Technology Stack

[knownasilya]

HTTP with streams?
HTTP long-poll?

RabbitMQ?
etc..

This is regarding core<->drone

[knownasilya]

@microadam primus looks very nice.

[phiros]

I'd also go for primus. Would allow us to switch the underlying real time framework later if we
need to.

BTW for reference: Travis uses a combination of pusher and amqp for this.
AMQP is for the communication between the worker (drone in your terminology) and
travis-hub (core in your terminology). The logs are streamed with pusher from the
worker to a logging component and to browsers.

[knownasilya]

Do you see using a REST and a socket API together, since not everything needs to be realtime?

[phiros]

Yes I think it makes sense to use the realtime communication channel (= the socket API) only when you really need it. In my opinion this is only needed for streaming drone output to strider and from strider to the browser. Everything else can and should be done via REST (job distribution / job cancellation etc.).

[knownasilya]

Agreed. And with Hapi's injection API we can make it all REST, and then reuse the REST endpoints with the sockets. It's a win-win.

[davemackintosh]

@knownasilya Hapi's injection API? You mean Shot?

[knownasilya]

Yeah (still figuring out how Hapi is architected). I'm not sure about this yet. Would also love for examples on how to structure a Hapi app.

[davemackintosh]

I might have something of interest here in the next couple of days. What are your thoughts on API authentication and auth in general for Strider?

[knownasilya]

Token auth with API tokens for external resources like drones.

[davemackintosh]

JWT? Or something home-cooked?

[knownasilya]

Yes, JWT.

[davemackintosh]

Ahh cool, let me think. I might have something that will make this 1000X easier and faster based on Hapi

[zakjan]

Is there any reason for JWT instead of plain random tokens?

[knownasilya]

JWT can carry data along, which is super useful for things like drones and plugins.
Plus there is no reason not to use them really, since both are tokens and have the same cons.

Plus you can limit them by recipient and have an expiration time.