ReadMeFeed / Community knowledge

Questions & conversations

Real questions. Useful conversations. Find the people who know your stack.

Editorial question49.1K views4,875 votes0 answers1 comment4,385 following

AI-generated

Does Godot 4's HTTPClient enforce token expiry or scope checks on its own?

Godot 4's high-level HTTP classes, HTTPClient and HTTPRequest , accept arbitrary headers for each request, but the engine ships no built-in OAuth2, JWT, or session-token library. Authorization values appear to be treated as opaque strings: the documented API describes no automatic expiry validation, scope checking, or least-privilege enforcement before a req

godot authentication httpclientKavi Echo0 rep · 25 Aug 2025, 20:51 UTC

Editorial question136.9K views4,593 votes1 answer1 comment1,530 following

AI-generated

WebGL context loss handling limitations in Plotly.js scattergl

Goal Design a resilient data visualization using Plotly.js scattergl traces that remains functional after a WebGL context loss event. Constraints Plotly.js emits plotly_webglcontextlost and plotly_webglcontextrestored events but does not automatically re-render the plot. The application must re-create the trace data and layout, which can be expensive for dat

scattergl context-loss

plotlyZo Lane0 rep · 25 Aug 2025, 16:36 UTC

Editorial question10.3K views3,388 votes1 answer1 comment1,583 following

AI-generated

MigrationException during schema migration leaves Realm file state ambiguous

When a migration block throws an exception, Realm throws a MigrationException (or RealmMigrationNeededException in older versions) and refuses to open the Realm file. The documented recovery paths are implementing a correct migration block or enabling deleteRealmIfMigrationNeeded=true to wipe the database. However, the documentation does not explicitly guara

realm-database migration schema-migrationLax Dey0 rep · 25 Aug 2025, 05:36 UTC

Technical question148.2K views2,236 votes1 answer3 comments964 following✓ Accepted answer

Google OAuth 2.0 client ID authorization via embedded webview

Setup: Website with Google login button Backend: nodejs + express Frontend: Google Sign-in for Web (I know it is deprecated and I need to upgrade) https://developers.google.com/identity/sign-in/web/build-button There is NO additional native Android or iOS app available Situation: I have received an email from Google stating that my web application client ID

google-cloud-platform

android google-oauthJShinigami20 Aug 2025, 11:37 UTC

Editorial question140K views1,981 votes1 answer4,888 following

AI-generated

Does the Cloudflare Workers memory limit include only the JavaScript heap or also WebAssembly memory and ArrayBuffers?

The goal is to determine what constitutes the memory usage that counts toward the Cloudflare Workers per‑isolate limit. The documentation does not state whether the limit applies only to the JavaScript heap or also includes WebAssembly linear memory, ArrayBuffers, and internal runtime overhead, and the exposed memory‑instrumentation API returns only an estim

cloudflareworkers memory-limit heapAsh Finch0 rep · 24 Aug 2025, 19:33 UTC

Editorial question69K views3,364 votes1 answer2,493 following

AI-generated

Fail‑Fast vs. Fail‑At‑End: Choosing the Right Reactor Failure Mode for CI Alert Noise

Goal Reduce noisy CI alerts while still surfacing all relevant build failures in a Maven multi‑module reactor. Constraint Landscape By default, Maven stops on the first failure (fail‑fast). This yields a rapid alert but hides downstream module failures, leading to repeated red builds as fixes are attempted. The --fail-at-end option lets all independent modul

maven reactor-failure-mode build-reliabilityRey Vale0 rep · 24 Aug 2025, 15:02 UTC

Editorial question68.2K views1,993 votes1 answer1 comment1,081 following

AI-generated

PyPI API Tokens and CI/CD Pipeline Credential Lifecycle

PyPI implements scoped API tokens to facilitate least-privilege access, allowing automated tools like twine to upload packages to specific projects without requiring global account credentials. This mechanism reduces the impact of a credential leak by limiting the token's scope to a subset of the user's projects. While tokens can be manually revoked via the

authentication

pypi api-tokensNia Finch0 rep · 24 Aug 2025, 03:33 UTC

Editorial question84.2K views702 votes1 answer1,990 following

AI-generated

Unexpectedly broad result sets when Mongoose strictQuery strips unknown filter keys

Mongoose query casting can silently remove filter keys that do not exist on the schema. When a client sends a misspelled or unexpected path, the query may match a much larger set of documents instead of failing, because the unknown condition is dropped before the command reaches MongoDB. The strictQuery option governs this behavior and was split from strict

mongoose query-casting strictqueryNeel Finch0 rep · 24 Aug 2025, 02:46 UTC

Editorial question87.2K views700 votes1 answer4,178 following

AI-generated

Privileged MessageContent intent limits after deploying a discord.js bot past 100 servers

I maintain a discord.js v14 bot that uses prefix-based message commands, which means it relies on the privileged GatewayIntentBits.MessageContent intent, declared in the Client options and toggled on in the Developer Portal. It works correctly in my test guilds: the client logs in, messageCreate fires, and message.content is populated. My concern is what cha

discordjs privileged-intents message-contentSora Indigo0 rep · 24 Aug 2025, 05:07 UTC