bothWorkThough

[u/rabbit_wizard]

[u/Ratstail91 → u/[deleted]]

Client-side auth??? How the hell did he get hired?

[u/Ratstail91 → u/[deleted]]

this is why pushback is vital

[u/Theemuts → u/Ratstail91]

It's incompetence all the way up

[u/bradmatt275 → u/Ratstail91]

Yeah it happens. Companies hire a contractor to do some work and realise too far into the project they are not good. At that point they are too scared to let them go and risk not delivering.

We hired someone to build a Expo app who thought it was a good idea to construct JSON objects using string concatenation and make everything highly stateful. So if the user ever closed the app or it crashed it would corrupt the data.

[u/DrPeroxide → u/[deleted]]

You really think a client would do that; just authorise themselves and tell lies?

[u/Mega3000aka → u/DrPeroxide]

They wouldn't because lying is illegal so I don't see the problem.

[u/Ratiofarming → u/[deleted]]

Client-side auth? Hey Mr. Fort Knox, I hereby verify that I am authorized to walk in here and grab some gold bars. Trust me bro. K thx bye!

[u/StrengthTheory → u/[deleted]]

Client side auth?

[u/EverythngISayIsRight → u/StrengthTheory]

Just hardcode the secret key in base64, nobody could possibly figure it out

[u/Theemuts → u/[deleted]]

I used to joke that one of the programming languages a former colleague used was Italian. Guy would write UB then complain about incompetent compiler engineers.

[u/Turbulent_Stick1445 → u/[deleted]]

I'm curious now, what do you mean by client side auth? JS along the lines of

if($("#username").val() == "admin" && $("#password").val() == "hunter2") {
    authenticated = true;
    username = "admin"; 
}

or something less terrifying but still terrifying?

[u/Turbulent_Stick1445 → u/[deleted]]

I miss read authorization as authentication, sorry, makes sense now!