Hacker News new | ask | show | jobs
by TACIXAT 2270 days ago
Integration with auto cert would be really nice. That is usually the biggest chunk in the body of my Go servers' main functions.

Edit: Is it also easy to hook up a CRSF middleware?

I guess that's my pain point with modern web development. Most cool features need SSL, you should add CSRF protections, gotta pick a good password hashing algorithm. I know how to do it but it's a bunch of tedious work when I just want to hack something together. Would love a framework that streamlines all that.

2 comments

You can give a path to your SSL cert in the config, and set "protocol" to "https" and you're done. If you're using Certbot, give the path to the live cert and it will work even after renewal.

About CSRF, as the framework is focused on APIs, the use of cookies is possible but not recommended, so you won't need CSRF protection when using Goyave.

i suggest looking at Rails. It streamlines a lot more than ^^^