frontend | Ramsey Solutions Front-End Configurations | Code Analyzer library

I have my own API wrote in Play Scala and frontend client wrote in react.js I can't send logout request (I use OAuth2), because i get error with cors headers. I tried to fix it but i can't.

My react fetch method:

I'm building a vue app where user input data that I store in mongo database. One of the form elements is a ckeditor. When the user inputs data everything works fine.
Now the problem is when I make an API call to get the ckeditor text that user did input, I receive plein string text that I can't convert to html element.

Here's my code

I'm using Firebase Real-Time Database as backend. I want it to increase by 1 max for each request For example:

I'm trying to figure out what the best option to solving this problem. I have an frontend application that will cater for both normal user and different company users. I want the normal user to only see the email and password fields while the company user see their respective IDP without seeing other company's IDPs.

At first, I was thinking of using a custom policy to achieve this. Basically I'll have a custom claim in the outputclaims that will specify the domain and inside my orchestration I'll have a precondition if it doesn't exist then use email and password step and skip everything but if it exist, then skip the email and password and match it to an idp selection step (if domain == companyX) use CompanyX's IDP (GSuite) or (if domain == companyY) use CompanyY's Idp (AAD). So when the company users gets to the selection page they can only see their IDP and not the others. I'm not sure how scalable that would be though.

The second option I thought was to have one ROPC policy for the normal users and use another policy for IDP selection but this time passing a domain_hint when user attempts to login in. The reason why I would go with ROPC on this option is to give user consistent user experience, normal user sees fields on the page while company user sees a single IDP button that directly sign through the domain_hint directly (Sign-Direct). Essentially having all the UI controlled by me instead of azure.

Example:

• domain_hint=CompanyX - I would have a TechnicalProfile with the domain CompanyX (GSuite)
• domain_hint=CompanyY - I would have a TechnicalProfile with the domain CompanyX (AAD)

Now this approach seem to be more intuitive but now my concern is that since ROPC uses Authorization Flow which contains refresh token while the Idp selection flow uses OpenIdConnect which doesn't contain refresh token (or at least managed by AzureB2C) it would screw up how I manage my tokens.

Is there a better way to implement this situation?

I feel like I'm missing something or I'm misinterpreting something.

I'm using Django for Backend, PostgresSQL as DB and HTML, CSS and Javascript as Frontend. I am calling Django API via Javascript. Where user is adding a product to a cart, and I'm calling the cart with DRF to show all the data to the user. But problem is that, user can see all the data of other user. So, how can authenticated user can see his/her selected product on a cart.

Here is a detailed code:

views.py

adding product to cart

Created a server.js which indicates to index.html file.(server.js and index.html locates on the same folder). In that html I couldn't use any styling from external css file or any assests from local storage. But inline css & images from internet is working fine.

server.js

I'm currently working on a project running a jboss backend server (server-ear:ear exploded artefact) and a java gui (java 11) as frontend.

The backend contains a java service bean which accesses a database server and throws a custom exception (extends exceptions), if the variable is not found. The GUI catches the custom exceptions with a try and catch block.

The code is build and run inside of Intellij + Maven.

If i try to execute the code following arrow pops up at runtime:

I am trying to deploy 2 containers on 2 different tasks (1 container per task), one is my frontend and the other is my backend server. I am trying to figure out how to configure the communication between them.

I saw that a load balancer in a service is a good option. However, should I configure load balancer for my front end server and another one for my backend? Meaning each time I have public-facing services and private services I need 2 load balancers?

I would like to only expose my front-end to the public internet and my backend will remain private (although I make API requests to the outside world - probably need to configure outbound route too?).

I would highly appreciate any information.

I'm starting to use gitlab CI/CD pipeline but have some doubts regarding the output of the building process if i was to have a project(Repo) and inside this project I have the front and backend separated by the project structure, ex:

.gitlab-ci.yml

|__FrontEndCarProject

|__BackendCarProject

let's say that every time I change something in the frontend I would need to build it and deploy it to S3, but there is no need to build the backend (java application) and deploy it to elastic beanstalk (and vice versa for when i change the backend)..Is there a way to check where the changes have been made(FrontEndCarProject/BackendCarProject) using GitLab and redirect the .gitlab-ci.yml to a script file depending on if a have to deploy to S3 or elastic beanstalk?

Just trying

Note: another way is just to manually change the yml file depending on where i want to deploy..but is there a way to autodetect this and automated?

Just to get the idea, heres an example that would run in a linear way, but how can i conditionally build/deploy(depending on my front or backend)? should i keep them in different repos for simplicity? is it a good practice?