Enable ABT to be a soft dep of RC

Fix one of the issues raised in #6345.

Propose a new location for Interop headers in the one version world.
Add two Interop APIs for the RC -> ABT interface
Tested with ABTesting removed from the RC podspec, but added it back until 7.0
Added a separate unit test target for combined RC and ABT testing
Will wait for M79 code freeze branch before merging.

#no-changelog

Will the end result be:

Pulling in Remote Config will pull in the ABT dependency by default, but developers can remove it, or...
Pulling in Remote Config will not pull in the ABT dependency, but developers can add it?

@christibbs It will be #2, but not until the Firebase 7.0.0 release to avoid an earlier breaking change.

@christibbs Would you confirm this is ok from an ABT product perspective that the fact that ABT users will need to explicitly include the pod?

@christibbs Would you confirm this is ok from an ABT product perspective that the fact that ABT users will need to explicitly include the pod?

Will confirm with the team. At the very least it'll require some extensive documentation updates.
Also concerned about the case where developers pod update and miss the message that Firebase/ABTesting is removed. Or will it be removed in that case?

@christibbs Why "extensive" documentation updates? Isn't it one-line to say to add pod 'Firebase/ABTesting' to the Podfille?

Closing since it is a product requirement for ABT to be a hard dependency of RC so that RC developers have the flexibility to add in ABT in the future.


[Feature request] Support Copy to Clipboard

RT. A command to copy image of current page would be helpful.

I've released a new version to support this feature. You can use "save as image" command.


Applying the transform

Hi
Good job with some of the Swift workarounds.
Questions:

It seems in your app the filterChange/setFilter functions are the key and set the transformations based on the barButtonItem.title. Built-in filters from the CIFilter class i.e. "Chrome", "Fade", "Instant", "Mono", "Noir", "Process", "Tonal", "Transfer".

Am I correct in assuming that the strings have to be spelled according to their stock CIFilter names? I ask because they wouldn't work after changing the strings.
I have checked the documentation, but I don't see where it describes the actual application of each transformation type.

ciFilter = CIFilter(name: "CIPhotoEffect" + controlPanel.filterDisplayName) What is "CIPhotoEffect" actually doing? I don't see it anywhere else in your code nor in the UI.

Video filter apps are quite slow. I saw your Filterpedia gist that uses Metal for photos, but was wondering if you experimented with the Metal API for faster processing specifically with video files?

Thanks

Hi,
If you check the Core Image Reference, you'll see a handful of filters named CIPhotoEffect* - I'm concatenating the "CIPhotoEffect" with the name from the button bar title to generate the filter.
CoreImage filters are compiled to Metal - where available - so there should be no real performance difference in writing your own MSL compute kernels for image processing.
Cheers!
Simon

Ah,
Yup, I read all of the documentation. As you can see I even pasted your concatenation lol. I thought it was more for the method. I didn't see the forest through the trees :)
What do you mean CoreImage filters are compiled to Metal - where available? Where aren't they available and why?
Docs say

Core Image determines whether the calculations are performed using the GPU or the CPU. Core Image implements hardware rasterization using Metal, OpenGL, or OpenGL ES depending on device capabilities.

How do we know which filters use GPU/CPU - Metal/OpenGL?

It's more to do with the device rather than the filter - Metal is supported on A7 processors or higher.
I think most filters get executed as Metal, but I don't think there's a way to figure out the exceptions (I could be wrong).

OK thanks for replying. Cheers.


Configuration Assist

Hi,
Please guide me If i want to add multiple resource server then where and all i need a change.
And also how do i add multiple resource server in yml file..
authorizationServerUrl: http://localhost:8080/v1/tokeninfo
secret: 58b749f7-acb3-44b7-a38c-53d5ad740cf6 (Can i append it by comma for other resource servers)
key: university-foo
And do i also need to add different json files for each new resource servers Please guide me ...
Will appreciate for your support.
Thanx

Hi,
Having multiple resource servers is exactly what Apis is all about.
Every resource server has its own record in the database, together with one
or more Clients to have access to this resource server. There is nothing to
configure in the YAML file, only database records to be added. (the easiest
way is using the html5/js admin client for this)
Does this help you?
Kind regards,
Geert van der Ploeg
On 3 February 2015 at 15:42, kumaranilgupta<EMAIL_ADDRESS>wrote:

Hi,
Please guide me If i want to add multiple resource server then where and
all i need a change.
And also how do i add multiple resource server in yml file..
authorizationServerUrl: http://localhost:8080/v1/tokeninfo
secret: 58b749f7-acb3-44b7-a38c-53d5ad740cf6 (Can i append it by comma for
other resource servers)
key: university-foo
And do i also need to add different json files for each new resource
servers Please guide me ...
Will appreciate for your support.
Thanx
—
Reply to this email directly or view it on GitHub
https://github.com/OpenConextApps/apis/issues/71.

Hi Gvanderploeg,
Thanx for the reply, from apis, whenever we request from below Url..
Hint: http://localhost:8180/v1/api/course
Hint: http://localhost:8180/v1/api/course/cs3
Hint: http://localhost:8180/v1/api/student
Hint: http://localhost:8180/v1/api/student/foo5
All of the above url serviced from university resource server and for university i could see json and file and university configuration
In university-foo-local.yml i could see details added for  its resource server
secret: 58b749f7-acb3-44b7-a38c-53d5ad740cf6
key: university-foo
So after i added new resource server and when i try to fetch some details from my json i get following error in console.
10:54:27.061 [qtp954934397-21] WARN  o.s.oaaas.resource.VerifyResource - For access token d7c5074d-2f7f-44eb-9aad-7a777b4685d8: Resource server not found for credentials UserPassCredentials [university-foo]. Responding with 401 in VerifyResource#verifyToken.
my new resource server details are
key : 21989681-a91b-4c07-b228-04c8628aa57a
secret : 1f2f25b2-f97a-4612-bc47-45716b342ebb
and i want to add a new json file university-foo.json
So if apis can server many resource server to its connected client then why have you added resource server details on university-foo-local.yml.
Hope you have understood my issues.
Thanx

Hi,
I think I need to clarify some more.
The module apis-example-resource-server is an example resource server. It is not meant for doing real business, let alone configuring two of them with one runtime and one configuration file.
Of course you could configure 2 example resource servers side by side, but that means you have to really separate them: each has its own JVM, configuration file, its own http port to listen on, just like real applications would have.
Maybe it would help if you sketch your business problem? What is your intention for using Apis?
Kind regards,
Geert

Hi Geert,
I am having 5 API and I want to secure them using OAUTH2 and So for my API,
Do i need to have 5 jsons and 5 configuration files , Please guide me .
Do i need to have 5 more module for my 5 API like you have in APIS
...(apis-example-resource-server) if so then i would have proabably 5 jars
containing 5 yml and 5 jsons file , Am i Correct on this , or do i need
another approach.
On Wed, Feb 4, 2015 at 1:39 PM, Geert van der Ploeg <
<EMAIL_ADDRESS>wrote:

Hi,
I think I need to clarify some more.
The module apis-example-resource-server is an example resource server.
It is not meant for doing real business, let alone configuring two of them
with one runtime and one configuration file.
Of course you could configure 2 example resource servers side by side, but
that means you have to really separate them: each has its own JVM,
configuration file, its own http port to listen on, just like real
applications would have.
Maybe it would help if you sketch your business problem? What is your
intention for using Apis?
Kind regards,
Geert
—
Reply to this email directly or view it on GitHub
https://github.com/OpenConextApps/apis/issues/71#issuecomment-72806737.

--
Regards
Anil.Gupta

Hi Geert,
Appreciate for your quick reply ,
I am having 5 open API and I want to secure them using OAUTH2 and So for my API, Do i need to have 5 jsons and 5 configuration files , Please guide me .
Do i need to have 5 more module for my 5 API like you have in APIS ...(apis-example-resource-server) if so then prbobably i will have 5 jars containing 5 yml and 5 jsons file , Am i Correct on this , or do i need another approach.

Alright, 5 APIs you want to secure.
A bit of background:
What you need for each of them, is intercepting calls to the API (each and every call) en verifying that the calls contain a valid access token and that the access token has the proper scope (see How do resource servers verify the access token.
That's all there is to it, regarding protection of the resource servers.
What's the status of your resource servers? Are they ready yet, or do you still need to program them? Because you are absolutely free to program them in any language you want, no requirement that they are Java based. The validation of the access token is an HTTP request/response that you can implement in any language.
Of course, you could use example-resource-server as a starting point for implementing your actual resource server, but I do not recommend that. As I said before, the example-resource-server is just a showcase for the OAuth process, and not a particularly solid base for an application with 5 API's.
But if you really want it: then yes, 5 jars each with their own configuration is the way to go.

Hi Geert,
Thanx for the detailed reply, Yes my api is already developed in development env and now I am trying to have one single login page with token provider, authentication and authorization and all the client will have their own scope to access 5 api, only admin can have access to all the 5 api but a normal use may not have the access to all the 5 api.
as of now my 5 api are in separate it has separate project , and in future a client can be either from android,ios or from windows.
as you said having example-resource-server is just a showcase for the OAuth process. Probably what i would do is , existing we have 3 steps in example, So i will customize it on 1 step where a normal authentication from db i will redirect to a page in http://localhost:8084/test(test i will replace)
and then will ask user to provide key and secret after then 2nd and 3rd step i will hide as you have done to show the process, and after key and secret i will be displaying my 5 API where if a user is authorize to acess those api then he can able to access like university json example or else if he is not authorized to any api then we will recieve a error.
let me know your suggestion to implement.
Thanx

Hi Geert,
Thanx for the detailed reply, Yes my api is already developed in development env and now I am trying to have one single login page with token provider, authentication and authorization and all the client will have their own scope to access 5 api, only admin can have access to all the 5 api but a normal use may not have the access to all the 5 api.
as of now my 5 api are in separate it has separate project , and in future a client can be either from android,ios or from windows.
as you said having example-resource-server is just a showcase for the OAuth process. Probably what i would do is , existing we have 3 steps in example, So i will customize it on 1 step where a normal authentication from db i will redirect to a page in http://localhost:8084/test(test i will replace)
and then will ask user to provide key and secret after then 2nd and 3rd step i will hide as you have done to show the process, and after key and secret i will be displaying my 5 API where if a user is authorize to acess those api then he can able to access like university json example or else if he is not authorized then we will recieve a error.
let me know your suggestion to implement.
I just saw that every client belongs to only one resource server which is a big issue for me. At any cost i need to have a client to access for multiple resource server.
Please guide how can i have a access a client for multiple resource server
Thanx

You are correct in that there is a one-to-many relation between resource servers and clients (and also between clients and access tokens, effectively restricting each token to one resource server only)
There are currently no plans to support a many-to-many relation between resource servers and clients.
I'm sorry.
By the way: I have my doubts about this. The relation between a resource server and a client is typically a long-lived one, for which developers probably write some code, think about scoping, define configuration (endpoint url as minimum), test thoroughly... To have to configure separate credentials for each resource server doesn't seem like a burden for a client developer to me.
Besides that, from a functional point of view: how would you envision the consent screen for a resource owner that grants access to a client having access to multiple resource servers? That would have to look something like this:
"Do you want to allow client_application_xyz to have access to resource_server_1, resource_server_2, resource_server_3 for the following scopes: scope_1_from_server_1, scope_2_from_server_3, etc...
I think that this could get hairy very quickly....
The spec, RFC 6749, says: "A single authorization server may issue access tokens accepted by multiple resource servers." (ch 1.1)
So in theory it, could be implemented...

Hi,
Please find my reply in blue text,
By the way: I have my doubts about this. The relation between a resource
server and a client is typically a long-lived one, for which developers
probably write some code, think about scoping, define configuration
(endpoint url as minimum), test thoroughly... To have to configure separate
credentials for each resource server doesn't seem like a burden for a
client developer to me.
Besides that, from a functional point of view: how would you envision the
consent screen for a resource owner that grants access to a client having
access to multiple resource servers? That would have to look something like
this:
"Do you want to allow client_application_xyz to have access to
resource_server_1, resource_server_2, resource_server_3 for the
following scopes:scope_1_from_server_1, scope_2_from_server_3, etc...*yes
you are right I need a client *client_application_xyz to have access to
resource_server_1, resource_server_2, resource_server_3 for the
following scopes:scope_1_from_server_1, scope_2_from_server_3.  because
if a client is a admin then he should have acccess to all the apis with
read and write scopse , And if a client is marketting or seller guy then he
will not have access to all the secured apis and thats the reason i want a
client can have access to multiple resource server.
The spec, RFC 6749, says: "A single authorization server may issue access
tokens accepted by multiple resource servers." (ch 1.1)  * yes a this is
what i was in need for , i want a authorization server to issue a token
which can be accepted by multiple resource server. Yes this is what i am
needed.*
So in theory it, could be implemented... Please guide me a little more, I
shall enhance the code to support this
Thanking you alot :)
On Thu, Feb 5, 2015 at 7:49 PM, Geert van der Ploeg <
<EMAIL_ADDRESS>wrote:

You are correct in that there is a one-to-many relation between resource
servers and clients (and also between clients and access tokens,
effectively restricting each token to one resource server only)
There are currently no plans to support a many-to-many relation between
resource servers and clients.
I'm sorry.
By the way: I have my doubts about this. The relation between a resource
server and a client is typically a long-lived one, for which developers
probably write some code, think about scoping, define configuration
(endpoint url as minimum), test thoroughly... To have to configure separate
credentials for each resource server doesn't seem like a burden for a
client developer to me.
Besides that, from a functional point of view: how would you envision the
consent screen for a resource owner that grants access to a client having
access to multiple resource servers? That would have to look something like
this:
"Do you want to allow client_application_xyz to have access to
resource_server_1, resource_server_2, resource_server_3 for the
following scopes: scope_1_from_server_1, scope_2_from_server_3, etc...
I think that this could get hairy very quickly....
The spec, RFC 6749, says: "A single authorization server may issue access
tokens accepted by multiple resource servers." (ch 1.1)
So in theory it, could be implemented...
—
Reply to this email directly or view it on GitHub
https://github.com/OpenConextApps/apis/issues/71#issuecomment-73052698.

--
Regards
Anil.Gupta

Please, format your replies using Markdown. "blue text" won't display when messaging via Github...
You say:

if a client is a admin then he should have acccess to all the apis with
read and write scopse , And if a client is marketting or seller guy then he
will not have access to all the secured apis and thats the reason i want a
client can have access to multiple resource server.

Are you sure about the OAuth concepts here? A client within the OAuth context is not a an end-user, it's an application that requests resources that are owned by a resource owner (only this resource owner is an end user).
Of course, a client application can have multiple access tokens for multiple resource owners (in your example the marketing guy or the admin) and should use them if the application wants to do requests. The client application needs a bookkeeping of all access tokens, properly stored by resource owner and resource server.
Access restriction using scopes (read/write vs. only read) is a multi-level thing: a resource server has a set of scopes. A client (client application) can have access to a subset of these scopes. And finally, the client can ask for resource owner consent for a subset of the scopes.
If you want a certain client (again, a client application) to have only read access: that's fine, just give the client the read scope for this particular resource server.
Please think this through before trying to implement the feature you think you need.
Hope this helps.

Hi Thanx for clearing concepts on OAuth Concepts,
Yes Client  is an application that requests resources that are owned
by a resource
owner .
Let me elaborate more about my requirement
I have 5 application ,

For IT Application
For Call Center Support
Application for Marketing
Application for outside user
Application for Finance

I will have a single login page for all the above applications and all the
users will not have priviledge to all the above application so some of will
have access to only 2 application and some of will have access to 3 and
some of the users will have the access for all the 5 application. if a user
have priviledge to only 3 application and then if he try to access any
other application then he shouldn't even get the access for READ .
So I will have a client application where a end user will validate and
depend on his authorize and and then he will get the access to his
application (Here Application as in  resource server)
Flow
Client Application = A user USER_VISITOR request a access for IT
Application (resource server) via client application then it should return
a token to get the access for Resource Server(Application for outside user)
but if a USER_VISITOR is not authorized for IT Application then he should
get a message that you are not authorize to access.
Again if a user as user_admin tries to access then he should have the
access to all the application (Resource Server) and user_admin should able
to access to its resource server with same token.
I mean USER_VISITOR is a end user.
There will be an application from where a client_user will be validated,
authorize and then will ask the token from its authorized resource server
via client application (http://localhost:8084/test)
so relation here is.
A end user user_admin can have a access to multiple resource server
    all the 5 resource server ( ***  1) For IT Application,2) For Call

Centre Support 3) Application for Marketing4) Application for outside user
5) Application for Finance ***)
if a end user is from marketing then he  can have a access to only 2
resource server ( *** 3) Application for Marketing 4) Application for
outside user   ***)  But  when  a marketing person try to ask for a token
apart from 2 resource server for which he is not associated  then client
application shouldn't even generate a token and should return error message.
So a enduser can be associated to many resource server which is one to many.
In existing apis surf oauth we have multiple user(it test client
http://localhost:8080/client/client.html#, it test client 2
http://localhost:8080/client/client.html#,it test client grant
http://localhost:8080/client/client.html#,it test client credential grant
http://localhost:8080/client/client.html#)
I am treating all this as user(it test client
http://localhost:8080/client/client.html#, it test client 2
http://localhost:8080/client/client.html#,it test client grant
http://localhost:8080/client/client.html#,it test client credential grant
http://localhost:8080/client/client.html#) .
Treating http://localhost:8084/test http://localhost:8084/test as a
Client Application.
Treating  resource servers and admin activities on
http://localhost:8080/client/client.html
http://localhost:8080/client/client.html.
So my question is how can i give access a end user(it test client
http://localhost:8080/client/client.html#, it test client 2
http://localhost:8080/client/client.html#,it test client grant
http://localhost:8080/client/client.html#,it test client credential grant
http://localhost:8080/client/client.html#) to multiple resource server
currently it doesnt allow.
Please give me some solution on my problem .
Let me know if I am wrong on oauth apis architecture with your suggestions.
Thanking you alot
http://localhost:8080/client/client.html#it-test-resource-server
http://localhost:8080/client/client.html#
it test client http://localhost:8080/client/client.html#
it test client 2 http://localhost:8080/client/client.html#
it test client grant http://localhost:8080/client/client.html#
it test client credential grant http://localhost:8080/client/client.html#
readContact: it test<EMAIL_ADDRESS>Key :
Secret :Delete http://localhost:8080/client/client.html#
http://localhost:8080/client/client.html#Authorization Server Apis
http://localhost:8080/client/client.html#
Authorization Server Admin Client
http://localhost:8080/client/client.html#
read,write,read,write,read,writeContact: local admin
<EMAIL_ADDRESS>Key :
*Secret :*Delete http://localhost:8080/client/client.html#
On Thu, Feb 5, 2015 at 10:02 PM, Geert van der Ploeg <
<EMAIL_ADDRESS>wrote:

Please, format your replies using Markdown. "blue text" won't display when
messaging via Github...
You say:
if a client is a admin then he should have acccess to all the apis with
read and write scopse , And if a client is marketting or seller guy then he
will not have access to all the secured apis and thats the reason i want a
client can have access to multiple resource server.
Are you sure about the OAuth concepts here? A client within the OAuth
context is not a an end-user, it's an application that requests resources
that are owned by a resource owner (only this resource owner is an end
user).
Of course, a client application can have multiple access tokens for
multiple resource owners (in your example the marketing guy or the admin)
and should use them if the application wants to do requests. The client
application needs a bookkeeping of all access tokens, properly stored by resource
owner and resource server.
Access restriction using scopes (read/write vs. only read) is a
multi-level thing: a resource server has a set of scopes. A client
(client application) can have access to a subset of these scopes. And
finally, the client can ask for resource owner consent for a subset of
the scopes.
If you want a certain client (again, a client application) to have only
read access: that's fine, just give the client the read scope for this
particular resource server.
Please think this through before trying to implement the feature you
think you need.
Hope this helps.
—
Reply to this email directly or view it on GitHub
https://github.com/OpenConextApps/apis/issues/71#issuecomment-73077409.

--
Regards
Anil.Gupta

You talk about 5 applications, which are the resource servers. That's fine.
But what about the client applications. How many actual client applications (not end users) are there involved?
Somehow I suspect there isn't any client application in the picture, just end users and resource servers. (For this scenario, OAuth isn't the right solution)

Hi,
Well At present my 5 applications are open and its not secured , So I have
planned to have one client application where all the users will login from
client application and token will be created to access their resource
server, and if a user is not associate with some resource then token will
not be generated.
If you think oauth is not right solution then how do I secure my 5
application any suggestions would be highly appreciated.
thanx
On Mon, Feb 9, 2015 at 9:01 PM, Geert van der Ploeg <
<EMAIL_ADDRESS>wrote:

You talk about 5 applications, which are the resource servers. That's fine.
But what about the client applications. How many actual client
applications (not end users) are there involved?
Somehow I suspect there isn't any client application in the picture, just
end users and resource servers. (For this scenario, OAuth isn't the right
solution)
—
Reply to this email directly or view it on GitHub
https://github.com/OpenConextApps/apis/issues/71#issuecomment-73527971.

--
Regards
Anil.Gupta

Hi,
Well At present my 5 applications are open and its not secured , So I have
planned to have one client application where all the users will login from
client application and token will be created to access their resource
server, and if a user is not associate with some resource then token will
not be generated.
If you think oauth is not right solution then how do I secure my 5
application any suggestions would be highly appreciated.
And also let me know if i want to test following client ids then how can i
test ,
*Client ID *: it-test-client-grant
Secret : somesecret-grant
*Client ID *: it-test-client-no-consent-refresh
*Secret : somesecret2**Client ID *: it-test-client
*Secret : *somesecret
how can i test above client's in application , do i have to test using CURL
???
thanx
On Wed, Feb 11, 2015 at 1:58 PM, anil gupta<EMAIL_ADDRESS>wrote:

Hi,
Well At present my 5 applications are open and its not secured , So I have
planned to have one client application where all the users will login from
client application and token will be created to access their resource
server, and if a user is not associate with some resource then token will
not be generated.
If you think oauth is not right solution then how do I secure my 5
application any suggestions would be highly appreciated.
thanx
On Mon, Feb 9, 2015 at 9:01 PM, Geert van der Ploeg <
<EMAIL_ADDRESS>wrote:

You talk about 5 applications, which are the resource servers. That's
fine.
But what about the client applications. How many actual client
applications (not end users) are there involved?
Somehow I suspect there isn't any client application in the picture, just
end users and resource servers. (For this scenario, OAuth isn't the right
solution)
—
Reply to this email directly or view it on GitHub
https://github.com/OpenConextApps/apis/issues/71#issuecomment-73527971.

--
Regards
Anil.Gupta

--
Regards
Anil.Gupta

So I have planned to have one client application where all the users will login from
client application and token will be created to access their resource
server, and if a user is not associate with some resource then token will
not be generated.

Here lies the problem with trying to solve this with OAuth, for the following reasons:

Oauth is meant for authorization of client applications, not for authorization of users. The resources that OAuth is about, are owned by the end users. There is no reason to completely deny an end user access to his own resources: they are his! And if he has no resources at a particular resource server then what is he doing with that resource server?
OAuth is meant for situations where you want to authorize multiple client applications in a consistent way. If you have only one client application: just use a shared secret (for example HTTP Basic Auth over SSL) to let the client application authenticate itself to each of the 5 applications.
Even if you implement OAuth, you still will have to handle authorization (based on group membership/roles, whatever) in the resource server.
Imagine this double question "Client app A1 wants to write a particular resource for user U1. Is A1 allowed to? And does user U1 have enough rights to do so?"
OAuth is only about the first part (is A1 allowed to). The second part (does user U1 have rights) is a question that the resource server has to answer to be properly secured. Only the resource server knows its own schema of permissions. Of course, you could centralize this, but that is not OAuth's business.

Hi ,
Getting following error when i am trying to perform this command.
curl -i -v -H "Authorization: bearer 00-11-22-33"  http://localhost:8082
getting below error.
org.codehaus.jackson.map.JsonMappingException: Unexpected token
(START_OBJECT), expected START_ARRAY: need JSON Array to contain
As.WRAPPER_ARRAY type information for class
org.surfnet.oaaas.model.VerifyTokenResponse
at [Source: java.io.StringReader@4d5d021; line: 1, column: 1]
at org.codehaus.jackson.map.JsonMappingException.from(JsonMappingException.java:163)
at org.codehaus.jackson.map.deser.StdDeserializationContext.wrongTokenException(StdDeserializationContext.java:261)
at org.codehaus.jackson.map.jsontype.impl.AsArrayTypeDeserializer._locateTypeId(AsArrayTypeDeserializer.java:100)
at org.codehaus.jackson.map.jsontype.impl.AsArrayTypeDeserializer._deserialize(AsArrayTypeDeserializer.java:86)
at org.codehaus.jackson.map.jsontype.impl.AsArrayTypeDeserializer.deserializeTypedFromObject(AsArrayTypeDeserializer.java:55)
Please suggest. failing to execute this line verifyTokenResponse =
objectMapper.readValue(responseString, VerifyTokenResponse.class);
On Thu, Feb 12, 2015 at 3:46 PM, Geert van der Ploeg <
<EMAIL_ADDRESS>wrote:

So I have planned to have one client application where all the users will login from
client application and token will be created to access their resource
server, and if a user is not associate with some resource then token will
not be generated.
Here lies the problem with trying to solve this with OAuth, for the
following reasons:

Oauth is meant for authorization of client applications, not for
authorization of users. The resources that OAuth is about, are
owned by the end users. There is no reason to completely deny an end
user access to his own resources: they are his! And if he has no resources
at a particular resource server then what is he doing with that resource
server?
OAuth is meant for situations where you want to authorize multiple
client applications in a consistent way. If you have only one client
application: just use a shared secret (for example HTTP Basic Auth over
SSL) to let the client application authenticate itself to each of the 5
applications.
Even if you implement OAuth, you still will have to handle
authorization (based on group membership/roles, whatever) in the resource
server. Imagine this double question "Client app A1 wants to write a
particular resource for user U1. Is A1 allowed to? And does user U1 have
enough rights to do so?" OAuth is only about the first part (is A1 allowed
to). The second part (does user U1 have rights) is a question that the
resource server has to answer to be properly secured. Only the resource
server knows its own schema of permissions. Of course, you could centralize
this, but that is not OAuth's business.

—
Reply to this email directly or view it on GitHub
https://github.com/OpenConextApps/apis/issues/71#issuecomment-74047296.

--
Regards
Anil.Gupta


The readme file does not specify the version you use and which is the script file for training and testing

The readme file does not specify the version you use and which is the script file for training and testing. I am a novice, so I need your help. Thank you

Apologies. This is an old project from 2019 that I implemented from a BMVC paper. It’s not the cleanest as I was only using it for some short benchmarking. I will get reacquainted with it and get back to you as soon as I can.

道歉。这是我从 BMVC 论文中实现的 2019 年的一个旧项目。它不是最干净的，因为我只是将它用于一些简短的基准测试。我会重新熟悉它并尽快回复您

道歉。这是我从监查论文中实现的2019年的一个旧项目。它不是最干净的，因为我只是将它用于一些简短的基准测试。我会重新熟悉它并尽快回复您。

I feel you are doing a great job, so I look forward to it. Thank you for your reply

Hi @yanjinwei143,
I've added a requirements.txt for all the library versions etc.
To run the code and do the full training as described in the paper, run the command
python main.py --train --target_domain clipart
or change clipart for the target domain of your choice (i.e. clipart, watercolour, comic). There are also various optional arguments that can be used to change various hyper parameters.
There are some pre-trained weights you need to download:

pretrained VGG16 weights (https://s3.amazonaws.com/amdegroot-models/vgg16_reducedfc.pth) and SSD weights (https://s3.amazonaws.com/amdegroot-models/ssd300_mAP_77.43_v2.pth) taken from  the SSD implementation amdegroot/ssd.pytorch -- place these in a directory 'weights'
pretrained Ada in model weights decoder.pth and vgg_normalized.pth that can be found in https://github.com/naoto0804/pytorch-AdaIN --  place these in the directory 'style-models'.

You'll also need to set up the directory paths for the two datasets (VOC and Clipart1k-Watercolor2k-Comic2k). The code will run the style transfer preprocess over the VOC dataset using the chosen target domain a few times before starting training.
I hope this helps!

Hi @yanjinwei143,
I've added a requirements.txt for all the library versions etc.
To run the code and do the full training as described in the paper, run the command
python main.py --train --target_domain clipart
or change clipart for the target domain of your choice (i.e. clipart, watercolour, comic). There are also various optional arguments that can be used to change various hyper parameters.
There are some pre-trained weights you need to download:

pretrained VGG16 weights (https://s3.amazonaws.com/amdegroot-models/vgg16_reducedfc.pth) and SSD weights (https://s3.amazonaws.com/amdegroot-models/ssd300_mAP_77.43_v2.pth) taken from  the SSD implementation amdegroot/ssd.pytorch -- place these in a directory 'weights'
pretrained Ada in model weights decoder.pth and vgg_normalized.pth that can be found in https://github.com/naoto0804/pytorch-AdaIN --  place these in the directory 'style-models'.

You'll also need to set up the directory paths for the two datasets (VOC and Clipart1k-Watercolor2k-Comic2k). The code will run the style transfer preprocess over the VOC dataset using the chosen target domain a few times before starting training.
I hope this helps!
I'll update the README with this as soon as I get some more time.

Thank you very much! I'll try your work. Thank you again


User can select a country from a dropdown while adding/editing a locality

[ ] User is shown a list of countries
[ ] User can click on a country to select it
[ ] User can search the dropdown list to filter it
[ ] Tests are implemented
[ ] Documentation is written

Implemented in #553

Test results: Approved

[x] OK: User is shown a list of countries
[x] OK: User can click on a country to select it
[x] OK: User can search the dropdown list to filter it
[x] Possibly OK: Tests are implemented
[x] Possibly OK: Documentation is written
could not find it. Possibly one can add a link to it when defined as Done

docs for the component that was made for this are here

Document OK


Could you please list the version requirements for each dependency used in the tutorial?

As title (anndata .... cellrank). Thanks!

Hi Gran,
Thanks for your interest in our work!
I have updated the tutorial for the convinience of understanding and reproducing our results. And I listed package versions that might influence the numerical and plotting results with the help of cellrank2 buildin function.
Please let me know if you have any further questions.
Best regards,
Yuhao

Thanks for your swift feedback, Yuhao! Merry Xmas!


Docker cache volumes for path operations

This introduces a volume caching feature for Path lookups. Any Path operations will only result in a future lookup if a volume 1) is mounted when rr started 2) mount operation occurs on it. This addresses a Docker 1.10.1 problem issue where Path requests are made across every volume that has not Mountpoint listed from List requests.
This should be rebased after https://github.com/emccode/rexray/pull/296 is merged.  No conflicts should exist at that point.

@akutz Not sure how to satisfy the testing here with the unexported methods.

This other important note here is that in order for this to work, it introduces a List() operation when the volume driver starts. This populates a count for any volumes that have existing mounted paths. This value is used to determine whether the future Path() operations would require any lookups. The feature is globally able to be disabled with volume.path.disablecache.
An outstanding note is that since it does this with the vdm Init, a List() happens before each CLI command even though the cache isn't relevant for those commands. I couldn't figure out how best to only restrict this to the daemonized modules. A solution would be to have a minimum of 2 modules configured default-docker that disables the cache and is used for CLI, then custom1 that is used as the docker endpoint which would include the cache.

Hi @clintonskitson,
I'm going to need to spend some time reviewing the VDM code to figure out the best path forward.

Hi @clintonskitson,
Also, please rebase this branch ASAP. It's got commits on it that are no longer in existence as they've been merged after having been rebased, and will have different commit IDs than what are on this branch. Thanks.

Hi @clintonskitson,
Would you please provide clarity to the following remarks:

An outstanding note is that since it does this with the vdm Init, a List() happens before each CLI command even though the cache isn't relevant for those commands.

Is the cache relevant to any CLI command, or only for modules? And if so, only for some modules? Because if that's the case, why even invoke it inside the VDM and not in the Docker module instead? It seems maybe too aggressive to implement a Docker fix at a global scope.
You're correct regarding the side-effect -- it will prevent this PR from being merged as is. The most prudent and simplest path forward is to reverse the meaning of the new switches/config options. Please change rexray.volume.path.disableCache to rexray.volume.path.enableCache, and then in the Docker Daemon Module (not the Docker Volume driver, but the Daemon Module), prior to instantiating a new REX-Ray instance, create a new Config instance and enable the cache.
For example, on line 59 of daemon/module/docker/volumedriver/voldriver.go, change this:
r := core.New(c.Config)

So that the when creating a new Docker Daemon module, the supplied Config instance is copied (so that the next step doesn't affect other modules), and then the rexray.volume.path.enableCache setting is flipped to true:
cc, err := c.Config.Copy()
if err != nil {
    return nil, err
}
cc.Set("rexray.volume.path.enableCache", true)
r := core.New(cc)

This way the existing behavior of REX-Ray is preserved and only the daemon modules requiring caching will get it. If this is not acceptable then what we should do is to alter how a REX-Ray instance is constructed and enable passing an additional parameter based on an enum that describes the purpose of this instance:
type RunAsTypes int
const (
    RunAsCLI RunAsTypes = iota
    RunAsService
)

Then a REX-Ray instance can store a field of type RunAsTypes and subsequent logic can use that to detect if there's something that should or should not occur based on how REX-Ray is being utilized.

@akutz Thanks for the review.  I have re-based and modified based on your comments. I did introduce the configurable path.disableCache option. The objective was to ensure the cache was enabled by default for the docker modules. Open to alternatives since I use path.cache as an internal param and path.disableCache as the configurable item. I believe the configRegistration would simplify this, but wasn't sure if it could be introduced in the right spot to make it useful here for default values.

Hi @clintonskitson,
First of all, thank you for rebasing the PR as I requested. It makes the review a lot easier :) Secondly, I'm not sure that I successfully communicated the request for changing the name of the switch. The fact is, caching should not be enabled by default for all volume drivers since, as you said, it's Docker specific. Additionally, since my question regarding whether caching is applicable in CLI mode was left unanswered, I have to restate one of the reasons for defaulting to no cache by default -- this prevents REX-Ray from listing all paths via the VDM every time a CLI command is invoked. If instead the suggested fix is used, and the config option defaults to a disabled cache, requiring explicit enabling, then we can always and only enable it for the Docker Daemon Module so that the Docker Volume Driver under such module has caching. All other instances of any Volume driver, including the Docker Volume Driver, will default to no cache, including the CLI.
So please clarify if:

Caching is only needed for REX-Ray as a service/module
Caching is not useful and should not be enabled for the CLI
Caching is specific to the Docker Volume Driver when operating via the Docker Daemon Module (related to the first point)

If these assumptions/assertions are not accurate, then I've misunderstood the PR and its explanation. As it is it seems the updated PR still does not accommodate the issue that you pointed out regarding the caching forcing a listing of the paths with every CLI command.

@akutz I believe your understanding is correct.
My intent here is to ensure that by default, the caching feature is enabled for any daemonized volume module. It is in response to the Docker 1.10 API, but it was introduced in a way that would have benefit to any daemonized volume module. I am not sure why someone would disable the functionality, hence the desire to ensure it is default.
I believe the state of the PR is what you have defined.

@akutz Also based on how the parameter is interpreted, it is only actually activated if the daemon module implementer manually evaluates and flips the bit.
https://github.com/clintonskitson/rexray/blob/feature/docker_cache_volumes/daemon/module/docker/volumedriver/voldriver.go#L64-L66


Add a pony primitive that exposes scheduler information

Previously, when users wanted to optimize the parallelizing work based on the maximum number of actors that can be run at a single time, we were pointing them to using the private runtime method @ponyint_sched_cores().
This was problematic for two reasons:

We were pointing users at an internal implementation method that we hadn't promised not to change.
We were requiring users to muck about with FFI for something that has become somewhat common for users wanting to maximize performance want to know.

We've now exposed some information about scheduler threads via a new package runtime_info thereby resolving both of the problems mentioned above.
Pony users should expect to see additional information added to the runtime_info package moving forward.
Closes #3985

When this is merged, it should be noted in last week in pony that RFC 71 has been implemented.


SQL queries executor should consider @class WHERE clauses while resolving indexes

For queries like select from V where @class='Person' and name='foobar' no Person indexes are considered while searching for applicable indexes. We should try narrow down the possible document class and examine its indexes while executing the query.

Hey Sergey. In general and for my knowledge, (and after reading this page: http://orientdb.com/docs/2.1/Indexes.html) if I run a query on an indexed property (but not using the index in the query), will ODB still use that index automatically? Or do I have to actually always query the index to get a faster result?
Scott

ODB will try to use the best index possible if you use queries like select from SpecificClassHere where.... This issue is applicable only if you use queries with no specific class specified and later filters by the class in where clause using @class. So, the answer is yes, ODB will use the index on indexed properties, there is no need to specify the concrete index.

Yeah, sorry for sidetracking the issue. It just reminded me of my uncertainty on index usage. Thanks for answering.
And if I may ask one more question, if ODB does use the (best) index, what purpose is there in querying the index directly? I mean, if I have a query, and it only projects for the fields in the index, then I should get a direct response from the index, without ODB digging for data in the actual records, correct?
Scott

Yes, you are right. If you want to squeeze all the performance possible from ODB, you may query the index directly, that will not load the actual records, just return the RIDs of them. You may even try to populate indexes manually, if you see benefits from doing so :)

Right. Though, I don't understand the choice. If ODB can use an index and it could possibly reply to the query directly from the index (i.e. the projected fields requested are the same fields in the index), then the user shouldn't really need any separate queries on the index. Right? ODB could simply return the index(ed) query result (without any record lookups).
But, as I understand it, the user would still need to do a separate query to get a pure index (and faster) result. To me, that means added complexity on the user's end.
Maybe I should write up a suggestion? ODB has a query optimizer, doesn't it? I would imagine returning a pure index result could be a part of it. :smile:
Scott

Scott, let me check the source code, maybe projected properties are already handled the way you described. I'm just a man, I don't know everything ;)

Have traced the select name from Foo where name='bar' query with index on Foo.name. The record is fully loaded even if we have all the data on hands just from the index call. Scott, feel free to open an issue describing all your thoughts, wishes and pains on the subject :D

Thank Sergey. I've created an issue with the suggestion. Sorry again for hijacking this issue.
Scott


[FR] Allow "recovery" of consumed stock items from a build

Please verify that this feature request has NOT been suggested before.

[X] I checked and didn't find a similar feature request

Problem statement
Following the recent stock tracking changes stock item records for untracked stock consumed by build orders are retained in the database but marked as unavailable by setting the consumed_by_id field to the build order that they were used in - and associated stocktracking entries are created with additional metadata as well. This is great.
Let's say however that a built item is returned/scrapped/reworked and as a result some of the components that were used to build it are "recovered" from the item and returned to stock able to be re-used in a future build.
Currently I cannot find any supported method to record this in the database without resorting to manual SQL queries.
It's desirable to be able to "recover" the original stock items to stock, rather than simply creating new items for the recovered parts to enable traceability of the parts across their previous uses and back to the purchase order.
Suggested solution
Add an API/UI functionality to "recover" a stock item that is currently marked as consumed back into stock - this is conceptually a parallel to the "uninstall" action that is possible with tracked/installable items, but would work on untracked stock items instead.
Achieving it requires just two things to happen afaict:

Add a stocktracking entry (with a new tracking_type code) to record the recovery of the parts
NULL out the consumed_by_id field on the stock entry itself.

A further extension would be to allow the "split" functionality to also occur on the stockitem to handle the case where the build order consumed more stock than is being recovered (e.g. stock for 3 units was built/consumed, but only parts from 1 unit are being recovered).
Describe alternatives you've considered
The main issue I see with the proposal is that while we retain history of the use in the build in the stocktracking table - I think the parts won't show up in the "consumed items" view of the build itself anymore as that references via the consumed_by field, not the stocktracking table... In a way that's correct, because the items are not consumed by the build any more, but it does mean that there is no way from the build to see all the stockitems that were originally used, which some may find desirable? To do that however, would require making the build look up the stocktracking table, and/or some further duplicatino of stockitem records which seems more complicated.
Examples of other systems
No response
Do you want to develop this?

[X] I want to develop this.

@mattbnz nice idea - you might want to read through the latest comments in https://github.com/inventree/InvenTree/issues/2624 also


web-ui: Improve error UI and UI in general

[ ] Try to show a meaningful error message when the /api-violations call fail
[x] Clean the previous violations list if something wrong happen when we call /api-violations
[x] Show a nice no violations message (good job!) if the schema is valid!

close this in favor of #282


Added error-throwing tests and fixed bugs

ValueError isn't a real type AFAICT. Also fixed (I think?) a BoundsError throw to work properly.

Coverage increased (+0.5%) to 86.888% when pulling 6ef3c8c4815c09a9f43093801c8c5f409575fda4 on ksh/errortests into 4558f41f71fa03fa0a331f58b6aa0e4658fc232d on master.

Post-Easter bump - @jiahao does this look ok?

Ba-bump tish.


remove leaflet.js via

updates package.json to include leaflet v0.7.2 (to match version of leaflet inside LRM)
updates all js files in src/ to require('leaflet')

Ref #137

Leaflet 0.7.2 and 0.7.3 has major problems in recent versions of Chrome: https://github.com/Leaflet/Leaflet/issues/3689, please don't use this version, it is kind of horrible (you can unfortunately see this effect on a lot of Leaflet sites that still haven't been upgraded).

Stale. Superseeded by https://github.com/Project-OSRM/osrm-frontend/pull/184


DateScale is inaccurate on scale of hours

Describe the bug
Feeding time data into plots that is on the scale of less than a day this bug becomes visible. The plot shows the data displaced by the amount of the timezone offset used by the browser of the user.
To Reproduce
import importlib
import bqplot
importlib.reload(bqplot)
from bqplot import *
xsc=DateScale()
ysc=LinearScale()
mark=Scatter(scales={'x':xsc,'y':ysc})
xax=Axis(scale=xsc)
yax=Axis(scale=ysc,orientation='vertical')
with mark.hold_sync():
    mark.x=np.array([
        "2019-01-01T00:00:00",
        "2019-01-02T00:00:00",
        "2019-01-03T00:00:00",
    ]).astype("datetime64[s]")
    mark.y=[0,1,0]
fig = Figure(marks=[mark],axes=(xax,yax))
fig

Expected behavior
I would expect the data points in the plot to be located at the dates that I'm feeding into the system.
Screenshots

Environment:
Reproduced this in Firefox and Chrome
bqplot.__version__ == '0.12.0'
Ubuntu 19.10
Comment
I already wrote a fix for the issue which I'm going to post in a few minutes/hours.

@joders closing as I merged your PR - which should be in 0.12.8.

nice. thanx


[FeatureReq - Edge Addons site]

Is your feature request related to a problem? Please describe.
The existing page will be replaced when i type a new address and access it.
Describe the solution you'd like
could you open new page on new tap when I type new weblink at address bar
Describe alternatives you've considered
I install the add-on but failed.
Additional context
Add any other context or screenshots about the feature request here.

Hello @nomatic51 ,
From the information provided above what I understand is:

You are looking for a New Feature.
In that case, you can post your request here: https://github.com/MicrosoftEdge

You have tried installing an extension to get this feature and it failed.
For this, could you please share the name of the extension you used?


Various bug fixes

Make gurobi models picklable
Fix gurobi infinite recursion

Fixes #125

Codecov Report

Merging #126 into devel will not change coverage.
The diff coverage is n/a.

@@         Coverage Diff          @@
##           devel   #126   +/-   ##
====================================
  Coverage     89%    89%
====================================
  Files          9      9
  Lines       2500   2500
  Branches     548    548
====================================
  Hits        2225   2225
  Misses       181    181
  Partials      94     94

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 760b2a3...1172bfa. Read the comment docs.

Fixes #116


[AMBARI-23745] - Replace Multiple Matches Using Regex on Upgrades

What changes were proposed in this pull request?
When upgrading from one stack to another, the {{regex-replace}} key can be used to find and replace a block of text which matches a given regular expression. This works by finding the literal string matching the regex and turning this into a regular find/replace.
For example:
<regex-replace find="\d-foo-\d" replace="REPLACED"/>

on
1-foo-1
2-foo-2
3-foo-3

Would produce:
REPLACED
2-foo-2
3-foo-3

In order to replace all of the possible matches, we can extend the XSD of {{RegexReplace}} to create multiple literal {{Replace}} instances for every match.
<regex-replace find="\d-foo-\d" replace="" match-all="true"/>

Would produce:
REPLACED
REPLACED
REPLACED

How was this patch tested?
Ran an upgrade which used the new regex-replace tag.

Refer to this link for build results (access rights to CI server needed):
https://builds.apache.org/job/Ambari-Github-PullRequest-Builder/2086/
Test FAILed.
Test FAILured.

Refer to this link for build results (access rights to CI server needed):
https://builds.apache.org/job/Ambari-Github-PullRequest-Builder/2091/
Test FAILed.
Test FAILured.

retest this please

Refer to this link for build results (access rights to CI server needed):
https://builds.apache.org/job/Ambari-Github-PullRequest-Builder/2112/
Test PASSed.


Anchor fixes

This will give you the possibility to set your own anchors (only works in titles!)
## 3.6 Start Environment {#start-environment}

Will be rendered in the HTML with ID="start-environment"


ENH/BUG: FastqManifestFormat sniffer validating

The FastqManifestFormat sniffer now validates all of the following:

Column headers are correct (sample-id, filename, direction)
No duplicate (sample-id,direction) tuples exist
No rows have too few or too many entries

Moreover, comments are now allowed in the format and ignored.  I added tests for all of the above and added a comment to a passing, successful test.
Fixes #126
Fixes #132

This is ready for review.

Not reviewing, but you should add a comment to the sniff method to say that we are doing exhaustive validation, that way when we come back to this we know that we're kind of "breaking the rules" and we can just port this behavior to whatever comes next for validation/sniffing.

Good point @ebolyen !  And done.

Closing in favor of #136.


Code cleanup

Code doc tweaks to keep PHPStorm happy and some typo/spelling corrections.

1.5 is not the correct branch. 1.5 is not maintained. 1.7 is the branch for new stuff, and 1.6 is the branch for bug fixes.

Thanks for the feedback. I'll keep it mind for when I try again some other time.

It looks nice, will it be resend for 1.7 ?

@keradus I'll make a ne one tomorrow for 1.7

great, thanks !


Research How to Use React Native

4 hr
split evenly between all members

React Native Docs: https://reactnative.dev/
Expo docs: https://docs.expo.dev/


time format and parse edge cases

merging @mathteacher's change to google-sheet and my refactor of format-time to replace #16

That all looks good and I tested it and it ran fine so I went ahead and merged the pull request since it was giving me the option to do that myself (please let me know if I shouldn't have gone ahead and done that, collaborating on GitHub is still new to me)
Would we want to use the language setting as a parameter in the toLocaleString() like .toLocaleTimeString('en-US') (https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Date/toLocaleTimeString) to extend support for other languages? I'm thinking we'd have to change our language setting to 'en-US'.

Yeah as the reviewer you're welcome to merge it!
My hope in not specifying the locale was that people in different locales might see the format for their locale. Not sure if that works or not but figure it's worth trying

I just read a little more and I think your idea will work, it says, "If the locales argument is not provided or is undefined, the runtime's default locale is used.", which I understand to be whatever the browser locale is set to.


Reading any chapter from ReadComicOnline gives the error java.lang.Exception: Solve captcha in WebView

Source information
ReadComicOnline
Source language
English
Steps to reproduce

Tap on a chapter from ReadComicOnline
Get error to solve captcha in webview

Expected behavior
The chapter opens
Actual behavior
java.lang.Exception: Solve captcha in WebView
Mihon/Tachiyomi version
0.16.5
Android version
Android 9
Other details

The captchas look like that and they show up every chapter. On mobile trying to get to this point through WebView leads to the error:
net::ERR_HTTP_RESPONSE_CODE_FAILURE
Acknowledgements

[X] I have searched the existing issues and this is a new ticket, NOT a duplicate or related to another open or closed issue.
[X] I have written a short but informative title.
[X] I have updated the app to version 0.15.3.
[X] I have updated all installed extensions.
[X] I have tried the troubleshooting guide.
[X] If this is an issue with the app itself, I should be opening an issue in the app repository.
[X] I will fill out all of the requested information in this form.

Duplicate of #4115
Doesn't matter if you solve the captcha (set the extension to use Server 2 in the extension settings), you can't load the chapter images afterwards, since the source itself was actively breaking the extension after each fix. You should find/migrate to a better source & not give them the ad revenue.
Also that ERR_HTTP_RESPONSE_CODE_FAILURE page you're seeing is a spam/ad link the site tries to redirect you to.

whoops sorry for wasting your time, idk how i missed that. ty.


Typed TSLint rules can fail on .vue snippets

Version
3.1.1
Reproduction link
https://github.com/millimoose/vue-tslint-microsoft-contrib-bug
Node and OS info
Node 9.7.1 / npm 6.4.1
Steps to reproduce

Clone and npm install in that repro
npm run lint --no-fix

What is expected?
Typed TSLint rules should only be run on files that have a corresponding entry in the backing TypeScript program. Some operations run on nodes in the files by TSLint rules query the program for type information only available on those files.
What is actually happening?
The Vue CLI is patching the program's getSourceFile to return a manually created file from ts.createSourceFile for Vue files (per isVueFile). https://github.com/vuejs/vue-cli/blob/f8a0a6372fec324171c6f19baf0a77c6869e7d80/packages/%40vue/cli-plugin-typescript/lib/tslint.js#L60
Untyped rules will work fine with this, but some typed rules will throw. For example, no-unsafe-any crashes: https://github.com/palantir/tslint/issues/4273

Related TypeScript issue: https://github.com/Microsoft/TypeScript/issues/8136
This is a more general case of #2712 as originally reported by @millimoose. The bug investigation trail went from there to TSLint to TypeScript and back to here, amusingly.

I notice that running vue-cli-service serve will lint correctly.
After digging deeper it seems the linting is done via fork-ts-checker-webpack-plugin.
Its underlying implementation for typecheck and linting is done via IncrementalChecker.
The vue related part is VueProgram.
The most notable difference I observed is VueProgram overrides resolveModuleNames but vue-cli does't.

I tried to adapt similar strategies demonstrated in fork-ts-checker-webpack-plugin.
But encounter an issue that auto fix will be broken for vue files.
https://github.com/Realytics/fork-ts-checker-webpack-plugin/issues/191

I'm getting a crash on the "deprecation" rule:
The 'deprecation' rule threw an error in '/Users/shauncutts/src/factfiber/vue-grid-scroller/src/views/Home.vue':
TypeError: Cannot read property 'members' of undefined
    at resolveNameHelper (/Users/shauncutts/src/factfiber/vue-grid-scroller/node_modules/typescript/lib/typescript.js:32099:70)

I think related? .... Is there a work-around for this? I tried to ignore deprecation but no change (in vue.config.js):
    config.plugin('fork-ts-checker')
      .tap(args => {
        args.ignoreLints = ['deprecation']
        return args
      })

Now that TSLint is officially deprecated, TSLint support will be fully dropped in the next major version; as for the current major version, no more bug fixes or features will be implemented except for security reasons. So I'm closing this issue now.


Is it possible to change graphs and their adjacency matrices during problem solving?

I‘m wondering whether  NetworkDynamics.jl can change the adjacency matrix of graph in the process of solving ODEproblem? Is it possible to use CallbackSet ?

It's not possible to directly change the adjacency matrix. However you can introduce an edge weight and use a callback to set it to 0 during integration. Take a look at the cascading failure example.

Thanks！
Micha @.***> 于2023年1月18日周三 17:14写道：

It's not possible to directly change the adjacency matrix. However you can
introduce an edge weight and use a callback to set it to 0 during
integration. Take a look at the cascading failure example
https://github.com/PIK-ICoNe/NetworkDynamics.jl/blob/main/examples/cascading_failure.jl
.
—
Reply to this email directly, view it on GitHub
https://github.com/PIK-ICoNe/NetworkDynamics.jl/issues/124#issuecomment-1386724374,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AU46YZXK23JUU74C7FYFTVDWS6X7BANCNFSM6AAAAAAT6ZQROE
.
You are receiving this because you authored the thread.Message ID:
@.***>


How to create an inline destination with OAuth2SAML2BearerAssertion authentication ?

Is it at all possible ?
if so, what the the names of the mandatory attributes and optional properties of a destination definition?
For instance, I've noticed URL becomes 'url` etc;
What about the keystore ? Would the inline definition pick the keystore by name on the BTP subaccount level ? etc...

Hey @ptesny, when you refer to "creating" an inline destination, do you mean that this destination would be created in Cloud Foundry, or only locally?
For the latter this is possible, you can either create a destination object or even register a destination.
If you simply want to use an object, you can refer to the type definition of destinations in our API documentation.
Alternatively, you can also register a destination, as described in our regular documentation.
However, using either of these options means you have to take care of authentication yourself, therefore we generally recommend using the destination service instead and creating destinations in your BTP cockpit.

Perhaps you can go into more detail about what you are trying to achieve with this?

@tomfrenken ; I have the destination definition given in a secret of one the SAP extensibility services (k8s in my case not CF but it is a minor detail); and I'd like to create a cloud-sdk consumable destination definition on-the-fly.
Same way as it can be already done with a simple NoAuthentication destination definition with an url and forward token attribute?

If your destination resides in a service binding, you should be able to retrieve your destination from the service binding using the destination fetch options (=> docs).
This was a similar issue.

Hey @ptesny, I'll go ahead and close this, but in case the above solution does not help, please let me know.


Problem in Setting Up

I have followed all the steps listed in ReadMe. when i try to send a text message a popup appears
There was an error sending a request to the server :(
And this is printed on console
"HTTP Error Your request was:
POST /Accounts/{Account Sid}/Messages.json
Twilio returned the following information:
Unable to create record: A 'From' phone number is required.
More information may be available here:
https://www.twilio.com/docs/errors/21603"
Any hints why i am getting this error ?

Hello,
I'm having the same issue, did you find the answer?
Thanks

Hello,
I'm having the same issue, did you find the answer?
Thanks

I did not use this starter python. however, you need a Twilio number. and you should put this number in 'From' parameter of the request.
docs suggest this if this error occurs

Make sure to specify a valid Twilio Number as the 'From' number in your outgoing messages.


Tests: Maximum recursive updates exceeded in component

Overview of the problem
Oruga version: [0.8.6] (but also before i think)
Vuejs version: [3.4.21]
Description
When I have a component with a o-dropdown component i get a Unhandled Rejection exception while running tests.
When the same test is run within the oruga package, this error does not occur.

Steps to reproduce
Setup:

"vite": "^5.1.6",
"vitest": "^1.3.1",
"jsdom": "^24.0.0",
"@vue/test-utils": "^2.4.4",

(With vue 3.3.x the error is only a warning but also there)
The component:
<script setup lang="ts"></script>

<template>
  <ODropdown>
    <ODropdownItem :value="1" />
    <ODropdownItem :value="2" />
    <ODropdownItem :value="3" />
  </ODropdown>
</template>

The test:
import { describe, expect, test } from "vitest";
import { mount } from "@vue/test-utils";

import Dropdown from "./DropdownWrapper.vue";

describe("DpsDropDown.vue", () => {
  test("mount test", () => {
    const wrapper = mount(Dropdown);
    expect(wrapper.attributes("data-oruga")).toBe("dropdown");
    expect(!!wrapper.vm).toBeTruthy();
  });
});

Expected behavior
Running tests without any error.
Actual behavior

Vitest caught 3 unhandled errors during the test run.
This might cause false positive tests. Resolve unhandled errors to make sure your tests are not affected.
Unknown Error: Maximum recursive updates exceeded in component <ODropdown>.
This means you have a reactive effect that is mutating its own dependencies and thus recursively triggering itself.
Possible sources include component template, render function, updated hook or watcher source function.

I also get this error for the OTooltip component -.-
Unknown Error: Maximum recursive updates exceeded in component <OTooltip>. This means you have a reactive effect that is mutating its own dependencies and thus recursively triggering itself. Possible sources include component template, render function, updated hook or watcher source function.


Magnetometer values freeze after some time

Hello all,
Setting:
I am working on a system where multiple MPU9250 IMUs (6, to be specific) are connected to an ESP32 MCU via SPI. Using SPI as the communication bus is crucial because the I2C pins are occupied. If it's relevant, sensors are divided as 3 sensors to VSPI and 3 sensors to HSPI.
Problem:
The Mag values freeze for multiple sensors after being initialized without any problem. The sketch follows the initialization sequence given in the example Basic_SPI from the examples directory.
Moreover, freezing of the mag values is not deterministic between different runs (some mags freeze after a few seconds, some after a minute and so on), proving it very hard to detect what is going on. I have tried keeping every sensor steady (i.e. without any motion, so that the SPI connections remain stable), but the problem persists. Also - Accel and Gyro continue to give the data as expected, so the SPI connection between the MCU and IMUs cannot be an issue.
Can you please provide some pointers as to how should I try debugging this behavior of the sensors?

I'm having the same problem. It's usually after a few seconds on my end.
I've tried playing with the SRD, but to no avail.
Did you find a fix for this issue?

Hi @Moosdijk,
Thanks for taking the time to reply. I am still facing the same issue, and I had almost given up on the mag.
Can you please let me know which sensor does the mag work for? My sensors are fairly new (bought them about 3 months ago). Do you mean a newer version of MPU9250 or ICM-20948?

@amoghskulkarni Sure thing! I've also bought three sensors when I started my project. The ones I bought were the cheap ones you can get everywhere. These were the ones I bought.
I'd like to try the ICM-20948 though!

Thanks for the info! I will try to find the sensors from the same manufacturer here in the US.


Alias list_name to dataset in entities sheet

Closes https://github.com/XLSForm/pyxform/issues/652
Why is this the best possible solution? Were any other approaches considered?
The intent is to match the user-facing language of "Entity List". We discussed some alternative column names but decided that list_name has the advantage of being consistent with the choices sheet. The meanings are slightly different but very much related.
What are the regression risks?
This area is well-tested and the change is small so I don't think there are any.
Does this change require updates to documentation? If so, please file an issue here and include the link below.
https://github.com/getodk/docs/pull/1651
Before submitting this PR, please make sure you have:

[x] included test cases for core behavior and edge cases in tests
[x] run nosetests and verified all tests pass
[x] run black pyxform tests to format code
[x] verified that any code or assets from external sources are properly credited in comments

I've targeted a v1.12.x branch off of the current v1.12.1 release so that we can release this immediately. @lindsay-stevens if you have a chance for a quick look, that'd be great since you have the context but I also recognize I'm catching you Friday afternoon! It should be straightforward for someone else to review if that's better. Thanks!


Add tests for pdb-minavailable policy

Related Issue(s)

Description
Adds tests for the pdb-minavailable policy
Checklist

[x] I have read the policy contribution guidelines.
[x] I have added test manifests and resources covering both positive and negative tests that prove this policy works as intended.

Tests failing.

@chipzoller the failures look related to the replace-image-registry tests.

Can you retrigger this as well, please?


fix call executeXmlRpcCall in methods removePlatformFromTestPlan in class TestPlanService

Hi Mr @kinow
In Class TestPlanService have methods name removePlatformFromTestPlan, but in Object Response executeXmlRpcCall, the methods call TestLinkMethods.ADD_PLATFORM_TO_TEST_PLAN should call TestLinkMethods.REMOVE_PLATFORM_FROM_TEST_PLAN.
i found this bug when i doing implement your method removePlatformFromTestPlan but my platform wont remove and always in Assign Platforms in testlink, when i execute the method should my platform in Available Plaforms.
Regards

@poncoe would you like this to be released to Maven now? Or, if you are still testing things, we can wait a few days to see if you find anything else missing/broken, and include in the next release. Let me know what you prefer. Thanks!

Hi Mr @kinow,
Can you wait until July 27? in this time, i currently implement some method in your library for my project, maybe if i found issue, i will create github issue or trying to solving & merging.
If possible, can you create a method to create platform? because I think it would be helpful if there was this method (create Platform). thanks
Regards

Not a problem for me. Take your time. Unfortunately I don't have TestLink installed at the moment (my current job is not using it, and I have limited time to volunteer right now).
If there's a method to create platform in the PHP XMLRPC API, then it would be a matter of copying an existing method and replacing the method name by the correct one, and adjusting the parameters.


[Backport][v1.1.3]Fix the bug that lead to the uninstaller loop in instance manager deletion and recreation

longhorn/longhorn#2919

I just realize that we may need to update instance managers in the upgrade path


Move to log streaming for Linux builds

Fixing #2566 should allow us to stream logs in the builder instead of waiting to capture them all.

Fixed by not streaming anymore on any platform 🙃


capitalise, for consistency

r? @ehuss
(rust-highfive has picked a reviewer for you, use r? to override)

:hourglass: Testing commit f5b21bfe6ed059d63ceab051425287e59595f9de with merge 056313dbfbe196c2a7bffa1f561e050bae0b1694...

:sunny: Test successful - checks-actions
Approved by: Eh2406
Pushing 056313dbfbe196c2a7bffa1f561e050bae0b1694 to master...


feat: Edge Processor

:tada: This PR is included in version 3.24.0 :tada:
The release is available on GitHub release
Your semantic-release bot :package::rocket:


Single::skip(), Stream::skip() methods are added

Hi @markrogoyski,
Single::skip(), Stream::skip() methods are added and tested.

Pull Request Test Coverage Report for Build<PHONE_NUMBER>

9 of 9 (100.0%)  changed or added relevant lines in 2 files are covered.
No unchanged relevant lines lost coverage.
Overall coverage increased (+0.002%) to 99.862%

Totals

Change from base Build<PHONE_NUMBER>:
0.002%

Covered Lines:
722

Relevant Lines:
723

💛  - Coveralls

Hi @Smoren,
Thanks for implementing skip. Looks good to me (LGTM).

Thank you for merging this PR!


[GUI] Send tab -> Subtract fee check box

Win7 64bit - v<IP_ADDRESS>-16671cd
Send tab -> Subtract fee check box need some space to left side.

Tagged, will check later this week.


[KAF-350] Graceful Shutdown for Kafka

Sync up fixes made while implementing the same feature for Confluent
Kafka, see KAF-372.

https://github.com/mesosphere/confluent/pull/52
https://github.com/mesosphere/confluent/pull/53

I have merged master as this contains test flake fixes.


Fixing SonarQube scans for frontend and backend.

Peer reviewed. No frontend and backend code changes. The changes are only for Sonarqube settings and Zap configurations.

 Testing | Sonarqube Update for code coverage|2|


Add support for EGM96 / EGM2008 lookup

Feature
Preamble:
EGM96 / EGM2008 define a geoid, a grid based on Earth's gravitational model that defines "mean sea level" for the globe. This shape differs from the WGS84 ellipsoid, which is a simplified model used by GPS and other systems.
Many domains use height above MSL to reference the terrain elevation and obstacle heights. The FAA, for example, uses MSL in the CIFP, charts and obstacle databases.
Need:
Built-in class / functions that provides EGM lookups, conversions to Lat/Lon/Height and ECEF, and differences from the WGS84 reference height.
References:
Existing work in https://github.com/TerriaJS/terriajs/blob/main/lib/Map/Vector/EarthGravityModel1996.js can be used for reference.
EGM96 Reference data file: https://github.com/jleppert/egm96/blob/master/WW15MGH.DAC

EGM96 and EGM2008 seem similar on the surface, but there's an important difference: the EGM96 data file is ~2MB, while EGM2008 is ~900MB. That means downloading the whole EGM96 data file to the client, loading it, and computing heights right in the browser is easy and reasonably efficient. Doing the same with EGM2008 is basically unworkable. For EGM2008 a more complicated scheme will be needed: some kind of server-backed implementation, or at least a way to download the data in chunks.

@kring thanks for the insight. I have built this feature (1996 only) into a CesiumJS project by making minimal changes to the terriajs implementation. I would like to work toward submitting a PR for this feature.
In your understanding, are we clear on copyright/licensing terms to borrow this code from terriajs?

In your understanding, are we clear on copyright/licensing terms to borrow this code from terriajs?

Oh yeah, absolutely. TerriaJS has the same Apache 2.0 license as CesiumJS.


Create route for easier access to aggregated leaderboard data

There should be a route that returns the list of all the leaderboards the user is a member of, AND it should include basic info about the leaderboard, such as the top coder and the user's rank on it.
This is currently a problem because /users/@me/leaderboards only returns a list of leaderboard names. The client will then have to do another request for each of those leaderboards to /leaderboards/{name}, leading to an n+1 problem.
The new route would simplify client code and also prevent users from hitting rate limits if they are a member of many leaderboards.

This is quite a big problem with the low rate limits, a user can not belong to more than ~19 leaderboards because otherwise there will be 19+few requests when loading the leaderboard page, which will trigger the rate limiting and prevent the user from loading the leaderboards page at all.


AE license required?

In the documentation you say that nexrender does not require licenses for Adobe After Effects on any worker machine. However later in nexrender-worker section you list license/trial as a requirement:

Requirements:
Installed licensed/trial version of Adobe After Effects

Can you please clarify why license/trial is required?

Hello,
That specific part "licensed/trial" means, "either licensed or trial" version.
Meaning, In case you already have a licensed version, you can use it, to render otherwise you can install a trial version of AE, and the CLI renderer will be able to use it without need activate it.
Hope that clears stuff a bit!

Thank you for clarifying, Vladyslav. So, will the expired trial be sufficient or should I have an active one?

Well, for creating the initial project template (inside an After Effects GUI) you would need to have a licensed (or temp trial) version. However, for the actual GUI-less rendering just a trial should work fine without any problems.

Sure, I understand that. But the worker may be on a different machine, not the one where the project was created.

And that is ok; you will just need to install an After Effects there and leave it not activated.
That way it should work fine.

ok, thanks!


Module Incompatibility | Weather Blocker

Hello, just giving you a heads up that your module is incompatible with the module Weather Blocker (https://github.com/theripper93/Weather-Blocker). Not sure what could be causing the conflict as I don't know all the changes that both modules make under the hood. But I thought I would let you and the other author know.
No errors are presented in the console to indicate what the problem may be.

All Weather Blocker compatibility problems should be resolved in 2.0.0.


Lightweight verification library/module

This came up in the context of OPA in slack - they'd like to provide a builtin for verifying signatures, which would ideally depend only on the Go stdlib.  We should figure out a way to provide a lightweight library with NO dependencies that can validate signatures. This would require that the user pre-fetch all the signature information (including any kind of trust bundle) and provides the trust roots to validate against (public keys and certificates).

cc @dekkagaijin @srenatus
Jake - any ideas if this should go here or into sigstore/sigstore? Or do we need a new "verify only" module somewhere? I forget how aggressively go mod will prune transitive deps...

do we need a new "verify only" module somewhere? I forget how aggressively go mod will prune transitive deps...

AFAIK having such a package within this module should be fine.

How can we get involved in it with @Dentrax because we are really really interesting with this topic 🤩

How can we get involved in it with @Dentrax because we are really really interesting with this topic 🤩

Go for it! I'm not sure how much refactoring would be needed, but the idea is just some kind of package that can do as much verification as possible using only the stdlib!

Would be great if it could become a full-fledged light-weight verification binary. We also noticed that cosign has a significant size, especially when used in a container setting.

I am interested in this as well. Has any work been done on how to carve this out? Where should one begin?


fix: remove unnecessary registry.username field

I noticed setting the registry username as an array brought up validation errors.

Removing type solves the error and seems to work for both strings and arrays

thank you!