Project:SvelteKit Frontend: Difference between revisions

Revision as of 13:28, 4 June 2023

Introduction

I (VaiTon) started the project to try to build a prototype of frontend, completely decoupled from the backend.

This way, we could (one day hopefully) iterate much more quicker on the frontend side of things and use the latest javascript technology available (TypeScript, Vite, ESM, etc...).

For the prototype I chose SvelteKit.

Development

GitHub Repository: https://github.com/VaiTon/openfoodfacts-explorer
Deployment: https://openfoodfacts-explorer.vercel.app/

Logging in

Security concerns

As we still don't have an OpenID compatible way of logging in, at the moment the web app stores the user credential in the localStorage, which is UNSAFE as it is exposed to XSS attacks. Another way would be serving the project from a subdomain, but we're not there yet.

How to

To log in (there is not really a log in, more like sending credentials with every request), go to https://openfoodfacts-explorer.vercel.app/settings and enter your credentials.

Editing products

Open the product page you'd like to edit
Click on the "edit" button

@@ Line 9: / Line 9: @@
 * GitHub Repository: https://github.com/VaiTon/openfoodfacts-explorer
 * Deployment: https://openfoodfacts-explorer.vercel.app/
+=== Logging in ===
+==== Security concerns ====
+As we still don't have an OpenID compatible way of logging in, at the moment the web app stores the user credential in the <code>localStorage</code>, which is UNSAFE as it is exposed to XSS attacks. Another way would be serving the project from a subdomain, but we're not there yet.
+==== How to ====
+To ''log in'' (there is not really a log in, more like sending credentials with every request), go to https://openfoodfacts-explorer.vercel.app/settings and enter your credentials.
+=== Editing products ===
+* Open the product page you'd like to edit
+* Click on the "edit" button