![\"concurrent-diagram\"](\"/4da086c176314fb8e41d4bf512857493/concurrent-diagram.webp\")
Whenever we talk about asynchronous programming in JavaScript, there is sometimes confusion in how it can be asynchronous if it is single-threaded. To answer this correctly, I think it's a good thing first to understand the difference between concurrency and parallelism, two terms that are commonly brought up with multithreading.
\nConcurrency describes independent parts of a program to run in an arbitrary order without affecting the outcome. A concurrent application can execute multiple tasks over an overlapping period. This means that while we can start new tasks before the previous one is complete, we cannot perform work on each task simultaneously.
\n
You can think of a concurrent execution model as a single chef preparing a meal. Any chef worth their salt can work on multiple dishes (or various parts of a dish) at once. They might chop the vegetables for their stir-fry while the rice is steamed in the rice cooker or leave the vegetables to fry in the pan while cleaning up their workspace. In this scenario, the chef can perform multiple tasks at once; however, at any given time, he is only able to work on a particular unit of work at a given time.
\nYou might point out that the chef can perform other actions in this example scenario while something like the rice is steaming, which is technically work still being done. However, the concurrency in this scenario only applies to the chef's context, who is not actively working on the rice as it is being steamed.
\nSimilarly, the JavaScript Event Loop allows your scripts (the chef) to hand off tasks like HTTP requests and timeouts to the browser Web API (rice cooker), allowing the script to execute other code portions while waiting for a response. Once the Web API task is complete, it is pushed back into the Event Loop call stack. While the Web API acts as a separate thread where it can complete certain tasks outside the main thread's scope, your actual JavaScript code is still executed on a single thread concurrently.
\nParallelism describes the ability for independent parts of a program to be physically executed at the same time. A parallel application can distribute its tasks to independent processors (such as different cores or threads of a CPU) to be executed simultaneously.
\n![\"parallel-diagram\"](\"/673e8d6bccb42949459d15d8adc0dc32/parallel-diagram.webp\")
You can think of a parallel execution model as multiple chefs individually each preparing a meal. These individual chefs may be preparing their dishes in a concurrent manner (like the above) or a sequential one; either way, the result is that rather than producing a single meal, the kitchen has prepared multiple meals over a unit of time.
\nModern browsers allow you to program parallelly by using Web Workers. These spawn separate threads to execute JavaScript independently from the main thread.
\nSo we've established that multiple chefs can get a kitchen to produce multiple dishes in the same amount of time as a single dish from a kitchen with a single chef. Modern hardware almost always has multiple threads, so why isn't all code run in parallel? If it takes one chef 10 minutes to prepare one stir-fry and five chefs 10 minutes to prepare five stir-fries, can five chefs produce one stir-fry in 2 minutes? This is where parallel computation can get difficult.
\nTasks can speed up by distributing the workload onto multiple threads. However, this requires splitting up the workload in a way that can work independently and effectively. Think of how five chefs would prepare a single stir fry together:
\nSimilarly, on the computing side, parallel programming solutions are generally harder to implement and debug. Depending on the task, they can sometimes even perform worse than serially run counterparts due to the various costs of overhead (transferring data between threads, creating and destroying threads, synchronization of work, etc.).
\nTo conclude this post, neither are inherently superior to the other. Both execution models are useful tools for producing efficient and reliable solutions and are used together in many cases. I hope this helps to clear up the differences between the two, or if not, at least provided a mildly entertaining analogy to illustrate each.
\n","frontmatter":{"date":"February 19, 2021","updated_date":null,"description":"Concurrence and parallelism in relation to multithreaded applications are two concepts sometimes used. The distinction between concurrency and parallelism is clarified in this tutorial.","title":"Concurrency vs Parallelism: What's the Difference?","tags":["Concurrency","Parallelism","Multithreading","JavaScript"],"pinned":null,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1.5037593984962405,"src":"/static/c1592330a691b94decfefeb2601f55b9/58556/unsplash.webp","srcSet":"/static/c1592330a691b94decfefeb2601f55b9/61e93/unsplash.webp 200w,\n/static/c1592330a691b94decfefeb2601f55b9/1f5c5/unsplash.webp 400w,\n/static/c1592330a691b94decfefeb2601f55b9/58556/unsplash.webp 800w,\n/static/c1592330a691b94decfefeb2601f55b9/99238/unsplash.webp 1200w","sizes":"(max-width: 800px) 100vw, 800px"}}},"author":{"id":"Nick Chim","github":"nickc95","avatar":null}}}},{"node":{"excerpt":"Today, data breaches have become a significant threat to businesses across the globe. Therefore, considering the long list of resultant…","fields":{"slug":"/identity/best-practices-business-resilience/"},"html":"Today, data breaches have become a significant threat to businesses across the globe. Therefore, considering the long list of resultant consequences to be faced as an aftermath, it is crucial for companies to come out the other side of a breach intact.
\nThe Annual Cybercrime Report 2019 by Cybersecurity Ventures says that these data breaches can cost global businesses around $6 trillion in 2021!
\nAccording to experts, implementing business resilience best practices can help companies overcome issues that come with a data breach.
\nSo, what is business resiliency? Why is it important for companies? How to implement business resiliency practices during a data breach?
\nRead on!
\nDuring a data breach, companies’ confidential data are accessed by attackers without permission. It is not only about sensitive information going out to the wrong hands. These cyber attackers can also hack your database and conduct malicious activities, costing you both money and reputation.
\nAs per Cost of a Data Breach Report 2020 by IBM, the global average total cost of a data breach in 2020 was $3.86M. If this situation continues, by 2021, a business is expected to fall victim to a ransomware attack every 11 seconds.
\nNow let’s consider some of the negative impacts of data breaches that make companies susceptible to financial and credibility loss.
\nFinance and revenue loss
\nIf your company is operating in regions with data protection legislation, you have to pay implied legal fees, regulatory fines, security expenses in case of a data breach. It can cost you a lot if it is a non-compliant company. All these expenses come in addition to the financial damage you have faced because of revenue loss.
\nBrand’s reputation
\nAccording to 71% of CMOs, the most consequential cost of a company’s security data breach incident is the loss of its brand value. This could in turn affect the company’s reliability, thus having to struggle to find the best candidates, investors, and customers.
\nConsumer trust, retention and turnover
\nSeven out of ten consumers believe it is a company’s responsibility to secure their personal information. So, when there is a data breach, and the consumer’s personal data is hacked, they will quickly lose trust in the business. This can result in losing the most loyal customers, even affecting customer turnover. It could worsen if the company is not ready to accept the responsibility for data breaches.
\nThat’s why today, businesses are more focused on building a better security culture. According to Gartner forecasts, global spending on cybersecurity is expected to reach $133.7 billion by 2022.
\nBut, how effectively companies can deal with data breaches, especially in a hyper-connected world?
\nTo handle a data breach incident and the resulting loss of revenue and trust, every company should have an incident response plan with effective threat modeling. That’s where the idea of business reliance comes into the picture.
\nBusiness resilience can be defined as a business’ ability to quickly adapt and respond to impending risks or disruptions. More like a combination of crisis management and business continuity strategies post-disaster.
\nBusiness resilience has become an essential part of the business. Why? Because it saves businesses with its potential for higher recovery.
\nConsider the unforeseen disasters, shifting market demands, and changing regulatory terms in today’s business world. In addition to these, there will be IT disruptions, sudden competitive movements, security threats like data breaches, etc. too. In order to survive all these unpredictable disruptions, businesses should achieve resilience at all means.
\nFor example, take a look at how businesses worldwide were affected by the COVID-19 pandemic. Only those organizations with agile business resilience planning were able to adapt and survive the COVID-19 challenges successfully. By adapting quickly to shifting business priorities, they are ready for the ‘new normal’ in the business battlefield.
\nOn the other side, business resilience best practices will assure that all your business activities comply with the latest industry standards and regulations. This will, in turn, improve your reliability, brand value, and reputation, especially in front of your stakeholders and customers. The resilience plans will also act as a blueprint of all your operations, giving you a head start.
\nThis can even cultivate a resilient organizational culture. It makes the whole business, including employees, quickly adapt to unforeseen challenges whenever the business operations or processes go awry. Or under threat like a data breach.
\n![\"protecting-pii-against-data-breaches\"](\"/50eb35550996efd860854fef81a6360e/protecting-pii-against-data-breaches.webp\")
So, to overcome the after-effects of a data breach in your business, it is important to implement a business resiliency.
\nHow? We are going to see the best practices of implementing business resilience under a data breach occurrence:
\n1. Design a strong business resilience plan
\nDevelop a reliable, self-healing, resilience easy to manage architecture. It should be designed in such a way that the business can access all its components during a data breach.
\nA native high-availability clustering is needed. Because no matter how well you have come up with a crisis management and continuity plan, it will be of no use if it’s not available on demand.
\nSo, it should be able to deploy quickly, with high scalability and flexibility.
\n2. Virtual Desktop Infrastructure (VDI)
\nBusiness resilience usually includes detailed planning and solutions to be implemented whenever an unexpected situation occurs, like a data breach. For this, companies use data centers, backups, and server virtualization. An example of this is the VDI.
\nVDI makes sure that all the data is stored and accessed in the data center, not on the user’s device. This will eliminate the chances of data being leaked in case the device is stolen.
\n3. Ransomware protection
\nAccording to Purplesec 85% of security service providers, ransomware is one of the most common threats for small businesses.
\nSo, for ransomware protection and recovery as a part of business resilience during a data breach, you can make use of the following practices:
\n4. Personnel, training, and expertise
\nIn the event of a data breach, the employees must have the required expertise for successfully executing the business resilience plans on time.
\nTo achieve this, there is a need for cross-training sections to be conducted. Some companies often choose to outsource all their IT operations to third-party service providers or consultants.
\nBut it is also important to have a good plan for survival, in case experts and trained personnel too are affected by the data breach disaster.
\n5. Creating a Disaster Recovery (DR) plan
\nDuring data breaches, businesses should come up with a plan to put the affected critical business systems back online as quickly as possible. This is important to avoid further damages.
\nOne of the best practices is to launch a secondary site as a stand-in for the primary data center.
\nThis Disaster Recovery (DR) site should have the following attributes:
\nWhen a DR site is launched, the networking connectivity must be restored with the aid of IP address redirects or gateways. This way, the users can reconnect without changing their default settings. And it will be easier in the future to redirect them back to the primary data center when it is recovered.
\nA standard business resilience plan in the need of the hour. A recent study shows that the number of data breaches in 2020 almost doubled compared to that in 2019. The average total cost of data breaches in 2020 was $3.86 million. And it is expected to increase in the coming future too.
\nSo, it is important to implement fail-proof business resilience practices in your business to survive unexpected data breaches.
\n![\"LoginRadius](\"/8fce571f703a5970dbb1359a2fe0e51a/book-a-demo-loginradius.webp\")
Git is an important part of daily programming and is commonly used in the software industry. Since you can use a lot of different commands, mastering Git needs time. But some commands are more commonly used. So I'm going to share the most useful Git commands in this post that every developer should know.
\nBut first you need to know the fundamentals of Git to understand this article.
\n| Command | \nDescription | \n
|---|---|
git init | \nInitialize a local Git repository | \n
git clone repo_url | \nClone public repository | \n
git clone ssh://git@github.com/[username]/[repository-name].git | \nClone private repository | \n
git status | \nCheck status | \n
git add [file-name] | \nAdd a file to the staging area | \n
git add -A | \nAdd all new and changed files to the staging area | \n
git commit -m \"[commit message]\" | \nCommit changes | \n
git rm -r [file-name.txt] | \nRemove a file (or folder) | \n
git branch | \nList of branches (the asterisk denotes the current branch) | \n
git branch -a | \nList all branches (local and remote) | \n
git branch [branch name] | \nCreate a new branch | \n
git branch -d [branch name] | \nDelete a branch | \n
git branch -D [branch name] | \nDelete a branch forcefully | \n
git push origin --delete [branch name] | \nDelete a remote branch | \n
git checkout -b [branch name] | \nCreate a new branch and switch to it | \n
git checkout -b [branch name] origin/[branch name] | \nClone a remote branch and switch to it | \n
git branch -m [old branch name] [new branch name] | \nRename a local branch | \n
git checkout [branch name] | \nSwitch to a branch | \n
git checkout - | \nSwitch to the branch last checked out | \n
git checkout -- [file-name.txt] | \nDiscard changes to a file | \n
git merge [branch name] | \nMerge a branch into the active branch | \n
git merge [source branch] [target branch] | \nMerge a branch into a target branch | \n
git stash | \nStash changes in a dirty working directory | \n
git stash clear | \nRemove all stashed entries | \n
git push origin [branch name] | \nPush a branch to your remote repository | \n
git push -u origin [branch name] | \nPush changes to remote repository (and remember the branch) | \n
git push | \nPush changes to remote repository (remembered branch) | \n
git push origin --delete [branch name] | \nDelete a remote branch | \n
git pull | \nUpdate local repository to the newest commit | \n
git pull origin [branch name] | \nPull changes from remote repository | \n
git remote add origin ssh://git@github.com/[username]/[repository-name].git | \nAdd a remote repository | \n
git remote set-url origin ssh://git@github.com/[username]/[repository-name].git | \nSet a repository's origin branch to SSH | \n
git log | \nView changes | \n
git log --summary | \nView changes (detailed) | \n
git log --oneline | \nView changes (briefly) | \n
git diff [source branch] [target branch] | \nPreview changes before merging | \n
git revert commitid | \nRevert commit changes | \n
git config --global user.name \"your_username\" | \nSet globally Username | \n
git config --global user.email \"your_email_address@example.com\" | \nSet globally Email id | \n
git config --global --list | \nGet global config | \n
So these are the most helpful git commands I find in my everyday programming. There are several more things to learn about Git, I will explain them in a separate post.
\n","frontmatter":{"date":"February 17, 2021","updated_date":null,"description":"In this article, I will talk about the Git Commands that you will be using often when you are working with Git.","title":"35+ Git Commands List Every Programmer Should Know","tags":["GIT"],"pinned":null,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1.5037593984962405,"src":"/static/809159647d5b83fd76f6bc5ef35bab91/58556/git.webp","srcSet":"/static/809159647d5b83fd76f6bc5ef35bab91/61e93/git.webp 200w,\n/static/809159647d5b83fd76f6bc5ef35bab91/1f5c5/git.webp 400w,\n/static/809159647d5b83fd76f6bc5ef35bab91/58556/git.webp 800w,\n/static/809159647d5b83fd76f6bc5ef35bab91/99238/git.webp 1200w","sizes":"(max-width: 800px) 100vw, 800px"}}},"author":{"id":"Abhimanyu Singh Rathore","github":"abhir9","avatar":null}}}},{"node":{"excerpt":"Introduction No matter what online platforms or applications you use, you are never fully protected against cyberattacks. Statistics provide…","fields":{"slug":"/identity/what-is-broken-authentication/"},"html":"No matter what online platforms or applications you use, you are never fully protected against cyberattacks.
\nStatistics provide testimony to this fact as the number of data breaches rose by 37% in 2020 compared to 2019, and the trend is only increasing.
\nThe first step to protect your organization against such attacks is to have a comprehensive understanding of the issue.
\nLet us begin by figuring out what is broken authentication.
\nVery simply put, when the hacker gains access into the system admin's account by using the online platform's vulnerabilities, particularly in two areas: credential management and session management, it's referred to as broken authentication.
\nAuthentication protects a consumer's identity by allowing only a verified user to enter into the system. But there are numerous ways through which the hacker impersonates the consumer and enters inside the system.
\nThe weaknesses inherent in the system, as mentioned above, can be divided into two different groups, namely poor credential management and poor session management.
\nBroken Authentication and Session Management is a security vulnerability that occurs when the authentication and session management mechanisms of a web application are flawed or improperly implemented.
\nAuthentication refers to the process of verifying the identity of users, typically through usernames and passwords, while session management involves maintaining and controlling the user's session after authentication.
\nWhen these mechanisms are compromised or misconfigured, attackers can exploit the vulnerabilities to gain unauthorized access to user accounts, impersonate other users, or hijack sessions. This can lead to severe security breaches and expose sensitive user information.
\nThe risks associated with broken authentication are profound and can have detrimental effects on individuals and organizations:
\nWhen attackers exploit broken authentication vulnerabilities, they can gain access to sensitive data such as personal information, financial details, or intellectual property. This unauthorized access can lead to data breaches and privacy violations.
\nOnce inside the system, attackers can manipulate or delete user data, causing disruptions to services, loss of important information, and potential legal ramifications.
\nBy hijacking user sessions or impersonating legitimate users, attackers can carry out fraudulent activities on behalf of the compromised accounts. This could include fraudulent transactions, spreading misinformation, or performing actions that tarnish the reputation of the affected individuals or organizations.
\nIf the compromised account belongs to an administrator or privileged user, attackers can escalate their privileges within the application. This can lead to complete system compromise and greater control over critical functions.
\nThe aftermath of a broken authentication attack can result in financial losses for businesses, especially if customer trust is compromised. Moreover, organizations may face legal consequences for failing to protect user data adequately.
\nPreventing broken authentication requires a multifaceted approach that addresses vulnerabilities at various stages of the authentication and session management processes. Here are some effective strategies:
\nThere are several examples of broken authentication vulnerability that highlight the potential risks. One common example is weak or easily guessable passwords, such as \"123456\" or \"password,\" which can be exploited by attackers.
\nAnother example is the lack of proper session expiration, where user sessions remain active even after a user logs out, allowing an attacker to reuse the session and gain unauthorized access.
\nAdditionally, if an application does not implement measures to prevent brute-force attacks, attackers can repeatedly guess usernames and passwords until they find a valid combination. Inadequate protection against account lockouts, session hijacking, or session fixation are also examples of broken authentication vulnerabilities.
\nAs mentioned earlier, the primary reasons for broken authentication. Let’s understand them one by one.
\nConsumer credentials can be hijacked to gain access to the system. There are various ways that the hacker can steal critical information, such as the following:
\nLet’s assume you like playing online games. You log in to the application and make several interactions with the network.
\nThe application issues a session ID whenever you log in and records all your interactions. It is through this ID that the application communicates with you and responds to all your requests.
\nThe OWASP broken authentication recommendations state that this session ID is equivalent to your original login credentials. If hackers steal your session ID, they can sign in by impersonating your identity. This is known as session hijacking.
\nThe following points list the scenarios that can cause broken authentication.
\nIf a hacker successfully logs in by stealing your credentials using any of the above mentioned broken authentication techniques, they can misuse your privileges and impact your company's sustainability.
\nCybercriminals can have various intentions of hijacking your web application, such as:
\nIn short, hackers can use broken authentication attacks and session hijacking to gain access to the system by forging session data, such as cookies, and stealing login credentials.
\nThus, it would be best if you never compromised with your web applications' security.
\nHere are a few examples of broken authentication.
\nSuppose you run a departmental store and sell groceries. To grow your business rapidly, you implement a CRM system that stores critical customer data, such as name, phone number, username, and password.
\nHackers make their way inside the CRM system and steal all the data. They then use the same credentials — usernames and passwords — to hack into the central bank's database.
\nIn this case, hackers are trying to successfully log in to the central bank's database by hoping that a handful of consumers must be using the same credentials at both places. Such kinds of broken authentication attacks are called credential stuffing.
\nSuppose you go to a cyber cafe and login your Gmail account. After sending the email, you close the browser tab and return home.
\nSometime later, the hacker opens your Gmail account and gains access to your crucial information. It happens because your credentials — username and password — haven't been invalidated adequately during logout.
\nThus, if the application session timeouts aren't set properly, hackers can execute a broken authentication attack.
\n![\"buyer-guide-to-multi-factor-authentication-ebook\"](\"/6189ed241659d7be186ca0c44dd9e974/buyer-guide-to-multi-factor-authentication-ebook.webp\")
Look at the names and their hashes in the following table:
\n| Alice\n | \n4420d1918bbcf7686defdf9560bb5087d20076de5f77b7cb4c3b40bf46ec428b\n | \n
| Bob\n | \n4420d1918bbcf7686defdf9560bb5087d20076de5f77b7cb4c3b40bf46ec428b\n | \n
| Mike\n | \n77b177de23f81d37b5b4495046b227befa4546db63cfe6fe541fc4c3cd216eb9\n | \n
The hash function stores passwords in the form of a hash instead of plain text, which humans can easily read. But if two different users enter the same password, then their hashes will be exactly the same.
\nHackers can perform a dictionary attack and if they crack one password, they can use the same password for gaining access to other accounts that use the same hash.
\nTo prevent this from happening, you must salt the passwords. A salt is a random value that is either appended or prepended to the password and makes it unique. So even if two different users use the same password, their hashes will not be the same.
\nThe following are the ways of preventing broken authentication attacks:
\nThe impact of broken authentication can be severe and far-reaching. When attackers successfully exploit these vulnerabilities, they can gain unauthorized access to user accounts, leading to various consequences.
\nThis may include unauthorized access to sensitive information, such as personal data, financial details, or intellectual property. Attackers can also manipulate or delete user data, impersonate legitimate users, perform fraudulent transactions, or even escalate their privileges within the application.
\nFurthermore, if the compromised account belongs to an administrator or privileged user, the impact can be even more significant, potentially compromising the entire system or network. Broken authentication vulnerabilities can tarnish an organization's reputation, result in financial losses, and expose users to identity theft and other cybercrimes.
\nLoginRadius has been at the forefront of offering a multilevel security web app environment. Here is how LoginRadius applications protect against broken authentication:
\nApart from the steps mentioned in this article, it's essential to train and educate your employees about broken authentication attacks. It would be best if you also employed top-notch cybersecurity measures to protect your company's database from session hijacking, credential stuffing, and other broken authentication attacks.
\n1. What are the solutions for broken authentication?
\nSolutions include implementing Multi-Factor Authentication (MFA), enforcing strong password policies, limiting failed login attempts, securing session management, and regular security audits.
\n2. What is broken access authentication?
\nBroken access authentication refers to vulnerabilities in the authentication process that allow unauthorized access to user accounts, often due to flawed or improperly implemented authentication mechanisms.
\n3. What can prevent authentication failures?
\nPreventative measures include MFA implementation, enforcing strong password policies, limiting failed login attempts, securing session management, and using secure hashing algorithms.
\n4. What is a broken authentication guessable password?
\nIt refers to weak or easily guessed passwords like \"123456\" or \"password,\" which are vulnerable to exploitation by attackers, leading to compromised accounts.
\n5. What are the risks of broken authentication?
\nRisks include unauthorized access to sensitive data, manipulation or deletion of user data, impersonation of legitimate users, escalation of privileges, financial losses, and legal consequences.
\n6. What are the effects of broken authentication attacks?
\nEffects include data breaches, privacy violations, fraudulent activities on compromised accounts, tarnished reputation for individuals or organizations, financial losses, and potential legal ramifications.
\n
One of the leading NoSQL databases, MongoDB is well known for its fast performance, versatile schema, scalability and great capabilities for indexing. Let us look at some context before we get into some details. Full-text search is an essential feature when we talk about finding content on the internet. A google search is the best example for this when we see the content using the phrases or keywords. In this article, we will learn about full-text search capabilities in MongoDB based on text index.
\nBefore we begin, we will create a sample database that will be used during the tutorial.
\nWe will create a database with the name myDB and create a collection with the name books. For this, the statement would be as follows.
\n> use myDB\n> db.createCollection("books")\n>Let's insert some documents by using the following statement.
\n> db.books.insert([\n\t{\n "title": "Eloquent JavaScript, Second Edition",\n "subtitle": "A Modern Introduction to Programming",\n "author": "Marijn Haverbeke",\n "publisher": "No Starch Press",\n "description": "JavaScript lies at the heart of almost every modern web application, from social apps to the newest browser-based games. Though simple for beginners to pick up and play with, JavaScript is a flexible, complex language that you can use to build full-scale applications."\n },\n {\n "title": "Learning JavaScript Design Patterns",\n "subtitle": "A JavaScript and jQuery Developer's Guide",\n "author": "Addy Osmani",\n "publisher": "O'Reilly Media",\n "description": "With Learning JavaScript Design Patterns, you'll learn how to write beautiful, structured, and maintainable JavaScript by applying classical and modern design patterns to the language. If you want to keep your code efficient, more manageable, and up-to-date with the latest best practices, this book is for you."\n },\n {\n "title": "Speaking JavaScript",\n "subtitle": "An In-Depth Guide for Programmers",\n "author": "Axel Rauschmayer",\n "publisher": "O'Reilly Media",\n "description": "Like it or not, JavaScript is everywhere these days, from browser to server to mobile and now you, too, need to learn the language or dive deeper than you have. This concise book guides you into and through JavaScript, written by a veteran programmer who once found himself in the same position."\n },\n {\n "title": "Programming JavaScript Applications",\n "subtitle": "Robust Web Architecture with Node, HTML5, and Modern JS Libraries",\n "author": "Eric Elliott",\n "publisher": "O'Reilly Media",\n "description": "Take advantage of JavaScript's power to build robust web-scale or enterprise applications that are easy to extend and maintain. By applying the design patterns outlined in this practical book, experienced JavaScript developers will learn how to write flexible and resilient code that's easier-yes, easier-to work with as your codebase grows."\n },\n {\n "title": "Understanding ECMAScript 6",\n "subtitle": "The Definitive Guide for JavaScript Developers",\n "author": "Nicholas C. Zakas",\n "publisher": "No Starch Press",\n "description": "ECMAScript 6 represents the biggest update to the core of JavaScript in the history of the language. In Understanding ECMAScript 6, expert developer Nicholas C. Zakas provides a complete guide to the object types, syntax, and other exciting changes that ECMAScript 6 brings to JavaScript."\n }\n])We need to create a text index on the fields to perform the text search. We can create this on single or multiple fields. The following statement will create a text index on a single field.
\n>db.books.createIndex({"description":"text"})We will create a text index on the description and subtitle fields for this tutorial. We can create only one text index per collection in MongoDB. So We will create a compound text index using the following statement.
\n>db.books.createIndex({"subtitle":"text","description":"text"})Now we will try to search documents that have the keywords 'ECMAScript' in the description and subtitle fields. For this, we can use the below statement.
\ndb.books.find({$text: {$search: "ECMAScript"}})Example
\n>db.books.find({$text: {$search: "ECMAScript"}},{ subtitle: 1, description: 1 })\n\t{\n "_id" : ObjectId("602b09cb3cb6144ada1c62fe"),\n "subtitle" : "The Definitive Guide for JavaScript Developers",\n "description" : "ECMAScript 6 represents the biggest update to the core of JavaScript in the history of the language. In Understanding ECMAScript 6, expert developer Nicholas C. Zakas provides a complete guide to the object types, syntax, and other exciting changes that ECMAScript 6 brings to JavaScript."\n\t}\n>You can search for phrases using the text index. By default, text search performs an OR search for all words in the phrase. If you want to search 'modern design patterns', it will search for documents with the keywords either modern, design, or patterns.
\nExample
\n>db.books.find({$text: {$search: "modern design patterns"}},{ subtitle: 1, description: 1 })\n\t{\n "_id" : ObjectId("602b098f3cb6144ada1c2ea1"),\n "subtitle" : "A JavaScript and jQuery Developer's Guide",\n "description" : "With Learning JavaScript Design Patterns, you'll learn how to write beautiful, structured, and maintainable JavaScript by applying classical and modern design patterns to the language. If you want to keep your code efficient, more manageable, and up-to-date with the latest best practices, this book is for you."\n\t},\n\t{\n "_id" : ObjectId("602b09b93cb6144ada1c4bca"),\n "subtitle" : "Robust Web Architecture with Node, HTML5, and Modern JS Libraries",\n "description" : "Take advantage of JavaScript's power to build robust web-scale or enterprise applications that are easy to extend and maintain. By applying the design patterns outlined in this practical book, experienced JavaScript developers will learn how to write flexible and resilient code that's easier-yes, easier-to work with as your code base grows.",\n\t},\n\t{\n "_id" : ObjectId("602b095c3cb6144ada1c1028"),\n "subtitle" : "A Modern Introduction to Programming",\n "description" : "JavaScript lies at the heart of almost every modern web application, from social apps to the newest browser-based games. Though simple for beginners to pick up and play with, JavaScript is a flexible, complex language that you can use to build full-scale applications."\n\t}\n>If you want to search for exact phrases like documents with 'modern design patterns' together, you can do so by specifying double quotes in the search text.
\nExample
\n>db.books.find({$text: {$search: "\\"modern design patterns\\""}},{ subtitle: 1, description: 1 })\n\t{\n "_id" : ObjectId("602b098f3cb6144ada1c2ea1"),\n "subtitle" : "A JavaScript and jQuery Developer's Guide",\n "description" : "With Learning JavaScript Design Patterns, you'll learn how to write beautiful, structured, and maintainable JavaScript by applying classical and modern design patterns to the language. If you want to keep your code efficient, more manageable, and up-to-date with the latest best practices, this book is for you."\n}If you want to exclude the documents containing a particular word, you can use a negation search. For example if you're going to search all documents with the 'JavaScript' but not 'HTML5' or 'ECMAScript', you can search as the below example.
\nExample
\n>db.books.find({$text: {$search: "JavaScript -HTML5 -ECMAScript"}},{ subtitle: 1, description: 1 })\n\t{\n "_id" : ObjectId("602b098f3cb6144ada1c2ea1"),\n "subtitle" : "A JavaScript and jQuery Developer's Guide",\n "description" : "With Learning JavaScript Design Patterns, you'll learn how to write beautiful, structured, and maintainable JavaScript by applying classical and modern design patterns to the language. If you want to keep your code efficient, more manageable, and up-to-date with the latest best practices, this book is for you."\n\t},\n\t{\n "_id" : ObjectId("602b09a83cb6144ada1c4973"),\n "subtitle" : "An In-Depth Guide for Programmers",\n "description" : "Like it or not, JavaScript is everywhere these days, from browser to server to mobile and now you, too, need to learn the language or dive deeper than you have. This concise book guides you into and through JavaScript, written by a veteran programmer who once found himself in the same position."\n\t},\n\t{\n "_id" : ObjectId("602b095c3cb6144ada1c1028"),\n "subtitle" : "A Modern Introduction to Programming",\n "description" : "JavaScript lies at the heart of almost every modern web application, from social apps to the newest browser-based games. Though simple for beginners to pick up and play with, JavaScript is a flexible, complex language that you can use to build full-scale applications."\n\t}The text search provides a score to each document representing the relevancy of the document with the search query. This score can be used to sort all the records returned in the search result. A higher score will indicate a most relevant match.
\nExample
\n>db.books.find({$text: {$search: "JavaScript "}},{score: {$meta: "textScore"}, subtitle: 1, description: 1 }).sort({score:{$meta:"textScore"}})\n\t{\n "_id" : ObjectId("602b098f3cb6144ada1c2ea1"),\n "subtitle" : "A JavaScript and jQuery Developer's Guide",\n "description" : "With Learning JavaScript Design Patterns, you'll learn how to write beautiful, structured, and maintainable JavaScript by applying classical and modern design patterns to the language. If you want to keep your code efficient, more manageable, and up-to-date with the latest best practices, this book is for you.",\n "score" : 1.43269230769231\n\t},\n\t{\n "_id" : ObjectId("602b09cb3cb6144ada1c62fe"),\n "subtitle" : "The Definitive Guide for JavaScript Developers",\n "description" : "ECMAScript 6 represents the biggest update to the core of JavaScript in the history of the language. In Understanding ECMAScript 6, expert developer Nicholas C. Zakas provides a complete guide to the object types, syntax, and other exciting changes that ECMAScript 6 brings to JavaScript.",\n "score" : 1.42672413793103\n\t},\n\t{\n "_id" : ObjectId("602b09a83cb6144ada1c4973"),\n "subtitle" : "An In-Depth Guide for Programmers",\n "description" : "Like it or not, JavaScript is everywhere these days, from browser to server to mobile and now you, too, need to learn the language or dive deeper than you have. This concise book guides you into and through JavaScript, written by a veteran programmer who once found himself in the same position.",\n "score" : 0.818181818181818\n\t},\n\t{\n "_id" : ObjectId("602b095c3cb6144ada1c1028"),\n "subtitle" : "A Modern Introduction to Programming",\n "description" : "JavaScript lies at the heart of almost every modern web application, from social apps to the newest browser-based games. Though simple for beginners to pick up and play with, JavaScript is a flexible, complex language that you can use to build full-scale applications.",\n "score" : 0.801724137931034\n\t},\n\t{\n "_id" : ObjectId("602b09b93cb6144ada1c4bca"),\n "subtitle" : "Robust Web Architecture with Node, HTML5, and Modern JS Libraries",\n "description" : "Take advantage of JavaScript's power to build robust web-scale or enterprise applications that are easy to extend and maintain. By applying the design patterns outlined in this practical book, experienced JavaScript developers will learn how to write flexible and resilient code that's easier-yes, easier-to work with as your codebase grows.",\n "score" : 0.792857142857143\n\t}The $text operator filters out the language-specific stop words, such as a, an, the and in English. The below search will not return any document in the result.
\nExample
\n>db.books.find({$text: {$search: "is"}},{subtitle: 1, description: 1 })\n\tFetched 0 record(s)The $text operator matches on the complete stemmed word. So if some document field contains the word learning or learn, a search on the term learning or learn would result in the same.
\nExample
\n>db.books.find({$text: {$search: " learn"}},{subtitle: 1, description: 1 }) or >db.books.find({$text: {$search: " learning"}},{subtitle: 1, description: 1 })\n\t{\n "_id" : ObjectId("602b098f3cb6144ada1c2ea1"),\n "subtitle" : "A JavaScript and jQuery Developer's Guide",\n "description" : "With Learning JavaScript Design Patterns, you'll learn how to write beautiful, structured, and maintainable JavaScript by applying classical and modern design patterns to the language. If you want to keep your code efficient, more manageable, and up-to-date with the latest best practices, this book is for you."\n\t},\n\t{\n "_id" : ObjectId("602b09a83cb6144ada1c4973"),\n "subtitle" : "An In-Depth Guide for Programmers",\n "description" : "Like it or not, JavaScript is everywhere these days, from browser to server to mobile and now you, too, need to learn the language or dive deeper than you have. This concise book guides you into and through JavaScript, written by a veteran programmer who once found himself in the same position."\n\t},\n\t{\n "_id" : ObjectId("602b09b93cb6144ada1c4bca"),\n "subtitle" : "Robust Web Architecture with Node, HTML5, and Modern JS Libraries",\n "description" : "Take advantage of JavaScript's power to build robust web-scale or enterprise applications that are easy to extend and maintain. By applying the design patterns outlined in this practical book, experienced JavaScript developers will learn how to write flexible and resilient code that's easier-yes, easier-to work with as your codebase grows."\n\t}I hope you learned something new today. Here is an interesting article on Self-Hosted MongoDB. I also invite you to try stuff on your own and share your experience in the comment section. Furthermore, if you face any problems with any of the above definitions, please feel free to ask me in the comments section below.
\n","frontmatter":{"date":"February 16, 2021","updated_date":null,"description":"MongoDB full text search tutorial. In this blog, we will learn how to perform a full-text search in MongoDB using text index.","title":"How to do Full-Text Search in MongoDB","tags":["MongoDB"],"pinned":null,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1.5037593984962405,"src":"/static/f4c86ce656fbbcd1cebd60b0c6606d53/58556/coverImage.webp","srcSet":"/static/f4c86ce656fbbcd1cebd60b0c6606d53/61e93/coverImage.webp 200w,\n/static/f4c86ce656fbbcd1cebd60b0c6606d53/1f5c5/coverImage.webp 400w,\n/static/f4c86ce656fbbcd1cebd60b0c6606d53/58556/coverImage.webp 800w,\n/static/f4c86ce656fbbcd1cebd60b0c6606d53/99238/coverImage.webp 1200w,\n/static/f4c86ce656fbbcd1cebd60b0c6606d53/7c22d/coverImage.webp 1600w,\n/static/f4c86ce656fbbcd1cebd60b0c6606d53/25f09/coverImage.webp 1920w","sizes":"(max-width: 800px) 100vw, 800px"}}},"author":{"id":"Anil Gupta","github":"anilswm","avatar":null}}}},{"node":{"excerpt":"No matter what your application is for, it is a must to have ease of use, frictionless authentication, and guaranteed security (against…","fields":{"slug":"/identity/biometric-authentication-mobile-apps/"},"html":"No matter what your application is for, it is a must to have ease of use, frictionless authentication, and guaranteed security (against fraud protection and password-related attacks). These variables help you to build both a spectacular first impression and long-lasting confidence.
\nWhen using mobile apps, consumers prefer to open it and quickly start using it. It can be a frustrating experience for them if you keep asking for the account password every time they open the app. But then, it is also a business necessity to ensure safe access to the app.
\nSo, how do you offer a great experience and security at the same time?
\nThe LoginRadius Mobile Biometric Authentication can help. The feature is dedicated to mobile apps and allows consumers to use their mobile devices' FaceID and TouchID for authentication.
\nWith Mobile Biometric Authentication, consumers can use their existing FaceID or TouchID for authentication without any additional effort.
\nAlso, consumers' biometric data remains stored on their phone rather than the server, making it even more secure.
\nLet's underline some of the major benefits of Mobile Biometric Authentication.
\n![\"biometric-authentication-mobile-apps-datasheet\"](\"/45c7087f5ea9446e99ad4d928a5b72de/biometric-authentication-mobile-apps-datasheet.webp\")
LoginRadius offers local authentication with Touch ID and Face ID for Android and iOS devices—provided the consumers' mobile devices also support these features.
\nYou can configure both authentication options for your app and later, ask the consumer to choose according to their preference or the option available with their device.
\nThe Mobile Biometric Authentication by LoginRadius is a local authentication concept and consumers' biometric data don't even leave their mobile devices. Hence, as a business, you don't need to worry about storing, processing, and securing your consumer's biometric data.
\n
Identity is evolving, and developers are at the forefront of this transformation. Every day brings a new learning—adapting to new standards and refining approaches to building secure, seamless experiences.
\nWe’re here to support developers on that journey. We know how important simplicity, efficiency, and well-structured documentation are when working with identity and access management solutions. That’s why we’ve redesigned the LoginRadius website—to be faster, more intuitive, and developer-first in every way.
\nThe goal? Having them spend less time searching and more time building.
\nLoginRadius’ vision is to give developers a product that simplifies identity management so they can focus on building, deploying, and scaling their applications. To enhance this experience, we’ve spent the last few months redesigning our interface— making navigation more intuitive and reassuring that essential resources are easily accessible.
\nHere’s a closer look at what’s new and why it’s important:
\n![\"This](\"/f46881583c7518a93bb24e94c32320de/a-developer-friendly-dark-theme.webp\")
Developers spend long hours working in dark-themed IDEs and terminals, so we’ve designed the LoginRadius experience to be developer-friendly and align with that preference.
\nThe new dark mode reduces eye strain, enhances readability, and provides a seamless transition between a coding environment and our platform. Our new design features a clean, modern aesthetic with a consistent color scheme and Barlow typography, ensuring better readability. High-quality graphics and icons are thoughtfully placed to enhance the content without adding visual clutter.
\nSo, whether you’re navigating our API docs or configuring authentication into your system, our improved interface will make those extended development hours more comfortable and efficient.
\n![\"This](\"/e5358b82be414940f3fb146013845933/capabilities.webp\")
We’ve restructured our website to provide a straightforward breakdown of our customer identity and access management platform capabilities, helping you quickly find what you need:
\nThis structured layout ensures you can quickly understand each capability and how it integrates into your identity ecosystem.
\n![\"This](\"/a8c155c2b6faf3d5f4b4de4e2b14d763/developers-menu.webp\")
We’ve been analyzing developer workflows to identify how you access key resources. That’s why we redesigned our navigation with one goal in mind: to reduce clicks and make essential resources readily available.
\nThe new LoginRadius structure puts APIs, SDKs, and integration guides right at the menu bar under the Developers dropdown so you can get started faster. Our Products, Solutions, and Customer Services are also clearly categorized, helping development teams quickly find the right tools and make informed decisions.
\n![\"This](\"/b2f9a964a2da0ea83e2f8596b833bba7/we-support-your-tech-stack.webp\")
Developers now have a clear view of the tech stack available with LoginRadius, designed to support diverse business needs.
\nOur platform offers pre-built SDKs for Node.js, Python, Java, and more, making CIAM integration seamless across popular programming languages and frameworks.
\nCheck out our revamped LoginRadius website and see how the improved experience makes it easier to build, scale, and secure your applications.
\nDo not forget to explore the improved navigation and API documentation, and get started with our free trial today. We’re excited to see what you’ll build with LoginRadius!
\n","frontmatter":{"date":"February 21, 2025","updated_date":null,"description":"LoginRadius’ vision is to give developers a product that simplifies identity management so they can focus on building, deploying, and scaling their applications. To enhance this experience, we’ve redesigned our website interface, making navigation more intuitive and reassuring that essential resources are easily accessible.","title":"Revamped & Ready: Introducing the New Developer-First LoginRadius Website","tags":["Developer tools","API","Identity Management","User Authentication"],"pinned":true,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1.7857142857142858,"src":"/static/80b4e4fbe176a10a327d273504607f32/58556/hero-section.webp","srcSet":"/static/80b4e4fbe176a10a327d273504607f32/61e93/hero-section.webp 200w,\n/static/80b4e4fbe176a10a327d273504607f32/1f5c5/hero-section.webp 400w,\n/static/80b4e4fbe176a10a327d273504607f32/58556/hero-section.webp 800w,\n/static/80b4e4fbe176a10a327d273504607f32/99238/hero-section.webp 1200w,\n/static/80b4e4fbe176a10a327d273504607f32/7c22d/hero-section.webp 1600w,\n/static/80b4e4fbe176a10a327d273504607f32/1258b/hero-section.webp 2732w","sizes":"(max-width: 800px) 100vw, 800px"}}},"author":{"id":"Rakesh Soni","github":"oyesoni","avatar":"rakesh-soni.webp"}}}},"pageContext":{"limit":6,"skip":600,"currentPage":101,"type":"///","numPages":164,"pinned":"ee8a4479-3471-53b1-bf62-d0d8dc3faaeb"}},"staticQueryHashes":["1171199041","1384082988","2100481360","23180105","528864852"]}