![\"server\"](\"/a9b12b02c985072861152d1de65032b9/server.webp\")
Found the world-class UX Design Courses.
\nYour one-stop design school to learn new design skills.
\nWebsite | Courses | Topics | Join our community
\nWe share knowledge with the world.
\n\nLearn to think like a UX designer and gain the concepts, skills, and confidence to build your UX career.
\n\nWe envision a world where anyone, anywhere has the power to transform their lives through learning.
\n\nThese are the websites where the world’s top design talents share their works and ideas.
\nShowcase and discover the latest work from top online portfolios by creative professionals across industries.
\n\nDribbble is where designers gain inspiration, feedback, community, and jobs and are your best resource to discover
\n\nAwwwards are the Website Awards that recognize and promote the talent and effort of the best developers and designers.
\n\nCheck out the hand-picked collection of latest mobile design patterns from apps that reflect the best in design.
\nmobbin.design.com
\nOver 500+ interactions from the world's best designed and highest-grossing apps.
\n\nThe largest collection of the best portfolio websites from top designers in the industry.
\n\nDesigners' Secret Source: all the design inspiration you need. Served fresh.
\n\nUse these tools to explore different color schemes quickly.
\nCreate color schemes with the color wheel or browse thousands of color combinations from the Color community.
\n\nCreate and share color palettes for your UI, and measure the accessibility of any color combination.
\n\nSearch, discover, test and create beautiful color palettes for your projects
\n\nContrast is the difference in luminance or color that makes an object (or its representation in an image or display)
\n\nColorbox is a color tool to produce color sets.
\n\nCome to WebGradients.com for 180 beautiful linear gradients in CSS3, Photoshop, and Sketch.
\n\nThe biggest collection of official brand color codes around. Includes hex color codes for 500+ brands including…
\n\nA curated collection of the most popular and trendy color palettes. Get the perfect color ideas for your design.
\n\nDrawing illustration could be time-consuming, why not start with this template and use it as a draft/underlay and build your design on top of that?
\nOpen-source illustrations for every project you can imagine and create.
\n\nCreators who don't draw face the problem of the boring content for app screens, articles, landing pages, and emails.
\n\nA library of sketchy illustrations of people free for personal and commercial use.
\n\nFree illustrations, for everything. Memorable products, brands, & presentations start with our curated royalty-fr
\n\nIconscout comes with integrated Plugins, conversion Tools, and simple, powerful Editors that enhance and streamline your workflow.
\n\nAn aggregator that indexes various free avatar sources that you can use in your design mockups by copy-paste, API, plugins…
\n\nA collection of star vectors in various styles and illustrations with over 30 collections and 290k images.
\n\nImages and Sketch files of popular devices.
\n\nBig library of high quality best free UI & UX mockups
\n\nHuge collection of free mockups, patterns, illustrations, scene creators, DIY scenes, for Photoshop, Sketch, and Figma
\n\nA directory of the best free design mockups for Photoshop, Sketch, Figma, and InVision Studio.
\n\nFind documentation and resources for designing great apps for Apple platforms.
\n\nBuild beautiful, usable products faster. Material Design is an adaptable system-backed by open-source.
\n\nBehind the scenes of our new design system, This article is part of a series on our new Design Language System.
\n\nWith our company’s growth and new direction, we need a brand identity that is efficient to use, flexible across applications, and able to feature localized content in a globally consistent way.
\n\nOur style guide helps us collaborate across disciplines to build a great experience for all of Shopify’s merchants.
\n\nUse Atlassian’s end-to-end design language to create straightforward and beautiful experiences.
\n\nA collection of tools and resources from Facebook Design.
\n\nMaking the web more beautiful, fast, and open through great typography
\n\nTypewolf helps designers choose the perfect font combination for their next design project-features web fonts in the…
\n\nArchive of freely downloadable fonts. Browse by alphabetical listing, by style, by author or by popularity.
\n\nFont Squirrel scours the internet for high quality, legitimately free fonts.
\n\nHere at Typ.io, we're revealing designers' decisions for all to see; peeking under the hood of beautiful websites…
\n\nCreate a testable design prototype for your interviewee and get feedback
\nAdobe XD is your UI/UX design solution for website and mobile apps creation. Design, prototype, and share. Try it now.
\n\nInVision is the digital product design platform used to make the world's best customer experiences.
\n\nFigma helps teams create, test, and ship better designs from start to finish. Meet our customers Packed with design…
\n\nSeamless integration to the Mac app makes saving to Cloud as easy as hitting ⌘S. From there, you can organize designs…
\n\nA new tool for designing modern interfaces, built and used by designers at Facebook
\n\nA framer is coming to the web. Learn more › Why Framer X Resources Framer X Framer is coming to the web. Learn more › The…
\n\nThe principle makes it easy to design animated and interactive user interfaces. Whether you're designing the flow of a…
\n\nThe world's first user flow diagramming tool tailored for designers. Build and present beautiful user flow diagrams…
\n\nFree stock photos you can use everywhere. ✓ Free for commercial use ✓ No attribution required
\n\nBeautiful, free images and photos that you can download and use for any project. Better than any royalty free or stock…
\n\nStunning stock images, perfect for blogs and websites Explore stock photography by category, all free for commercial…
\n\nA collection of stock photography in a single style. Good for collages. Free for commercial use.
\n\nGlitch images, videos, or webcam using WebGL effects. Save output as image, gif, or video.
\n\nFind beautiful free duotone images to use in any project, or make custom duotone images by uploading your own image and…
\nduotone.shapefactory.co
\nCompressor.io is a powerful online tool for reducing drastically the size of your images and photos whilst maintaining…
\n\nExcellent question! Let me give you a side by side comparison. Below are two photos of my cousin. The left image is…
\n\nmade with ♥ All trademarks, service marks, trade names, product names, logos, and trade dress appearing on our…
\n\nThis toolkit is an introduction to the methodology of service design
\nwww.servicedesigntoolkit.orgs
\nConnected space for product teams. Handoff designs and style guides with accurate specs, assets, code…
\n\nScalable, secure, cross-device, and enterprise-ready team collaboration tool for distributed teams. Join 2M+ users &…
\n\n","frontmatter":{"date":"August 13, 2020","updated_date":null,"description":"As a designer, often wondered which new tools and utilities, other designers are using? So here is a list of all the tools and utilities famous around the world in designers.","title":"Best Free UI/UX Design Tools/Resources 2020","tags":["Design","UX","Tools"],"pinned":null,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1.5037593984962405,"src":"/static/056d16dfcc7fa66e5b31f51aa531383a/ad85c/ux-ui.webp","srcSet":"/static/056d16dfcc7fa66e5b31f51aa531383a/61e93/ux-ui.webp 200w,\n/static/056d16dfcc7fa66e5b31f51aa531383a/1f5c5/ux-ui.webp 400w,\n/static/056d16dfcc7fa66e5b31f51aa531383a/ad85c/ux-ui.webp 600w","sizes":"(max-width: 600px) 100vw, 600px"}}},"author":{"id":"Hitesh Kumawat","github":null,"avatar":null}}}},{"node":{"excerpt":"Migrating your existing code to a new programming language is a very tedious task. We need to have a proper set of requirements and some…","fields":{"slug":"/engineering/a-journey-from-node-to-golang/"},"html":"Migrating your existing code to a new programming language is a very tedious task. We need to have a proper set of requirements and some obvious benchmarking between the new and existing technology.
\nSo here our journey started to transform (not convert) our existing code to a new language. You might be thinking why I have used the word transformation instead of conversion, so -
\nConversion: Conversion is just about writing your existing code in different languages as it is.
\nTransformation: Transformation is about leveraging all possible benefits of a new language and convert accordingly.
\nThe idea of migrating code to a new programming language started with a simple requirement: we wanted to take our cloud solution to on-premise as well. Till now, our services were written in NodeJS for a cloud solution and it was doing pretty well. The performance was also good but there is nothing that cannot be improved upon. So, along with performance improvement, we started to find out that can we make a GUI or CLI using existing NodeJS code that can take our solution on-premise?
\nAnswer for that was practically YES. but, technically NO. If we’re writing apps with a GUI, Node can’t do it on its own. We had to use some other projects which provide GUI creation capabilities (eg: ElectronJS, NW.js, etc). Making CLI seemed doable but there were also problems like the inablility to have single file distribution for our code. And the ability to download a single file and execute commands - without an installer, or even a setup process - does wonders for a user. This also makes the product easily backward-compatible.
\nAlso, another factor came in that it was better to switch to a technology that works closely with gRPC.
\nSo, we drew out a few goals for our new solution
\nAfter research with our requirement, we were able to figure out that we can achieve these with GoLang, developed by Google.\nOn the basis of our research, we also did some benchmarking on different node js frameworks and GoLang.
\nBenchmarking sever we’ve used with below configurations
\n
The benchmarking result was pretty much similor to what we are thinking. Here are the benchmarking results -
\n![\"sheet1\"](\"/bc71c0c2ed131f0b4ba9ac1fe9bdb155/sheet1.webp\")
![\"sheet2\"](\"/0d6023167db0ad99d3fe1d8dfb1f1870/sheet2.webp\")
There was a big difference. For better clarity let’s see the below graphs.
\nIn the below chart, we can clearly see that Golang won the competition and Hapi has taken the maximum time to finish the test.
\n![\"total-time-taken-for-test\"](\"/13b747de9eb5e9d9ed52d041de7a483a/total-time-taken-for-test.webp\")
In the below chart, we can see that Golang served maximum requests per second.
\n![\"request-per-second-and-transfer-rate-kb-s\"](\"/4129f7fdfaf409d18266224a68e8d07e/request-per-second-and-transfer-rate-kb-s.webp\")
The below chart is showing that the Number of requests is very high compared to other node js frameworks.
\n![\"request-per-second-and-time-per-request\"](\"/9dd0dd6c131fe4efbd1b3fd543283d81/request-per-second-and-time-per-request.webp\")
![\"chart\"](\"/844246f974c34aef12770c0a7458a864/chart.webp\")
All the data clearly shows the direction so we decided to move to GoLang.
\n","frontmatter":{"date":"August 11, 2020","updated_date":null,"description":"If your existing technology is not fulfilling all your needs and you are thinking about switching to the new one. Also, if you are concerned about the performance. Here is the blog that can help you in this direction.","title":"A journey from Node to GoLang","tags":["NodeJs","Golang","Performance"],"pinned":null,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1.5037593984962405,"src":"/static/7495b241d8dd853cf8580344cc9332f2/ad85c/node-go.webp","srcSet":"/static/7495b241d8dd853cf8580344cc9332f2/61e93/node-go.webp 200w,\n/static/7495b241d8dd853cf8580344cc9332f2/1f5c5/node-go.webp 400w,\n/static/7495b241d8dd853cf8580344cc9332f2/ad85c/node-go.webp 600w","sizes":"(max-width: 600px) 100vw, 600px"}}},"author":{"id":"Narendra Pareek","github":"pareek-narendra","avatar":null}}}},{"node":{"excerpt":"Overview I want to explain the inspiration for React Hooks in this walkthrough, what React Hook is and the advantages of hooks, and more…","fields":{"slug":"/engineering/react-hooks-guide/"},"html":"I want to explain the inspiration for React Hooks in this walkthrough, what React Hook is and the advantages of hooks, and more. This article covers only an introduction to React Hooks. React Hooks have been introduced in React function components as a way of utilising state and side effects.
\nHave you ever assigned a task to change the functional component which is full of UI and business logic to a Class Component just because the new feature requires the use of state, just to toggle some text colour to red on some events occurred?
\nChances are there if you are a react developer, Hopefully we can solve this using the Hooks.
\nHooks are features that allow you to “hook into” the features of React state and lifecycle from function components. Hooks do not function inside classes. Without classes, they let you use React.
\n\n\nHooks are a new addition in React 16.8. They let you use state and other React features without writing a class.
\n
Dan Abramov has provided a well-rounded introduction to the API, and how and why the framework that many of us use has evolved to where it is now. You can read about it and watch his ReactConf 2018 keynote introducing the hooks proposal.
\nThe key takeaway maybe this:
\n\n\nIf the React community embraces hooks, it will reduce the number of concepts you need to juggle when writing React applications. Hooks let you always use functions instead of having to constantly switch between functions, classes, higher-order components, and render props.
\n
React Hooks enables the functional components to attach the local state to it, so that you can use React functionality without using a class component.
\nAdvantages of react hooks:
\nAs you all know there are two ways to create the React components, one is using the function and other is using the class, there is always a confusion between one v/s other.
\nLet us assume we have a simple class component and then we will convert it to a functional with hooks and see the difference.
\nimport React, { Component } from "react";\nclass Greeting extends Component {\n state = {\n text: "",\n };\n handleChange = (e) => {\n this.setState({ text: e.target.value });\n };\n render() {\n return <input value={this.state.text} onChange={this.handleChange} />;\n }\n}\nexport default Greeting; import React, { useState } from "react";\nexport default () => {\n const [text, setText] = useState("");\n return (\n <input\n value={text}\n onChange={(e) => {\n setText(e.target.value);\n }}\n />\n );\n};\n\nIf you disagree with any of the above, you can play with it in practice. I’m sure that would change your mind!
\n
Let us understand some basic hooks with examples.
\nI will take one example and will explain all the hooks in that example using a various scenarios.
\nimport React, { useState } from 'react';\n\nconst App = () => {\n const [message, setMessage] = useState('Hi there, how are you?');\n\n return <h1>{message}</h1>\n};\n\nexport default App;In this example variable message will save the value Hi there, how are you using the useState() hooks. It will be similar to this code we write in the constructor() of class component.
this.state = {\n message: "Hi there, how are you?"\n}\n\nIf you are wondering about the
\nsetMessage@line 3 then be calm, I will explain later in this tutorial
React useEffect() function can be executed in 3 different React component life cycles that are
Let's understand the useEffect() hook by taking the above example. So let's say I want to change the message 1 second after the component is mounted.
import React, { useState, useEffect } from "react";\n\nconst App = () => {\n const [message, setMessage] = useState("Hi there, how are you?");\n\n useEffect(() => {\n console.log("trigger use effect hook");\n\n setTimeout(() => {\n setMessage("I'm fine, thanks for asking.");\n }, 1000);\n });\n\n return <h1>{message}</h1>;\n};\n\nexport default App;As you can see, In this example we have used the useEffect hook to trigger the setMessage method the change the message variable after 1 second.
But there is one problem, while executing this component you can see that the console.log will trigger twice. The reason is the useEffect hook will by default trigger on change of either state or props similar to the componentDidUpdate method in our class component.
To overcome this kind of case we need to pass the Empty array ([]) as the second argument in the useEffect hooks. So updated code will look like this
\nimport React, { useState, useEffect } from 'react';\n\nconst App = () => {\n const [message, setMessage] = useState('Hi there, how are you?');\n\n useEffect(() => {\n console.log('trigger use effect hook');\n\n setTimeout(() => {\n setMessage("I'm fine, thanks for asking.");\n }, 1000)\n }, []);\n\n return <h1>{message}</h1>\n};\n\nexport default App;The above code means that hook will never be triggered as we have an empty array there, if we want to trigger the hook on a specific variable change of props or state we can add that variable in the array.
For eg : [state.message] here hook will fire on the update of message variable only.
I have covered the two basic and important hooks in this tutorial, there are many more types of hooks available in React, you can find the detailed explanation in the React docs.
\n\n\nWe can use eslint-plugin-react-hooks this eslint plugin that ensures the above two rules.
\n
So, from multiple points of view, we have covered the power of Hooks and seen how we can use controlled state in our Components without utilizing classes.
\nI hope you find this article useful, Happy Reading !!!
\n","frontmatter":{"date":"August 07, 2020","updated_date":null,"description":"A walkthrough guide on React Hooks, what is React Hooks, benefits of Hooks, and how to use Hooks in React and more.","title":"React Hooks: A Beginners Guide","tags":["React","Hooks"],"pinned":null,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1.36986301369863,"src":"/static/48f1a9f24091fba7929dcb79ec13b4fe/58556/react-hooks.webp","srcSet":"/static/48f1a9f24091fba7929dcb79ec13b4fe/61e93/react-hooks.webp 200w,\n/static/48f1a9f24091fba7929dcb79ec13b4fe/1f5c5/react-hooks.webp 400w,\n/static/48f1a9f24091fba7929dcb79ec13b4fe/58556/react-hooks.webp 800w,\n/static/48f1a9f24091fba7929dcb79ec13b4fe/99238/react-hooks.webp 1200w","sizes":"(max-width: 800px) 100vw, 800px"}}},"author":{"id":"Mohammed Modi","github":"mohammed786","avatar":null}}}},{"node":{"excerpt":"Overview Each business relies on a specific target set of users, who has a problem area. Analysis and further finding out the right solution…","fields":{"slug":"/engineering/design-led-thinking/"},"html":"Each business relies on a specific target set of users, who has a problem area.
\nAnalysis and further finding out the right solution for the identified problem hence helps businesses to meet their target user’s needs.
\nIf the solution meets the needs completely and resolves the pain area, at the right time, acts as an ointment and proves and builds trust for businesses.
\nDesign Thinking plays an important role to reiterate the understanding of problems, causes, environmental changes leading innovation and experimentation for a competitive advantage.
\n![\"Design](\"/5db46cf2430fb3f1e2b7798f183238f1/design_thinking_process.webp\")
Define the problem - based on\n5 W’s- who, what, where, why, when
\nIdeation - Design Thinking solutions
\nUser Experience - prototype
\n5.Testing of design and solution
\nMatch the solution ideas demonstrated via designs to target users, to make sure every detail of the solution chosen matches the requirements and observations made.
\n| Criteria | \nDesign Thinking | \nTraditional Problem Solving | \n
|---|---|---|
| Nature | \nVisual Thinking Process | \nOld traditional documented process | \n
| Initial Stage | \nObservation, based on Emotional intelligence | \nProblem Defining, based on intelligence | \n
| Based Depends on | \nExperiment, Innovation based on user needs | \nBased on founders vision | \n
| Focussed On | \nWhat People needs | \nBusiness model | \n
| User means | \nReal Humans | \nCustomers | \n
| Solution Proposal | \nRestricts proposing solutions within the problem definition stage. | \nIncludes proposing solutions while problem understanding | \n
| Future Scope | \nVisualize the future of business organization via innovation thinking, via releasing products before actual development. | \nRework and re-iteration with improvement are supported to reach final product deliverable. | \n
| Meaning | \nDiscovery of what WORKS.So encourages Multiple POSSIBLE answers | \nDiscovery of what is RIGHT = CORRECT solution. | \n
| Approach | \nBased on storytelling following a bottom-up approach | \nBased on facts and figures, based on top-down approach | \n
| Testing with real users | \nUser is unaware that he is in test mode and experiences the service he expects to perceive. Example- ability to customize furniture without buying. | \nUser is well aware that he is using test services and does not expect much. | \n
| Phase | \nThere is no planning, instead there exists building of Prototypes and presenting fast to get feedback without delaying the GO-TO market. | \nFollows conventions process of THINKING and PLANNING | \n
| Failure | \nFailure Driven- learn from failure and read to fail anytime as the cost associated is low. FAIL EARLY- FAIL FAST | \nFailure Restrictor- Tries to avoid failure, to avoid huge money loss involved. | \n
Pepsico design-led problem-solving\nFor female user experience, it released a new line of Doritos in china in a stack of the tray and packaged in a canister, instead of a snack bag, so that women can use it opening the drawer and push it back when done, as they don't like other to notice them munching.
\n\nSamsung’s design-led innovation\nIt realized the need of Korean and Japanese business users who had common practice to note or schedule events or important points in small pocket-sized notebooks, This led to an innovative idea where the user was observed and the need was created and hence realized to users.\nSamsung launched a successful Galaxy Note series. with the innovation of “smart diary” a 5.5-inch interface with a stylus pen to pair.
\n\nSamsung design concept used for experimenting\nWhere it experimented with TV units, realizing the fact that users are spending more time on furniture, so TV ‘s are supposed to be a bit more attractive. This led to the radical change for the speaker’s positioning at the TV sets to be hidden at the bottom instead of the traditional side panes. This has experimented in the European market first and after a successful adaption, Samsung experimented more with visual appearance and by the time it was building the product, it had already sold a million units.
\n\nStanford Hospital for improvement\nIt worked on improving the experience of a patient within the emergency room and for staff to serve patients a better way
\n\nIt is very important to drive and extract meaningful images out of the observations from real humans.\nThis requires an influencing processor who can drive the team to opt for an approach for DESIGN THINKING. Here even the market leaders are at risk to sustain with innovations and experiments involved with Early FAILURES.
\n","frontmatter":{"date":"August 06, 2020","updated_date":null,"description":"Design thinking is a solution-oriented, iterative process where the team creates the design while keeping the end customers in mind. This blog guides you about how does design-led thinking works.","title":"DESIGN THINKING -A visual approach to understand user’s needs","tags":["Design","Design Thinking","UX"],"pinned":null,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1.7699115044247788,"src":"/static/110edfa95f48f0a46a297c46621f3040/58556/design_led_thinking.webp","srcSet":"/static/110edfa95f48f0a46a297c46621f3040/61e93/design_led_thinking.webp 200w,\n/static/110edfa95f48f0a46a297c46621f3040/1f5c5/design_led_thinking.webp 400w,\n/static/110edfa95f48f0a46a297c46621f3040/58556/design_led_thinking.webp 800w,\n/static/110edfa95f48f0a46a297c46621f3040/99238/design_led_thinking.webp 1200w,\n/static/110edfa95f48f0a46a297c46621f3040/135cd/design_led_thinking.webp 1280w","sizes":"(max-width: 800px) 100vw, 800px"}}},"author":{"id":"Deepali Soni","github":null,"avatar":null}}}},{"node":{"excerpt":"Audience: Anyone who wishes to deliver secure code to the rest of the world. Answer to What it is? At the heart of any image scanning tool…","fields":{"slug":"/engineering/container-security-scanning/"},"html":"Audience: Anyone who wishes to deliver secure code to the rest of the world.
\nAt the heart of any image scanning tool is static analysis against a “Common Vulnerabilities and Exposures” (CVE) database. Each layer within the container image is analyzed and queried to discover known vulnerabilities.
\nIn addition to vulnerability scanning, a comprehensive tool should compare the architecture of your application against best practices to identify potential vulnerabilities.
\nWhile tools like Kubernetes and Container Registries have become household names for developer community because these tools make their life much easier to develop and deploy applications, many are still catching up on the need to integrate container security tools to secure their containerized application throughout the container lifecycle. As the world is already shifted to containerized applications, taking good care of you docker images is also equally important.
\nOne of the main unique features of containers is how layers are used to build a container image. A service is piled up with an application server layer, a Linux layer and so on. One of these layers is updated, we can rebuild the application with a new updated version.
\nIt would be an unthinking idea to get into a container-based strategy without integrating a well-grounded and inclusive container scanning security solution into the CI/CD setup.
\nI am here, implementing a Clair tool in gitlab-ci.yml to get secure docker images.
\nimage_scanning:\n stage: scan\n image: docker:stable\n tags:\n - gitlab-org-docker\n services:\n - docker:19.03.8-dind \n variables:\n DOCKER_DRIVER: overlay2\n allow_failure: true\n before_script:\n - echo $CI_BUILD_TOKEN | docker login -u $CI_REGISTRY_USER --password-stdin $CI_REGISTRY\n script:\n - docker run -d --name db arminc/clair-db:latest\n - docker run -p 6060:6060 --link db:postgres -d --name clair --restart on-failure arminc/clair-local-scan:v2.0.1\n - apk add -U wget ca-certificates\n - docker pull $CI_REGISTRY_IMAGE:$PROJECT_NAME-latest || true\n - wget https://github.com/arminc/clair-scanner/releases/download/v8/clair-scanner_linux_amd64\n - mv clair-scanner_linux_amd64 clair-scanner\n - chmod +x clair-scanner\n - touch clair-whitelist.yml\n - while( ! wget -q -O /dev/null http://docker:6060/v1/namespaces ) ; do sleep 1 ; done\n - retries=0\n - echo "Waiting for clair daemon to start"\n - while( ! wget -T 10 -q -O /dev/null http://docker:6060/v1/namespaces ) ; do sleep 1 ; echo -n "." ; if [ $retries -eq 10 ] ; then echo " Timeout, aborting." ; exit 1 ; fi ; retries=$(($retries+1)) ; done\n - ./clair-scanner -c http://docker:6060 --ip $(hostname -i) -r gl-container-scanning-report.json -l clair.log -w clair-whitelist.yml $CI_REGISTRY_IMAGE:$PROJECT_NAME-latest || true\n - cat gl-container-scanning-report.json\n artifacts:\n paths: [gl-container-scanning-report.json]\n rules:\n - if: '$CI_COMMIT_BRANCH == "staging"'\n when: alwaysgitlab-org-docker is a GitLab shared-runner to run this analysis (an agent on which the above-described job will run), it will fetch the latest ms image and will run it against the CVE database, at last record the report in the JSON file which we can store as artifacts. These artifacts can be further used by the developer to see and resolve the vulnerabilities.
This tutorial assumes you have:
\nIn this blog, we’ll look at different methods to send an email with Go, First, we will explore inbuilt smtp package, then we will move to use a popular package Gomail and finally, we will send HTML emails using custom templates.
\nsmtp is an inbuilt package provided with Golang. It implements the Simple Mail Transfer Protocol and has multiple functionalities related to it. Here to send the email we will be using only two functions PlainAuth and SendMail from the package.
\n\n\n\n
Below is the complete code to send a plain text email with smtp package in golang.
\npackage main\n\nimport (\n "fmt"\n "net/smtp"\n)\n\nfunc main() {\n\n // Sender data.\n from := "from@gmail.com"\n password := "<Email Password>"\n\n // Receiver email address.\n to := []string{\n "sender@example.com",\n }\n\n // smtp server configuration.\n smtpHost := "smtp.gmail.com"\n smtpPort := "587"\n\n // Message.\n message := []byte("This is a test email message.")\n \n // Authentication.\n auth := smtp.PlainAuth("", from, password, smtpHost)\n \n // Sending email.\n err := smtp.SendMail(smtpHost+":"+smtpPort, auth, from, to, message)\n if err != nil {\n fmt.Println(err)\n return\n }\n fmt.Println("Email Sent Successfully!")\n}\n\nIn the above code example we have used smtp details of a Gmail account, you should update the smtp detail according to your email provider.
\n
\n\nJust to explain things easily, In the above snippet, we have written all the smtp and email credentials in the main function, Though in a production app you should always use env variables for configurations. You can check Viper to manage configurations in production apps.
\n
Below is the complete code to send a plain text email with Gomail package in golang.
\npackage main\n\nimport (\n "crypto/tls"\n "fmt"\n\n gomail "gopkg.in/mail.v2"\n)\n\nfunc main() {\n m := gomail.NewMessage()\n\n // Set E-Mail sender\n m.SetHeader("From", "from@gmail.com")\n\n // Set E-Mail receivers\n m.SetHeader("To", "to@example.com")\n\n // Set E-Mail subject\n m.SetHeader("Subject", "Gomail test subject")\n\n // Set E-Mail body. You can set plain text or html with text/html\n m.SetBody("text/plain", "This is Gomail test body")\n\n // Settings for SMTP server\n d := gomail.NewDialer("smtp.gmail.com", 587, "from@gmail.com", "<email_password>")\n\n // This is only needed when SSL/TLS certificate is not valid on server.\n // In production this should be set to false.\n d.TLSConfig = &tls.Config{InsecureSkipVerify: true}\n\n // Now send E-Mail\n if err := d.DialAndSend(m); err != nil {\n fmt.Println(err)\n panic(err)\n }\n\n return\n}Now, let's send an HTML email with smtp package, for this, we need to create two files in the root folder.
\n<!-- template.html -->\n<!DOCTYPE html>\n<html>\n<body>\n <h3>Name:</h3><span>{{.Name}}</span><br/><br/>\n <h3>Email:</h3><span>{{.Message}}</span><br/>\n</body>\n</html>We are using text/template package to parse HTML files and use it in smtp SendMail function.
\npackage main\n\nimport (\n "bytes"\n "fmt"\n "net/smtp"\n "text/template"\n)\n\nfunc main() {\n\n // Sender data.\n from := "from@gmail.com"\n password := "<Email Password>"\n\n // Receiver email address.\n to := []string{\n "sender@example.com",\n }\n\n // smtp server configuration.\n smtpHost := "smtp.gmail.com"\n smtpPort := "587"\n\n // Authentication.\n auth := smtp.PlainAuth("", from, password, smtpHost)\n\n t, _ := template.ParseFiles("template.html")\n\n var body bytes.Buffer\n\n mimeHeaders := "MIME-version: 1.0;\\nContent-Type: text/html; charset=\\"UTF-8\\";\\n\\n"\n body.Write([]byte(fmt.Sprintf("Subject: This is a test subject \\n%s\\n\\n", mimeHeaders)))\n\n t.Execute(&body, struct {\n Name string\n Message string\n }{\n Name: "Puneet Singh",\n Message: "This is a test message in a HTML template",\n })\n\n // Sending email.\n err := smtp.SendMail(smtpHost+":"+smtpPort, auth, from, to, body.Bytes())\n if err != nil {\n fmt.Println(err)\n return\n }\n fmt.Println("Email Sent!")\n}Once done you need to run below command to send the emails
\ngo run main.go\n\nIf you don't want to create your custom HTML emails, Hermes is a package that generates clean, responsive HTML e-mails for sending transactional e-mails.
\n
Now you can send beautiful emails to the customer by your golang application, You can found the complete code used in this blog on our Github Repo
\n","frontmatter":{"date":"August 03, 2020","updated_date":null,"description":"In this blog, we’ll look at different methods to send an email with Go, First we will explore inbuilt smtp package, then we will move to use a popular package Gomail and finally we will send HTML emails using custom templates.","title":"Different ways to send an email with Golang","tags":["Go","Email"],"pinned":null,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1.5037593984962405,"src":"/static/8c5f2a8ca4c0d8c2e442b0b5b909e070/58556/email_cover.webp","srcSet":"/static/8c5f2a8ca4c0d8c2e442b0b5b909e070/61e93/email_cover.webp 200w,\n/static/8c5f2a8ca4c0d8c2e442b0b5b909e070/1f5c5/email_cover.webp 400w,\n/static/8c5f2a8ca4c0d8c2e442b0b5b909e070/58556/email_cover.webp 800w,\n/static/8c5f2a8ca4c0d8c2e442b0b5b909e070/99238/email_cover.webp 1200w,\n/static/8c5f2a8ca4c0d8c2e442b0b5b909e070/7c22d/email_cover.webp 1600w,\n/static/8c5f2a8ca4c0d8c2e442b0b5b909e070/685a2/email_cover.webp 1800w","sizes":"(max-width: 800px) 100vw, 800px"}}},"author":{"id":"Puneet Singh","github":"puneetsingh24","avatar":null}}}}]},"markdownRemark":{"excerpt":"Introduction Ever wondered how apps like Spotify, Netflix, or Slack manage seamless login experiences across devices? Many of them use JWT…","fields":{"slug":"/engineering/how-to-integrate-jwt/"},"html":"Ever wondered how apps like Spotify, Netflix, or Slack manage seamless login experiences across devices? Many of them use JWT, or JSON Web Tokens, a compact, stateless method for securely transmitting user identity and session data across services.
\nWith JWT token authentication, identity information is embedded in a signed token, allowing you to maintain user sessions without server-side storage. This approach is highly scalable and ideal for modern architectures like SPAs, mobile apps, and microservices.
\nIn this blog, we’ll walk you through what is JWT, why use it, and how to implement JWT authentication using LoginRadius.
\nYou’ll learn what JWT is, why it’s effective, and how it works in real-world applications. We'll cover both integration methods (IDX and Direct API), generating your signing key, managing sessions, storing the JWT token securely, and applying best practices throughout.
\nWhether you're a developer, product manager, or IAM architect, this guide offers a complete foundation for implementing JWT token authentication into your application stack.
\nJSON Web Token (JWT) is an open standard (RFC 7519) used to transmit information securely between parties as a JSON object. It’s compact, self-contained, and digitally signed, making it a reliable format for authentication and authorization across modern applications.
\nA JWT consists of three parts:
\nExample of a token structure:
\n<base64Header>.<base64Payload>.<signature>
\n![\"Flowchart](\"/f29edbf2978577390c7ffa02e9bc4dda/lr-JWT-authentication.webp\")
JWT simplifies identity verification, especially when you're building apps that talk to APIs or need to scale without centralized session storage.
\nLoginRadius provides robust support for JWT (JSON Web Token) authentication, which allows for flexible and secure access control across different digital platforms. Whether you're building a fully custom identity flow or using a pre-built interface, the platform supports various integration approaches depending on your architecture.
\nIf you're looking to understand how to implement JWT token authentication effectively, LoginRadius offers two primary implementation models that cater to different levels of customization and control:
\nThe IDX-hosted login approach enables secure, standards-compliant, JWT-based authentication without requiring you to build a custom login interface. This is a strategic option for fast, compliant, and user-friendly deployments.
\n![\"Screenshot](\"/9fb19dd9c88c7916aeebd03ab6e661b7/lr-admin-console.webp\")
{
\n\"access_token\": \"eyJhbGciOiJIUzI1NiIsInR...\",
\n\"expires_in\": 1800
\n}
\nThis integration approach works best for all teams that want effective identity workflows without the complexity of building proprietary login screens, something that is crucial for customer portals, onboarding of mobile applications, and even managing access for business partners.
\nIf you’re building a custom login UI or working in a headless environment, LoginRadius lets you generate and handle JWTs directly through its Authentication APIs. Here’s how you can programmatically perform token authentication using the classic method:
\nSend a POST login request to the LR Authentication URL:
\nPOST /identity/v2/auth/login
\nInclude the user’s credentials (email + password) in the request body.
\n{
\n\"access_token\": \"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...\",
\n\"expires_in\": 3600
\n}
\nWith LoginRadius, it is possible to customize the payload to include user roles and/or any additional metadata. You can set custom JWT claims on the Admin Console.
\nWith this method, you have complete customization over login flows while using LoginRadius to issue signed JWTs for user session management.
\nNOTE- With either method, LoginRadius ensures that JWTs are securely signed, optionally short-lived, and compatible with standard token validation libraries, making integration seamless for everyone.
\nTo get started with JWT implementation, you can read our complete developer documentation.
\n![\"Illustration](\"/15ec02ac98d24a9f1f28e5d0f06b9174/IDX-vs-Direct-API-JWT.webp\")
Session management is how your app keeps track of a user after they log in so they don’t have to prove who they are with every request.
\nIn traditional apps, sessions are stored on the server using session IDs. Every time a request comes in, the server checks that session ID to verify the user.
\nIn modern apps, especially SPAs and APIs, JWTs are used to manage sessions without needing server-side storage; this is called stateless session management. The token itself carries the user’s identity, roles, and expiration details. As long as the token is valid, the user stays logged in.
\nGood session management ensures:
\nUser Logs In
\nClient Stores the Token
\nAccess Token Expiry
\nToken Renewal
\nWhen the user logs out, both the access token and refresh token should be cleared from client storage.
\nHowever, access tokens are stateless and cannot be revoked mid-lifecycle unless:
\nCombining these strategies gives you greater control over token misuse and enables a robust, enterprise-grade logout flow.
\n![\"illustration](\"/e55ae4bbc8ce62e13f03e46e29ebe7cc/api-economy.webp\")
When you implement JWT-based authentication, the client (browser or mobile app) needs a way to store the access token and, optionally, the refresh token after they are issued by the authentication server. This stored token is then attached to every subsequent request to prove the user's identity.
\nChoosing where to store the JWT is a crucial security decision. The most common storage options are:
\nEach option has trade-offs between security, accessibility, and persistence, and the right choice depends on your application's architecture and threat model.
\nAccess Tokens
\nRefresh Tokens
\nJWT authentication with LoginRadius offers a modern, stateless approach to managing sessions across distributed systems. The IDX integration is ideal for rapid deployment, while the Direct API model is best for organizations needing deep customization and integration flexibility.
\nWith robust token signing, refresh capabilities, and centralized control, LoginRadius provides a future-ready foundation for secure, scalable identity architecture. Contact us to know more about JWT authentication and implementation guide.
\nA: JWT authentication securely verifies user identities, enabling stateless session management across web, mobile apps, and microservices without server-side session storage.
\nA: LoginRadius simplifies JWT integration by offering hosted IDX login pages and direct API-based authentication methods, enabling rapid deployment and deep customization.
\nA: Yes, JWT authentication is secure when implemented with best practices like short-lived tokens, secure storage methods, signature validation, and refresh token rotation.
\nA: Yes, LoginRadius allows revocation of JWT refresh tokens explicitly, and supports strategies like short-lived tokens and key rotation to manage token lifecycles securely.
\n","frontmatter":{"date":"April 15, 2025","updated_date":null,"description":"Discover JWT (JSON Web Token) authentication, its advantages, and how to integrate it seamlessly using LoginRadius' hosted IDX and Direct API methods for secure, scalable identity management.","title":"JWT Authentication with LoginRadius: Quick Integration Guide","tags":["JWT","JSON Web Token","Authentication","Authorization"],"pinned":null,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":0.7782101167315175,"src":"/static/4cedb7829f98208cbc6d5a9aea4e983d/58556/how-to-integrate-jwt.webp","srcSet":"/static/4cedb7829f98208cbc6d5a9aea4e983d/61e93/how-to-integrate-jwt.webp 200w,\n/static/4cedb7829f98208cbc6d5a9aea4e983d/1f5c5/how-to-integrate-jwt.webp 400w,\n/static/4cedb7829f98208cbc6d5a9aea4e983d/58556/how-to-integrate-jwt.webp 800w,\n/static/4cedb7829f98208cbc6d5a9aea4e983d/1cc9f/how-to-integrate-jwt.webp 896w","sizes":"(max-width: 800px) 100vw, 800px"}}},"author":{"id":"Kundan Singh","github":null,"avatar":null}}}},"pageContext":{"limit":6,"skip":186,"currentPage":32,"type":"//engineering//","numPages":53,"pinned":"5c425581-f474-5ae9-abe7-cf5342db2aaa"}},"staticQueryHashes":["1171199041","1384082988","2100481360","23180105","528864852"]}