![](\"/bedb8378ad0bf6203fb7ec3abbee5ed0/Ecommerce-security-1.webp\")
PGP (Pretty Good Privacy) is a cryptographic process used to encrypt and decrypt information. It combines concepts from symmetric and asymmetric key encryption, maintaining some of the best security and usability aspects of both.
\nOne way PGP can be used is to protect the confidentiality of information. Once the information is encrypted, nobody will be able to decrypt it unless they have the right key. In practice, PGP is commonly used in sending and receiving emails, sharing information on the Dark Web, and others. This is because both on and off the Internet, there are ways to intercept information being sent, making encryption using PGP or similar critical.
\nOn a high-level the process between a sender and receiver looks like this:
\nNow, let's go over some examples in Node.js using the openpgp library.
\nWe'll go over some basic examples and show how to encrypt & decrypt large files using Node.js streams.
\nFirst, set up your Node.js project and install openpgp.js:
\nmkdir pgp-tutorial && cd pgp-tutorial && npm init\nnpm i openpgp --saveNote: examples use openpgp v4.10.8
\nWhen generating private and public PGP keys with OpenPGP, you can define which curve to use in Elliptic-curve cryptography. In this example, we use Ed25519 for its performance and small key size. For the full list of curves, you can choose from, refer to OpenPGP.js docs.
\nYou also need to define a passphrase used to decrypt files and the private key. In practice, this should be a strong, randomized secret generated for a single-use.
\n// generate-keys.js\nconst openpgp = require("openpgp");\n\ngenerate();\nasync function generate() {\n const { privateKeyArmored, publicKeyArmored } = await openpgp.generateKey({\n userIds: [{ name: "person", email: "person@somebody.com" }],\n curve: "ed25519",\n passphrase: "qwerty",\n });\n console.log(privateKeyArmored);\n console.log(publicKeyArmored);\n}Running the above gives us our private key:
\n-----BEGIN PGP PRIVATE KEY BLOCK-----\nVersion: OpenPGP.js v4.10.8\nComment: https://openpgpjs.org\n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\nAQCfb3lij9JGlIMNDQgceeougl+Lw4Gb0kQCnsNQRggTDw==\n=yzT4\n-----END PGP PRIVATE KEY BLOCK-----And the public key:
\n-----BEGIN PGP PUBLIC KEY BLOCK-----\nVersion: OpenPGP.js v4.10.8\nComment: https://openpgpjs.org\n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\nCBMP\n=C6S6\n-----END PGP PUBLIC KEY BLOCK-----Now we can start encrypting information.
\nCreate a text file:
\necho 'This file contains secret information' > secrets.txtHere, we act as the sender who received a public key from the intended recipient. We use their public key to encrypt the confidential information:
\n// encrypt-file.js\nconst openpgp = require("openpgp");\nconst fs = require("fs");\n\nconst publicKeyArmored = <PUBLIC KEY GIVEN BY RECIPIENT>\n\nencrypt();\nasync function encrypt() {\n const plainData = fs.readFileSync("secrets.txt");\n const encrypted = await openpgp.encrypt({\n message: openpgp.message.fromText(plainData),\n publicKeys: (await openpgp.key.readArmored(publicKeyArmored)).keys,\n });\n\n fs.writeFileSync("encrypted-secrets.txt", encrypted.data);\n}In the newly created encrypted-secrets.txt file, we have the contents encrypted like so:
-----BEGIN PGP MESSAGE-----\nVersion: OpenPGP.js v4.10.8\nComment: https://openpgpjs.org\n\nwV4DUsPKVnc3UHMSAQdAey4TJiEOrZQIrx6q2zBLgmPkbnhPMt1WR+jCWX5x\nGn8wEim8W4OhDVMwfhtgVIClBCGPhvdeZ1zvVUAJGDdl8+S+DUynKhPNcN8m\nKb9TRGYs0sAlAaXcTChBHSS5kDHV/8Hgjcn0OIs6v2mbCkz/bHs/shwf8WMI\nov711iEkgcXnXIX+ZDGyDFnAKftoygzAf0aZy82g7ejAD9SX13wNmO6TK8Gw\nwr9Xj8F6XBV0yHvdsm2uzRY9W03tTSqAf0anEs+ZWyVR/ha9ddnZJPFKtUbC\nBEF4AMavsIN0CcqpA4q69I3E6GEtkAzgBWfJOOO8mQsNQ1vJWcJocinryBE6\nKbhznoe+R69qmUaJXPpe5scF6tfCYuQtPz4uhOljT+OUP6qss5Nz4zBs4JLq\nnUlyynLLSSgdVr4Hvg==\n=5tyF\n-----END PGP MESSAGE-----Now, as the sender, we can send the encrypted file to the recipient.
\nHere, we act as the reciever. To decrypt the encrypted-secrets.txt file, we use our private key and passphrase:
// decrypt-file.js\nconst openpgp = require("openpgp");\nconst fs = require("fs");\n\nconst privateKeyArmored = <PRIVATE KEY>\nconst passphrase = <PASS PHRASE>;\n\ndecrypt();\nasync function decrypt() {\n const privateKey = (await openpgp.key.readArmored([privateKeyArmored])).keys[0];\n await privateKey.decrypt(passphrase);\n\n const encryptedData = fs.readFileSync("encrypted-secrets.txt");\n const decrypted = await openpgp.decrypt({\n message: await openpgp.message.readArmored(encryptedData),\n privateKeys: [privateKey],\n });\n\n console.log(decrypted.data);\n}Which logs the decrypted file contents:
\nThis file contains secret information.If you plan on encrypting or decrypting large files, you won't be able to fit the entire file contents in memory. In this case, you can use Node.js streams.
\nHere, we encrypt a large file called dataset-1mill.json using streams:
encrypt();\nasync function encrypt() {\n const encrypted = await openpgp.encrypt({\n message: openpgp.message.fromText(fs.createReadStream("dataset-1mill.json")),\n publicKeys: (await openpgp.key.readArmored(publicKeyArmored)).keys,\n });\n\n let readStream = encrypted.data;\n let writeStream = fs.createWriteStream("encrypted-dataset.txt", { flags: "a" });\n readStream.pipe(writeStream);\n readStream.on("end", () => console.log("done!"));\n}And then, we decrypt the newly created encrypted-dataset.txt using streams:
openpgp.config.allow_unauthenticated_stream = true;\n\ndecrypt();\nasync function decrypt() {\n const privateKey = (await openpgp.key.readArmored([privateKeyArmored])).keys[0];\n await privateKey.decrypt(passphrase);\n\n const decrypted = await openpgp.decrypt({\n message: await openpgp.message.readArmored(fs.createReadStream("encrypted-dataset.txt")),\n privateKeys: [privateKey],\n });\n\n let readStream = decrypted.data;\n let writeStream = fs.createWriteStream("decrypted-dataset.json", { flags: "a" });\n readStream.pipe(writeStream);\n readStream.on("end", () => console.log("done!"));\n}Now, decrypted-dataset.json will have the same contents as our original dataset-1mill.json file.
Python is a general-purpose programming language and has overtaken Java in popularity according to a recent Stackoverflow survey.
\nPeople who have never programmed before are tempted to try due to the simplicity to learn and use it. Well, let's get down to business.
\nBefore we get started, there are a few things you should know about python:
\nWe are assuming that you have already installed python. If you do not, please click here.
\nTo write your first Python code, open your text editor and type:
\nprint("Hello world, this is my first python code")Save the file as helloworld.py and put it into the python interpreter to be executed.\nYou also can run your code on the command line:
C:\\Users\\Your Name>python helloworld.pyIf everything went well, you should see something like this:
\n> Hello world, this is my first python codeYou can also use the print function to show integers, variables, lists, etc. Try it!
\n#show the sum of two integers\nnumber1 = 5\nnumber2 = 7\nprint(number1+number2)#dividing two decimals\nnumber1 = float(12.1)\nnumber2 = float(4)#concatenating strings\nname = "Python"\nphrase = str("I hate ")\nprint("I love ", name)\nprint(phrase+name)Python has the following data types built-in by default, in these categories:
\nstr (string)int (integer), float (decimal), complexlist, tuple, rangedictset, frozensetboolbytes, bytearray, memoryview\n\nNote: Variables in Python are interpreted as integers by default. Is a good practice to declare them as another type explicitly (if they aren't integers). You can see the kind of a variable using the function
\ntype().
Operators are used to performing operations on variables and values.\nThe main groups are:
\nArithmetic operators are used with numeric values to perform common mathematical operations.
\nx + yx - yx * yx / yx % y\tx ** y\tx // yComparison operators are used to compare two values.
\nx == yx != yx > yx < y\tx >= yx <= yLogical operators are used to combine conditional statements.
\nx < 2 and x < 4x < 10 or x < 9not(x < 2 and x < 4)Look to the code below:
\nage = 18\nif (age<21):\n print("The student is underage!")\nelif (age==21):\n print("The student is 21!")\nelse:\n print("The student isn't underage!")In programming, we often have to choose what to do depending on the situation. It is essential to know how to use conditional arguments like ifand else.\nThe code above print a different message according to a condition.
Try to write a code that asks for two test scores. If the average is less than 7, the user should see \"I'm sorry, you didn't do well on the tests\". If the average is exactly 7, the user should see \"You did it!\". And if it is greater than 7, the user should see \"Congratulations!! You're a great student.\".
\n\n\nNote: to request a response from the user, you need to use the
\ninput()function. For example:
name = str(input("What's your name?"))\nage = int(input("How old are you? "))\nprint("I'm %s and I'm %d"% (name, age))Python has two primitive loop commands: while and for.
With the while loop, we can execute a set of statements as long as a condition is true.
\ncount = 0\nwhile count < 10:\n print(count)\n count += 1 #this line is the same as count = count+1The code above will print count as long as count is less than 10.
\nA for loop is used for iterating over a sequence. Using it, we can execute a set of statements, once for each item in a list, tuple, set, string, etc. For example:
\n#loop through a string\nfor x in "banana":\n print(x)#loop through a list of fruits\nfruits = ["apple", "banana", "melon"]\nfor x in fruits:\n print("I like", x)Did you understand why python became so popular? In a few minutes, you were able to learn the main concepts of this fantastic language.
\nPlease comment and share this article!
\n","frontmatter":{"date":"November 06, 2020","updated_date":null,"description":"Learn the basics of Python programming lanuage (For Beginners)","title":"Python basics in minutes","tags":["Python"],"pinned":null,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1.5037593984962405,"src":"/static/e65362be2b3196aeea5b79ea97dab3a6/58556/python.webp","srcSet":"/static/e65362be2b3196aeea5b79ea97dab3a6/61e93/python.webp 200w,\n/static/e65362be2b3196aeea5b79ea97dab3a6/1f5c5/python.webp 400w,\n/static/e65362be2b3196aeea5b79ea97dab3a6/58556/python.webp 800w,\n/static/e65362be2b3196aeea5b79ea97dab3a6/99238/python.webp 1200w","sizes":"(max-width: 800px) 100vw, 800px"}}},"author":{"id":"Sara Lins","github":"saranicoly","avatar":null}}}},{"node":{"excerpt":"E-commerce security is a set of protocols that ensures safe transactions through the internet. In digital security, significant data…","fields":{"slug":"/identity/ecommerce-security/"},"html":"E-commerce security is a set of protocols that ensures safe transactions through the internet. In digital security, significant data breaches have profoundly undermined trust. Consumers are comfortable making purchases through common networks. However, they require a little more convincing when it comes to sharing their credit card data with unfamiliar companies.
\nBy 2021, over 2.14 billion people worldwide are expected to buy goods and services online. Increased online buying means retail data breaches will also be on the rise as point-of-sale (POS) systems, e-commerce sites and other store servers are major targets for hackers.
\nThe biggest long-term consequence of a data breach is the loss of consumer trust which will have a direct effect on sales and destroy the retailers’ credibility.
\nData breach refers to a security incident in which personal information is publicly exposed or accessed without authorization.
\nCybercrime Magazine predicts that retail will be one of the top 10 most attacked industries for 2019–2022.
\nA few recent data breaches include:
\nThe above statistics have serious implications for online retailers, mainly when trust and consumer confidence in your brand is the only way to ensure success.
\nIt is very difficult to find the right ecommerce platforms for online business. Factors like popularity, overall ranking, features, consumer service, pricing, and ease of use play an important role in selecting the best e-commerce platforms.
\nBased on these factors a few e-commerce platforms are mentioned below:
\nShopify is one of the best e-commerce sites and caters to businesses of all sizes. One of the most crucial reasons for their success is its flexibility. There are more than 2,400 apps in the Shopify App Store. It includes a built-in CMS, multiple themes for your site, a third-party marketplace and capability for a blog for your online store. Apart from the standard Shopify, Shopify Lite is for those with an existing website that needs a platform to take payments.
\nBigCommerce, as a leading open SaaS solution provides merchants sophisticated enterprise-grade functionality, customization, and performance with simplicity and ease-of-use. It has two offerings: BigCommerce Essentials (a DIY SaaS platform) and BigCommerce Enterprise (a customized experience for larger consumers). More than 800 apps in the BigCommerce app store allow you to add numerous additional capabilities to your store. Its multi-currency features allow merchants to set prices in multiple currencies and also settle in more than one currency.
\nMagento is best for small-to-medium businesses that have already established demand, as well as the time, manpower and skill to build their own site. The platform is very powerful and has a library of over 5,000 extensions. Being open source, it targets people with professional web development experience. Magneto exists in two versions: Magento Open Source and Magento Commerce.
\nWix.com is a cloud-based website builder that allows users to create online stores through drag-and-drop tools. It has an extensive range of templates and designs that make it easy to build a compelling and functional website. Its website builder and ecommerce component is very user-friendly. It also provides a large selection of templates to fit various business needs. Wix.com’s ecommerce functionality has most of what a business would need, but doesn’t scale as well as dedicated platforms like Shopify or Magento.
\nWooCommerce is a free, open-source WordPress shopping cart plugin owned and developed by WordPress. It is suitable for small businesses that operate on a tight budget but still want a robust online store. However, you will have to separately purchase hosting, a domain name, and an SSL certificate, all of which are catered for by many of the stand-alone e-commerce platforms. WooCommerce allows unlimited products and product variants, including digital products.
\nAppy Pie's website builder tool is a versatile platform for creating websites and mobile apps without any coding skills. It offers a user-friendly interface with drag-and-drop functionality, making it easy for beginners to design professional-looking websites. The tool provides a wide range of customizable templates catering to different industries and purposes, from business websites to portfolios and online stores.
\n
Ecommerce security for e-commerce is a must-have and consumers need to be constantly reassured about the safety measures that have been taken to mitigate a security threat. Features which an e-commerce security needs to adapt are:
\nBoth invisible and visible security help build trusting consumer relationships.
\nCybersecurity is a crucial feature which needs to be implemented by the e-commerce industry. Without proper security practices put into practice online retailers will put themselves and their consumers at high risk for data breach.
\nSome of the types of threats faced by e-commerce are mentioned below:
\nA distributed denial-of-service (DDoS) attack occurs when multiple machines are operating together to attack the e-commerce site and server. They are flooded with malicious queries that stop the site from working properly making the website inoperable. These attacks are disruptive, costly and affect overall sales.
\nSQL injections are cyber-attacks used to manipulate backend databases and access information that was not intended to be displayed. They can inject rogue code into the database to data as well as delete it.
\nCross site scripting (XSS) is a type of attack in which malicious scripts are injected into the websites and web applications for the purpose of running on the end user's device.
\nCustomer journey hijacking (CJH) is a customer-side phenomenon whereby unauthorized advertisements are injected into consumers’ browsers. The injected advertisements can include product ads, pop-ups, banners and in-text redirects.
\nCredit card fraud is the unauthorized use of a credit or debit card to make a purchase. The card numbers can be stolen from unsecured websites or can be obtained in an identity theft scheme.
\nBad bots are designed to perform a variety of malicious jobs. They are capable of stealing content from the website, such as product reviews, product pricing, catalogs and so on which they publish on some other site. This affects the search engine ranking of the retailers' website. Bad bots are able to make multiple page visits within a very short span of time thus straining Web servers, which makes the site slow for genuine users.
\n![\"Datasheet-How-Retail-Consumer-Goods-Companies-Use-the-LoginRadius\"](\"/c95f0155d52f8dea65efe90f3ec7c41a/DS-How-Retail-Consumer-Goods-Companies.webp\")
SSL is the de facto standard for securing online transactions and essential to establish secure connectivity between the end-user systems and your e-commerce website. With SSL certifications in place, one can move from HTTP to HTTPS, which serves as a trust signal and prerequisite for consumers to provide their personal details and credit card information.
\nPayment Card Industry Data Security Standard (PCI DSS or PCI) is an industry standard that ensures credit card information collected online is being transmitted and stored in a secure manner. E-commerce websites need to maintain PCI compliance.
\nIn the retail industry, registering or logging in without a password calls for consumer retention and loyalty. By enabling the one-touch login feature, consumers can log in with a magic link or OTP sent to their mobile number or email id.
\nProminently displaying payment trust signals and logos on payment pages shows the consumer the security measures taken by the e-commerce website. Consumer privacy is critical in e-commerce. E-commerce sites should only collect data that is useful for the purposes of fulfilling the transaction.
\nIn order to risk fraudulent transactions, e-commerce websites need to verify card and address details of consumers. Usage of unique tracking numbers for every transaction helps to combat chargeback fraud. Geo-targeting can also help eliminate fraudulent transactions.
\nBy implementing multi-factor authentication (MFA), retailers would be able to ensure that digital consumers can be authenticated. This method requires the consumer to provide two or more verification factors to gain access to the online account.
\n![](\"/5573ae87df2ff632af6406f4db2f4166/Ecommerce-security-2.webp\")
LoginRadius is a customer identity and access management tool that offers a seamless and secure way to access customer information – in your case, shoppers’ data.
\nThe LoginRadius identity solution provides a centralized, available, and secure identification and management of customers’ data to retailers.
\nA few of LoginRadius solutions are mentioned below:
\nWith LoginRadius, you can get 360-degree customer profiling, with 100% customer consent, across all touch points. This allows you to personalize marketing and loyalty programs that engage your audience.
\nConsumers want to shop with e-commerce retailers whom they can trust. When they enter their personal information, like credit card numbers or other banking details, they expect it to be well protected. By implementing proper e-commerce security safeguards, you can protect your business and consumers from online threats.
\n![](\"/8fce571f703a5970dbb1359a2fe0e51a/book-a-demo-loginradius.webp\")
Representational State Transfer in short-form as REST defines a set of constraints for creating Web Services.\nRest API is the most-used web service technology nowadays, and it's an almost meaningless description. A REST API is a way to communicate for two computer systems over HTTP, which is similar to web browsers and servers.
\nBDD stands for Behavior Driven Development (BDD). Nowadays, many Organizations, to get a better advantage of testing, are taking a step forward.
\nA cucumber is an approach that supports BDD. It allows you to write tests that anyone can understand, irrespective of their technical knowledge. In BDD, users (business analysts, product owners, developers, etc..). We need to first write scenarios or acceptance tests that describe the system's behavior from the customer's point of view for review and sign-off by the product owners before developers start actual development.
\nhttp://www.oracle.com/technetwork/java/javase/downloads/index.html Download JDK from the above link and install it\nSet the Environment Variable on System Properties
\nRight Click on My PC -> Properties -> Advanced System Settings -> Environment Variables -> Create New -> provide path of JDKSteps to Install Maven
\nCreate a Maven Project. Use below navigation.
\nOpen Eclipse -> File -> New -> Maven Project\n
Provide Group Id and Artifact Id and click on finish.
\nGroup Id: This element indicates the organization's unique identifier or group that created the project. The groupId is one of the key identifiers of a project and is typically based on your organization's fully qualified domain name. For example, com.loginradius is the designated groupId for all Maven plugins.
Artifact Id: it points to the unique base name of the primary artifact generated by this project. The main or primary artifact for a project is typically a JAR file. Secondary artifacts like source bundles also use the artifactId as part of their final name.
\nOpen pom.xml file to add necessary dependencies
\n<dependency>\n\t<groupId>io.cucumber</groupId>\n\t<artifactId>cucumber-java</artifactId>\n\t<version>6.6.0</version>\n</dependency>\n<dependency>\n\t<groupId>io.cucumber</groupId>\n\t<artifactId>cucumber-testng</artifactId>\n\t<version>6.6.0</version>\n</dependency>\n<dependency>\n\t<groupId>io.rest-assured</groupId>\n\t<artifactId>rest-assured</artifactId>\n\t<version>4.3.0</version>\n\t<scope>test</scope>\n</dependency>\n<dependency>\n\t<groupId>org.testng</groupId>\n\t<artifactId>testng</artifactId>\n\t<version>7.1.0</version>\n\t<scope>test</scope>\n</dependency>Now we need three Important files.
\nFeature File: It's a entry point to the cucumber. We use Gherkins to write the feature file. This is the file where you will describe your descriptive language(Gherkin uses simple English). A feature file can contains a Scenario or List of Scenario. A sample Feature file is below
\nFeature: Login Functionality\n@validLogin\nScenario: User Should Login With Valid Credentials \n Given Post Login API\n When Provide Valid Credential\n Then Status_code equals 200 \n And response contains IsLogin equals "true"\n@invalidLogin \nScenario Outline: Email and Password Validation in Login API \n Given Post Login API\n When Provide different combinations to "<email>""<password>"\n Then Status_code equals <statuscode> \n And response contains message equals "<message>"\n Examples:\n |email \t\t|password | statuscode | message\n | \t\t| | 401 | Required email and password\n | abc\t \t| | 401 | Email format is incorrect\n | abc@mail7.io \t|\t | 401 | Required password\n | abc@mail7.io \t| password | 401 | Email and Password combination IncorrectSave the above code as login.feature
\nStepDefinition:\nNow you have your feature file ready with test scenarios defined. However, our job is not done yet. Cucumber doesn't know when should execute which part of code. So StepDefinition acts as an intermediate to your runner and feature file. It stores the mapping between each step of the scenario in the Feature file. So when you run the scenario, it will scan the stepDefination file to check matched glue.
\nHow to write step definition:\nWe have a chrome extension(Tidy Gherkin) to convert your feature into a step definition.
\nCopy your scenario from the feature file and paste it in Tidy Gherkin and click on Java Steps; copy the Java Steps.\nCreate a new file name a StepDefinition.java and paste the Java Steps
package com.loginradius.login\nimport cucumber.api.java.en.Given;\nimport cucumber.api.java.en.When;\nimport cucumber.api.java.en.Then;\nimport cucumber.api.java.en.And;\nimport cucumber.api.junit.Cucumber;\nimport org.junit.runner.RunWith;\nimport static io.restassured.RestAssured.given;\nimport static org.testng.Assert.assertTrue;\nimport io.restassured.http.ContentType;\nimport io.restassured.response.Response;\nimport io.restassured.specification.RequestSpecification;\nimport io.restassured.RestAssured;\n\npublic class StepDefinition {\n\tprivate static final String BASE_URL = "https://www.loginradius.com";\n\tString email = "abcxyz@mail7.io;\n\tString password = "password";\n\tRequestSpecification request;\n\tprivate static Response response;\n\tprivate static String jsonString;\n\n @Given("Post Login API")\n public void post_login_api() {\n\t RestAssured.baseURI = BASE_URL;\n\t\trequest = RestAssured.given();\n\t\trequest.header("Content-Type", "application/json"); \n }\n \n @When("Provide Valid Credential")\n public void provide_valid_credential() {\n response = request.body("{ \\"userName\\":\\"" + email + "\\", \\"password\\":\\"" + password + "\\"}")\n\t\t\t\t\t\t .post("/user/login");\t\n }\n\n @Then("Status_code equals {int}")\n public void statuscode_equals_(int agr) {\n\t Assert.assertEquals(arg, response.getStatusCode());\n }\n\t\n\t@And("response contains IsPosted equals {string}")\n public void response_contains_IsPosted_equals_(String message) {\n\t Assert.assertEquals(message, getJsonPath(response, "IsPosted"));\n }\t\n\n @And("response contains message equals {string}")\n public void response_contains_equals_(String message) {\n\t Assert.assertEquals(message, getJsonPath(response, "message"));\n }\n \n\t@When("Provide different combinations to {string}, {string}")\n public void provide_different_combinations_to_somethingsomething(String email, String password){\n\t response = request.body("{ \\"userName\\":\\"" + email + "\\", \\"password\\":\\"" + password + "\\"}") .post("/user/login");\n }\n\n\tpublic String getJsonPath(Response response, String key) {\n\t\tString resp = response.asString();\n\t\tJsonPath js = new JsonPath(resp);\n\t\treturn js.get(key).toString();\n\t}\n\t\n}Now we have Our Feature file and StepDefinition Ready, we need a runner file to run our Test Scenario's
\nRunner File:\nA runner will help us to run the feature file and acts as an interlink between the feature file and StepDefinition Class\nBelow is the code which will help you to run the tests
\npackage runner;\nimport io.cucumber.testng.CucumberOptions;\n\n@CucumberOptions(\n\t\tfeatures= {"feature_files/login.feature"},\n glue= {"step_definations/StepDefinitation.java"},\n tags= "@validLogin", // based on tags scenarios will run\n monochrome=true, dryRun=false,\n\t\t)\t\npublic class TestRunner {\n\n}Now We have Feature, StepDefinition, and runner files ready, We can run the runner file to see the results.
\nCucumber is very useful in understanding the overall testing process without having coding knowledge. Since it uses simple English to write the feature file and makes developer, QA and other stakeholders on same page before starting the actual development.
\n","frontmatter":{"date":"November 05, 2020","updated_date":null,"description":"This article is about basic overview of how to automate Rest API using Cucumber and JAVA.","title":"Automating Rest API's using Cucumber and Java","tags":["Automation","Cucumber","Rest API","Java"],"pinned":null,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1.5037593984962405,"src":"/static/1775ed5790237a2d1ac5fbda108bc357/58556/cucumber_rest_assured.webp","srcSet":"/static/1775ed5790237a2d1ac5fbda108bc357/61e93/cucumber_rest_assured.webp 200w,\n/static/1775ed5790237a2d1ac5fbda108bc357/1f5c5/cucumber_rest_assured.webp 400w,\n/static/1775ed5790237a2d1ac5fbda108bc357/58556/cucumber_rest_assured.webp 800w,\n/static/1775ed5790237a2d1ac5fbda108bc357/99238/cucumber_rest_assured.webp 1200w","sizes":"(max-width: 800px) 100vw, 800px"}}},"author":{"id":"Surendranath Reddy Birudala","github":"reddysuren","avatar":null}}}},{"node":{"excerpt":"Introduction to Arduino and its usage Arduino is an open-source community that works on both Hardware and software development. We can say…","fields":{"slug":"/engineering/bluetooth-controlled-arduino-car-miniature/"},"html":"Arduino is an open-source community that works on both Hardware and software development. We can say that both the hardware and software help build the new segment automated devices like e.g., 3D printer, IOT based projects, and much more.
\nThe Arduino software is used to build the code for every project made using any Arduino boards; it mostly uses the C/C++ language for its coding. Once the code is ready, we have to just compile and upload it on the board to make our project work. There are many types of Arduino boards like Arduino Uno, Arduino Nano, Arduino USB, etc. In this project, we are going to use the Arduino UNO board (Atmega 328p).
\nBluetooth HC-05 is a Bluetooth module that is mostly used in the Bluetooth based project. It is easy to operate and can be easily configured with the Arduino.
\nIt has two operating modes: Command mode and Data mode, as we can change these modes by just pressing the push button on the Bluetooth module.\nIt has Six terminals. Two terminal are Vcc and GROUND for power purpose. The other two are TXD and RXD, the transmitter and receiver; respectively, these are the terminals that send and receive signals from the Arduino board to control the device. The other two terminals are State and Key, which tells the state of the module that it is in command mode or data mode.
\nThis is an IC made into a Module with a HEAT SINK embedded into it, which helps release heat whenever the L298D IC is heated. Now, this module is used to control the motors connected for the locomotion of the car; these motors work by the command prompted by the Arduino to move or rotate in a specific direction. It can control Four Gear motors at maximum; also, the speed of the motors can be handled by this IC.
\nHere, I want to tell one important point that, The code that will be given should be uploaded before connection of the pins; else you will face an error in uploading the code, so, just first copy the code provided below and pasted in the Arduino software and upload it to the board before the pin connections.
\n\n\nSoftware details: Arduino: 1.8.9 (Windows Store 1.8.21.0) (Windows 10), Board: \"Arduino/Genuino Uno \"
\n
\n\nThe application used for Controlling the car is
\nArduino Car, which can be found on Playstore.
char t;\n \nvoid setup() {\npinMode(13,OUTPUT); //left motors forward\npinMode(12,OUTPUT); //left motors reverse\npinMode(11,OUTPUT); //right motors forward\npinMode(10,OUTPUT); //right motors reverse\npinMode(9,OUTPUT); //Led\nSerial.begin(9600);\n \n}\n \nvoid loop() {\nif(Serial.available()){\n t = Serial.read();\n Serial.println(t);\n}\n \nif(t == 'F'){ //move forward(all motors rotate in forward direction)\n digitalWrite(13,HIGH);\n digitalWrite(11,HIGH);\n}\n \nelse if(t == 'G'){ //move reverse (all motors rotate in reverse direction)\n digitalWrite(12,HIGH);\n digitalWrite(10,HIGH);\n}\n \nelse if(t == 'R'){ //turn right (left side motors rotate in forward direction, right side motors doesn't rotate)\n digitalWrite(11,HIGH);\n}\n \nelse if(t == 'L'){ //turn left (right side motors rotate in forward direction, left side motors doesn't rotate)\n digitalWrite(13,HIGH);\n}\n\nelse if(t == 'M'){ //turn led on or off)\n digitalWrite(9,HIGH);\n}\nelse if(t == 'm'){\n digitalWrite(9,LOW);\n}\n \nelse if(t == 'S'){ //STOP (all motors stop)\n digitalWrite(13,LOW);\n digitalWrite(12,LOW);\n digitalWrite(11,LOW);\n digitalWrite(10,LOW);\n}\nelse if(t == 'Q'){\n digitalWrite(13,HIGH);\n delay(2000);\n digitalWrite(13,HIGH);\n digitalWrite(11,HIGH);\n delay(2000) ;\n digitalWrite(13,LOW);\n digitalWrite(11,LOW);\n}\n else if(t == 'E'){\n digitalWrite(11,HIGH);\n delay(2000);\n digitalWrite(13,HIGH);\n digitalWrite(11,HIGH);\n delay(2000); \n digitalWrite(13,LOW);\n digitalWrite(11,LOW);\n}\n else if(t == 'Z'){\n digitalWrite(13,HIGH);\n delay(2000);\n digitalWrite(12,HIGH);\n digitalWrite(10,HIGH);\n delay(2000) ;\n digitalWrite(12,LOW);\n digitalWrite(10,LOW);\n digitalWrite(13,LOW);\n}\n else if(t == 'C'){\n digitalWrite(11,HIGH);\n delay(2000);\n digitalWrite(12,HIGH);\n digitalWrite(10,HIGH);\n delay(2000); \n digitalWrite(12,LOW);\n digitalWrite(11,LOW);\n digitalWrite(10,LOW);\n}\n}Amazon Web Services offers scalable, reliable, and inexpensive cloud computing services. Below are some salient features provided by AWS.
\nPrerequisites:
\nIt is the most commonly used service of AWS and catered deployment of various applications as per AMI configured before creating an EC2 Instance.\nAmazon Elastic Compute Cloud (Amazon EC2) is a web service that provides secure and resizable compute capacity in the cloud.\nIt is designed to make web-scale cloud computing easier for developers.
\nHere are some of the important steps while setting up new EC2 Instance->
Choose an Amazon AMI.\n![\"AWS\"](\"/6b52e56f919744985b3f92a8eda96aae/AWS_EC21.webp\")
Choose the instance type.\n![\"AWS\"](\"/2124d67a037bc991dad3b1303dd0d6cf/AWS_EC22.webp\")
Configure security group(It allows specific IP's that user will give permission to specific ports as per requirement.)\n![\"AWS\"](\"/6fa466a29f1a919fb2da28166c03938a/AWS_EC23.webp\")
Login to EC2 via CLI
\n$ ssh -i ec2-key.pem ec2-user@11.11.11.111Switch to ROOT
\nsudo suAmazon Relational Database Service is a web service that makes it easier to set up, operate, and scale a relational database in the AWS Cloud. It provides a resizable, cost-efficient capacity for an industry-standard relational database and manages everyday database administration tasks.\nAfter setting up RDS, you can be logged in to the local tool(SQL Developer/ MY SQL Workbench) and copy RDS's endpoint with Username/Password configured while setting RDS.
\n![\"Available](\"/39e0cf055612574822ed7d30ac838534/AWS_RDS.webp\")
Amazon ElastiCache allows you to seamlessly set up, run, and scale popular open-Source compatible in-memory data stores in the cloud. This service is commonly used to avoid unnecessary calls to RDS and improve the user experience by displaying the data faster.
\nThere are two types of cluster engine supported by AWS ElastiCache
\n![\"AWS](\"/c6841f2f22b01b8cc2dbe1770592b3a0/AWS_EC.webp\")
Login to Redis locally via this command (First port can be anything except 6379 as it will direct AWS Redis to local Redis installed on the machine) and after first port, just paste the endpoint of Redis.
\nssh -f -i ec2-key.pem -N -L 6378:demo-redis.xxxx.xx.0001.xxxx.cache.amazonaws.com:6379 ec2-user@11.11.11.111Amazon Lex provides advanced deep learning functionalities of ASR(Automatic Speech Recognition) & NLU(Natural Language Understanding). With the use of Lex, we can build chatbots that can converse using speech and text as mediums.\nThere are a few components of BOT that need to be understood to build it.
\n![\"AWS](\"/c1243e5996dcca9944ee6252c85d6360/AWS_Lex.webp\")
Moreover, there are VERSIONS linked with bots, intents, and custom slots. With the help of versions, we can make changes in the dev version without any impact occurring in PROD; hence it helps to make Immutable versions of bot that is created using AWS Lex.
\n![\"AWS](\"/f9ba2b9e5877382f2d0600a912b2fe2c/AWS_LexV.webp\")
This AWS service is used to Create, Publish, Maintain, and Monitor secure Application Programming Interfaces(API). Moreover, it provides an easy interface for code running on AWS Lambda.\nHere are some of the pointers that explain the need for this service.
\nThis service enables us to make APIs on the go with a few clicks; also, we can use the Mocking approach to make dummy routes without any original data. In this faking data is used and bouncing back to without any activity.
\n![\"AWS](\"/ac41c7ffa5a3f3722f2fe662d1c7c55d/AWS_API.webp\")
Dynamo DB is a NO SQL database provided by Amazon Web Services. The main job of Dynamo DB is to Store & Retrieve any amount of data and serve any level requests of traffic.\nIn this, there are different terminologies as that of a regular database. Secondary Indexes is a Data Structure that contains a subset of attributes from a table.
\nLocal & Global Secondary Indexes
\n![\"AWS](\"/ab68ecc7af42f7662d490b7696839a54/AWS_Dynammo.webp\")
Identity is evolving, and developers are at the forefront of this transformation. Every day brings a new learning—adapting to new standards and refining approaches to building secure, seamless experiences.
\nWe’re here to support developers on that journey. We know how important simplicity, efficiency, and well-structured documentation are when working with identity and access management solutions. That’s why we’ve redesigned the LoginRadius website—to be faster, more intuitive, and developer-first in every way.
\nThe goal? Having them spend less time searching and more time building.
\nLoginRadius’ vision is to give developers a product that simplifies identity management so they can focus on building, deploying, and scaling their applications. To enhance this experience, we’ve spent the last few months redesigning our interface— making navigation more intuitive and reassuring that essential resources are easily accessible.
\nHere’s a closer look at what’s new and why it’s important:
\n![\"This](\"/f46881583c7518a93bb24e94c32320de/a-developer-friendly-dark-theme.webp\")
Developers spend long hours working in dark-themed IDEs and terminals, so we’ve designed the LoginRadius experience to be developer-friendly and align with that preference.
\nThe new dark mode reduces eye strain, enhances readability, and provides a seamless transition between a coding environment and our platform. Our new design features a clean, modern aesthetic with a consistent color scheme and Barlow typography, ensuring better readability. High-quality graphics and icons are thoughtfully placed to enhance the content without adding visual clutter.
\nSo, whether you’re navigating our API docs or configuring authentication into your system, our improved interface will make those extended development hours more comfortable and efficient.
\n![\"This](\"/e5358b82be414940f3fb146013845933/capabilities.webp\")
We’ve restructured our website to provide a straightforward breakdown of our customer identity and access management platform capabilities, helping you quickly find what you need:
\nThis structured layout ensures you can quickly understand each capability and how it integrates into your identity ecosystem.
\n![\"This](\"/a8c155c2b6faf3d5f4b4de4e2b14d763/developers-menu.webp\")
We’ve been analyzing developer workflows to identify how you access key resources. That’s why we redesigned our navigation with one goal in mind: to reduce clicks and make essential resources readily available.
\nThe new LoginRadius structure puts APIs, SDKs, and integration guides right at the menu bar under the Developers dropdown so you can get started faster. Our Products, Solutions, and Customer Services are also clearly categorized, helping development teams quickly find the right tools and make informed decisions.
\n![\"This](\"/b2f9a964a2da0ea83e2f8596b833bba7/we-support-your-tech-stack.webp\")
Developers now have a clear view of the tech stack available with LoginRadius, designed to support diverse business needs.
\nOur platform offers pre-built SDKs for Node.js, Python, Java, and more, making CIAM integration seamless across popular programming languages and frameworks.
\nCheck out our revamped LoginRadius website and see how the improved experience makes it easier to build, scale, and secure your applications.
\nDo not forget to explore the improved navigation and API documentation, and get started with our free trial today. We’re excited to see what you’ll build with LoginRadius!
\n","frontmatter":{"date":"February 21, 2025","updated_date":null,"description":"LoginRadius’ vision is to give developers a product that simplifies identity management so they can focus on building, deploying, and scaling their applications. To enhance this experience, we’ve redesigned our website interface, making navigation more intuitive and reassuring that essential resources are easily accessible.","title":"Revamped & Ready: Introducing the New Developer-First LoginRadius Website","tags":["Developer tools","API","Identity Management","User Authentication"],"pinned":true,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1.7857142857142858,"src":"/static/80b4e4fbe176a10a327d273504607f32/58556/hero-section.webp","srcSet":"/static/80b4e4fbe176a10a327d273504607f32/61e93/hero-section.webp 200w,\n/static/80b4e4fbe176a10a327d273504607f32/1f5c5/hero-section.webp 400w,\n/static/80b4e4fbe176a10a327d273504607f32/58556/hero-section.webp 800w,\n/static/80b4e4fbe176a10a327d273504607f32/99238/hero-section.webp 1200w,\n/static/80b4e4fbe176a10a327d273504607f32/7c22d/hero-section.webp 1600w,\n/static/80b4e4fbe176a10a327d273504607f32/1258b/hero-section.webp 2732w","sizes":"(max-width: 800px) 100vw, 800px"}}},"author":{"id":"Rakesh Soni","github":"oyesoni","avatar":"rakesh-soni.webp"}}}},"pageContext":{"limit":6,"skip":672,"currentPage":113,"type":"///","numPages":164,"pinned":"ee8a4479-3471-53b1-bf62-d0d8dc3faaeb"}},"staticQueryHashes":["1171199041","1384082988","2100481360","23180105","528864852"]}