woost / wust2

Graph-Based Realtime Collaboration System. Woost yourself.

This is the issue-tracker for Woost. Don't hesitate to repeort any issues or ask questions.

• Landing Page: https://woost.space
• App: https://app.woost.space
• Feature-Voting: https://woost.nolt.io

Your Woost Team

wust2's Issues

two maven organization for dependencies

vectory, pharg, derive...

travis deploy

Move CI to github actions

Code linting

• https://scala-clippy.org/ (installed locally)
• https://github.com/wartremover/wartremover
• http://www.scalastyle.org/
• https://github.com/sksamuel/scapegoat
  https://stackoverflow.com/questions/22617713/whats-the-current-state-of-static-analysis-tools-for-scala

Scala Steward + mergify

Delete post strategy

What happens if a post is deleted? Currently it is gone in a sense that you can not see it anymore.
I suggest to display them as read-only with an deleted tag. If a post is deleted due to a merge with another post, a link to the merged post should be presented or the user should get redirected to that post

Private Areas

Some notes:

• When creating a new project, is it a usergroup or a post? Or usergroup == post?
• Model an organisation/project hierarchy with teams?
  • Are usergroups nested? What does nesting mean? - A subset of all members of the parent group?
• Reference foreign public and private projects in own project

Johasen:

• State in ConnectedClient
• fix unstable ConnectedClient test
• Arguments for Router (Regex vs Perspective) Perspective(ChildSelectorUnion[PostId]), CreationContext(Set[GroupId])

Felix:

• Server.emit permission assertion in dev
• Api: getGraph(groupId) -> getGraph(Seq[PostId]) (ChildSelectorUnion)
• UI for changing focused post(s)

asset checksumming

https://github.com/sbt/sbt-digest#sbt-digest

• play templates to generate index.html?

application specific config in application.conf

disable scalajs optimizer for better debugging experience

https://www.scala-js.org/doc/project/building.html

logging

Postgres Statement performance logging

scalajs-bundler

https://scalacenter.github.io/scalajs-bundler/

• d3v4 needs to be published with bundler
• deploy minified
• fast reload workflow

Realtime updates

Create new unconnected Posts

• input field

ScalaJS 1.0

Software Stack / Architecture

• Akka-HTTP + websockets?

  • Autowire + Boopickle
  • Silhouette

• gleiche Datenstruktur von db bis Frontend

  • pharg
  • Renesca vs Postgres+doobie/slick? https://github.com/getquill/quill

-Frontend

• React / https://github.com/ThoughtWorksInc/Binding.scala
• Diode
• D3
• websockets

do not run application inside container as root

• postgres
• db-migration
• wust
• nginx

Hyperedge Link force and UI

database schema migrations

backwards compatibility test for db schema

Log in as new anonymous user by default, merge users on register

Use tsec for password hashing

https://github.com/jmcardon/tsec

Currently we use hasher and jbcrypt: https://github.com/woost/wust2/blob/master/project/Deps.scala#L65

Should we switch to scrypt?

Delete Posts

Posts can contain other Posts

Visualization: Add transitive edges if parent is contained in another parent.
Uncontain ui (delete conn)

Partial Ordering of Posts

Introduce before/after edges?

integration tests for db

set resolver when using ocsp stapling in nginx

no resolver defined to resolve ocsp.int-x3.letsencrypt.org while requesting certificate status, responder: ocsp.int-x3.letsencrypt.org

Paging

• Paging over graph width (defined by connections)
• Paging over graph depth (defined by containments)
• the database needs to know the depth of each post. Store it in post and update continously?

OAuth 2.0

Post Classifications

Solve with containment?

Minor UI issues

• PostMenu only Link is clickable -> make area clickable
• PostMenu / dropMenu Hover

Continous Deployment

• Docker image caching (https://stackoverflow.com/questions/35305492/cache-docker-images-on-travis-ci)
• Publish docker images
• ./start prod ---> use images
• ./start prod ---> do not build docker images
• tests, integration tests, postgres tests
• deploy git push und staging
• rename wust docker image to wust2
• let sbt create release tags. https://github.com/sbt/sbt-git
• disable workbench on travis https://stackoverflow.com/questions/32284670/disable-an-autoplugin-from-the-sbt-command-line

Graph Visualization

• hyperedge link force
• show drop menu
• refresh containment topological sort on update (d3 data join does not respect order of data?) --> d3 seems to keep order, but topological sort is not unique.

Editing Posts

./start psql

Auth

• integrate into protocol (e.g. https://geirsson.com/post/2015/10/autowire-acl/)
• auth framework backend (silhouette?)
• auth form frontend
• separate login in AuthApi, then login with token again reconnecting websocket

Deleting focused posts => KeyNotFoundException

AddPostForm: responseLabel tries to render post which does not exist anymore.

health checks for wust

• nginx should have a health check for its proxied server
• add health check for container in docker-compose file

different postgres roles for migration and application

The current user role in postgres is a super user, which is only needed for the migrations (when changing the schema and creating tables). The application should have a different role with less priviliges.

clean up old images on docker host

Posts can connect to Connection between Posts

• missing ui

Websocket connection gets lost after some time

authentication in localstorage

• boopickle deserialize can fail when the user case class changed
• also we should get the user from the server to be sure to have the current state

Multiple authorship

What about multiple authorship of a post?

Consider you merge/unify two posts, now what happens to the author?

Use Proguard to compress and optimize backend

https://www.guardsquare.com/en/proguard
https://stackoverflow.com/questions/39655207/how-to-obfuscate-fat-scala-jar-with-proguard-and-sbt

quill build with db validation

improve nginx configuration

open connections, worker etc

https://www.nginx.com/blog/tuning-nginx/

Scala 2.13

Posts can respond to other Posts