 800px) 100vw, 800px"}}},"author":{"id":"Anil Gupta","github":"anilswm","avatar":null}}}}]},"markdownRemark":{"excerpt":"Google has prepared a roadmap to restrict third-party cookies in Chrome. Since 04 January 2024, Chrome has rolled out third-party cookie…","fields":{"slug":"/engineering/identity-impact-of-google-chrome-thirdparty-cookie-restrictions/"},"html":"

Google has prepared a roadmap to restrict third-party cookies in Chrome. Since 04 January 2024, Chrome has rolled out third-party cookie restrictions for 1% of stable clients and 20% of Canary, Dev, and Beta clients.

\n

What does it mean for user authentication?

\n

On one hand, Google believes third-party cookies are widely used for cross-site tracking, greatly affecting user privacy. Hence, Google wants to phase out (or restrict) supporting third-party cookies in Chrome by early Q2 2025 (subject to regulatory processes).

\n

On the other hand, Google introduced Privacy Sandbox to support the use cases (other than cross-site tracking and advertising) previously implemented using third-party cookies.

\n

In this article, we’ll discuss:

\n\n

How is User Authentication Affected?

\n

Third-party cookie restrictions affect user authentication in three ways, as follows.

\n

External Identity Providers

\n

If your website or app uses an external Identity Provider (IdP) — like LoginRadius, the IdP sets a third-party cookie when the user authenticates on your app.

\n

Web SSO

\n

If you have multiple apps across domains within your organization and authentication is handled using an IdP (internal or external) with web SSO, you already use third-party cookies to facilitate seamless access for each user using a single set of credentials.

\n

If you have implemented web SSO with one primary domain and multiple sub-domains of the primary domain, third-party cookie restrictions may not apply. For now, Google doesn’t consider the cookies set by sub-domains as third-party cookies, although this stance may change in the future.

\n

For example, you have apps at example.com, travel.example.com, stay.example.com, and web SSO is handled by auth.example.com. In this case, third-party cookie restrictions don’t apply.

\n

Federated SSO

\n

Federated SSO is similar to, albeit different from, web SSO. It can handle multiple IdPs and applications—aka., Service Providers (SPs)—spanning multiple organizations. It can also implement authentication scenarios that are usually implemented through web SSO.

\n

Usually, authentication is handled on a separate pop-up or page when the user wants to authenticate rather than on the application or website a user visits.

\n

For example, you already use federated SSO if you facilitate authentication for a set of apps through multiple social identity providers as well as traditional usernames and passwords.

\n
\n

Note: It is also possible to store tokens locally, not within cookies. In this case, third-party cookie restrictions won’t affect token-based authentication. However, the restrictions still affect authentication where tokens are stored within third-party cookies (a common and secure method).

\n
\n

Chrome’s Alternatives for Third-Party Cookies

\n

Google has been developing alternative features and capabilities for Chrome to replace third-party cookies as part of its Privacy Sandbox for Web initiative.

\n

Specific to authentication, Google recommends the following:

\n
    \n
  1. Cookies Having Independent Partitioned State (CHIPS)
    2. \n
  2. Storage Access API
    3. \n
  3. Related Website Sets
    4. \n
  4. Federated Credential Management (FedCM) API
    5. \n
\n

Cookies Having Independent Partitioned State (CHIPS)

\n

CHIPS are a restricted way of setting third-party cookies on a top-level site without making them accessible on other top-level sites. Thus, they limit cross-site tracking and enable specific cross-site functionalities, such as maps, chat, and payment embeds.

\n

For example, a user visits a.com with a map embed from map-example.com, which can set a partitioned cookie that is only accessible on a.com.

\n

If the user visits b.com with a map embed from map-example.com, it cannot access the partitioned cookie set on a.com. It has to create a separate partitioned cookie specific to b.com, thus blocking cross-site tracking yet allowing limited cross-site functionality.

\n

You should specifically opt for partitioned cookies (CHIPS), which are set with partitioned and secure cookie attributes.

\n

If you’re using an external identity provider for your application, CHIPS is a good option to supplant third-party cookie restrictions.

\n

However, CHIPS may not be ideal if you have a web SSO or federated SSO implementation. It creates separate partitioned cookies for each application with a separate domain, which can increase complexity and create compatibility issues.

\n

Storage Access API

\n

With Storage Access API, you can access the local storage in a third-party context through iframes, similar to when users visit it as a top-level site in a first-party context. That is, it gives access to unpartitioned cookies and storage.

\n

Storage Access API requires explicit user approval to grant access, similar to locations, camera, and microphone permissions. If the user denies access, unpartitioned cookies and storage won’t be accessible in a third-party context.

\n

It is most suitable when loading cross-site resources and interactions, such as:

\n

Verifying user sessions when allowing interactions on an embedded social post or providing personalization for an embedded video.\nEmbedded documents requiring user verification status to be accessible.

\n

As it requires explicit user approval, it is advisable to use Storage Access API when you can’t implement an identity use case with the other options.

\n

Related Website Sets

\n

With Related Website Sets, you can declare a primary website and associatedSites for limited purposes to grant third-party cookie access and local storage for a limited number of sites.

\n

Chrome automatically recognizes related website sets declared, accepted, and maintained in this open-source GitHub repository: Related Website Sets

\n

It provides access through Storage Access API directly without prompting for user approval, but only after the user interacts with the relevant iframe.

\n

It is important to declare a limited number of domains in related website sets that are meaningful and used for specific purposes. Google may block or suspend any exploitative use of this feature.

\n

The top-level site can also request approval for specific cross-site resources and scripts to Storage Access API using resuestStorageAccessFor() API.

\n

If you’re using an external identity provider for your web application, you can declare the domain of the identity provider in the related set to ensure limited third-party cookies and storage access to the identity provider, thus ensuring seamless user authentication.

\n

Related Website Sets can also work to supplement third-party cookie restrictions in web SSO and federated SSO if the number of web applications (or domains) is limited.

\n

Federated Credential Management (FedCM) API

\n

FedCM API enables federated SSO without third-party cookies.

\n

With FedCM API, a user follows these steps for authentication:

\n
    \n
  1. The User navigates to a Service Provider (SP) — aka., Relying Party (RP)
    2. \n
  2. As the user requests to authenticate, the SP requests the browser through FedCM API to initiate authentication.
    3. \n
  3. The browser displays a list of available identity providers (supported by the RP), such as social IdPs like Google, Apple, LinkedIn, and Facebook, or other OAuth IdPs like LoginRadius.
    4. \n
  4. Once the user selects an IdP, the browser communicates with the IdP. Upon valid authentication, the IdP generates a secure token.\nThe browser delivers this secure token to the RP to facilitate user authorization.
    5. \n
\n

You can access a user demo of FedCM here: FedCM.

\n

For more information about implementing federated SSO with FedCM API, go through the FedCM developer guide.

\n\n

Firstly, we’re committed to solving our customers' user identity pain points — and preparing for the third-party cookies phase-out is no different.

\n

We’ll implement the most relevant and widely useful solutions to facilitate a smooth transition for our customers.

\n

Please subscribe to our blog for more information. We’ll update you on how we help with the third-party cookie phase-out.

\n

In Conclusion

\n

The proposed changes to phase out third-party cookies and suggested alternatives are evolving as Google has been actively collaborating and discussing changes with the border community.

\n

Moreover, browsers like Firefox, Safari, and Edge may approach restricting third-party cookies differently than Google does.

\n

From LoginRadius, we’ll keep you updated on what we’re doing as a leading Customer Identity and Access Management (CIAM) vendor to prepare for the third-party cookie phase-out.

\n

Glossary

\n

Top-level site: It is the primary site a user has visited.

\n

First-party cookie: A cookie set by the top-level site.

\n

Third-party cookie: A cookie set by a domain other than the top-level site. For example, let’s assume that a user has visited a.com, which might use an embed from loginradius.com to facilitate authentication. If loginradius.com sets a cookie when the user visits a.com, it is called a third-party cookie as the user hasn’t directly visited loginradius.com.

\n

References

\n\n","frontmatter":{"date":"July 08, 2024","updated_date":null,"description":"Google Chrome has planned to phase out third-party cookies, which will affect different website functionalities depending on third-party cookies. This blog focuses on how this phase-out affects identity and user authentication and discusses alternatives for overcoming challenges.","title":"How Chrome’s Third-Party Cookie Restrictions Affect User Authentication?","tags":["Identity","Cookies","Chrome"],"pinned":null,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1.5037593984962405,"src":"/static/eb7396060c0adc430dbed2d04b63d431/ee604/third-party-cookies-phaseout-chrome.png","srcSet":"/static/eb7396060c0adc430dbed2d04b63d431/69585/third-party-cookies-phaseout-chrome.png 200w,\n/static/eb7396060c0adc430dbed2d04b63d431/497c6/third-party-cookies-phaseout-chrome.png 400w,\n/static/eb7396060c0adc430dbed2d04b63d431/ee604/third-party-cookies-phaseout-chrome.png 800w,\n/static/eb7396060c0adc430dbed2d04b63d431/f3583/third-party-cookies-phaseout-chrome.png 1200w","sizes":"(max-width: 800px) 100vw, 800px"}}},"author":{"id":"Raghunath Reddy","github":"raghunath-r-a","avatar":null}}}},"pageContext":{"limit":6,"skip":78,"currentPage":14,"type":"//engineering//","numPages":52,"pinned":"17fa0d7b-34c8-51c4-b047-df5e2bbaeedb"}},"staticQueryHashes":["1171199041","1384082988","2100481360","23180105","528864852"]}