Sabtu, Juli 14, 2018

Huge directory size of oradiag_user

Read sqlnet.log inside home directory to make sure that we dealing with the same problem.

Directory does not exist for read/write [/usr/lib/oracle/11.2/client64/lib/log]


Solution

$ sudo mkdir -p /usr/lib/oracle/11.2/client64/lib/log/diag/clients

$ sudo chmod 777 /usr/lib/oracle/11.2/client64/lib/log/diag/clients


Now, you can savely remove oradiag directory. And i already check , directory /usr/lib/oracle/11.2/client64/lib/log/diag/clients has no files in it.

Selasa, Juli 03, 2018

Is JWT necessary over HTTPS communication ?

Taken from : Is JWT necessary over HTTPS communication ?

Quotes:

"JWT is mainly an authentication system and .. but JWT does not increase the security level of HTTPS." pedrofb
"In short, we use JWT to validate our API calls it is nothing to do with HTTP or HTTPS" Vicky
In conclusion:

JWT dapat digunakan sebagai penyimpanan session data di mana session data tidak di simpan di server. Pada mekanisme cookie, browser dan application server bertukar session id sedangkan session data disimpan oleh application server dalam media penyimpanan file, memory, database atau lainnya. JWT dapat mencegah informasi session data diakses oleh pihak lain yang memiliki hak akses ke media penyimpanan session data pada application server.

JWT tidak mengamankan seluruh data yang kirim antar application server dan browser.

Jadi, bilamana terdapat issue terhadap hak akses ke media penyimpanan session data pada application server, JWT dapat digunakan sebagai salah satu alternatif solusi yang valid.