<div dir="ltr"><span style="font-size:12.8px">David,</span><div style="font-size:12.8px"><br></div><div style="font-size:12.8px">Whoa! Thank you man! We're on the same page with a lot of these. I'm going to check out the cryptography module. I hadn't heard of it, but I want to see it.</div><div style="font-size:12.8px"><br></div><div style="font-size:12.8px">The docstrings / autodoc are a priority. This is my first time using Sphinx, and I prioritized shipping *something* with minimal docs, but now I'm switching gears and working on a tutorial / more comprehensive docs.</div><div style="font-size:12.8px"><br></div><div style="font-size:12.8px">If was pulling the library down, and I saw the PyYAML dependency, it would cause me to pause. What's important to me now is showcasing the feature of grouping templates in a single file vs per file templates. At first, I started rolling my own system sort of based on Lektor content files but then decided to grab YAML off the shelf because I couldn't think of any hard reasons aside from the dependency not to. But I don't like the dependency and also want to work toward removing it.</div><div style="font-size:12.8px"><br></div><div style="font-size:12.8px">For the timestamp verification, your clock needs to sync with the NTP, so I did this to lower barriers to entry. The security concern didn't escape me either though. What would your thoughts be on turning timestamp (any, all) verification off when app.debug = True?<br></div><div style="font-size:12.8px"><br></div><div style="font-size:12.8px">I'll investigate blueprints further--I have not looked at them much. Other APIs that reserve a default URL put an underscore in front to mitigate against clobbering. A lot of Google App Engine APIs work like that. I don't think it's ideal, but don't know if shifting over to a blueprint is worth it. Excuse my ignorance on blueprints for the time-being.</div><div style="font-size:12.8px"><br></div><div style="font-size:12.8px">Where are those tests, David? :-) In all seriousness, they are something that I need and want to do, but have back burnered for now in favor developing against the samples (which have been ported from the official Amazon Java skills kit).</div><div style="font-size:12.8px"><br></div><div style="font-size:12.8px">Thank you again David, hope to hear more from you.</div><div class="" style="font-size:12.8px"></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, May 12, 2016 at 8:35 AM, David Baumgold <span dir="ltr"><<a href="mailto:david@davidbaumgold.com" target="_blank">david@davidbaumgold.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word"><div style="font-family:Helvetica,Arial;font-size:13px;color:rgba(0,0,0,1.0);margin:0px;line-height:auto">Oh, one more very important thing: where are the automated tests?!</div><div><div class="h5"> <br><p>On May 12, 2016 at 11:29:49 AM, David Baumgold (<a href="mailto:david@davidbaumgold.com" target="_blank">david@davidbaumgold.com</a>) wrote:</p> <blockquote type="cite"><span><div style="word-wrap:break-word"><div></div><div>
<div style="font-family:Helvetica,Arial;font-size:13px;color:rgba(0,0,0,1.0);margin:0px;line-height:auto">
Hey John, this looks nifty! However, I have a few comments for how
it can be improved:</div>
<div style="font-family:Helvetica,Arial;font-size:13px;color:rgba(0,0,0,1.0);margin:0px;line-height:auto">
<br></div>
<div style="font-family:Helvetica,Arial;font-size:13px;color:rgba(0,0,0,1.0);margin:0px;line-height:auto">
* You should use the “cryptography” module instead of
PyOpenSSL: <a href="https://cryptography.io" target="_blank">https://cryptography.io</a></div>
<div style="font-family:Helvetica,Arial;font-size:13px;color:rgba(0,0,0,1.0);margin:0px;line-height:auto">
* None of your classes or methods have docstrings! I suggest
writing docstrings, and using Sphinx’s autodoc extension to render
those docstrings in your documentation: <a href="http://www.sphinx-doc.org/en/stable/ext/autodoc.html" target="_blank">http://www.sphinx-doc.org/en/stable/ext/autodoc.html</a> </div>
<div style="font-family:Helvetica,Arial;font-size:13px;color:rgba(0,0,0,1.0);margin:0px;line-height:auto">
* What if I don’t want to use YAML? I suggest removing that
dependency, and exposing an API to fetch a template. That way, the
developer can put multiple templates in one YAML file the way you
have it set up, but it’s not required, and if the developer doesn’t
use YAML then it won’t be pulled in as a dependency.</div>
<div style="font-family:Helvetica,Arial;font-size:13px;color:rgba(0,0,0,1.0);margin:0px;line-height:auto">
* ASK_VERIFY_TIMESTAMP is set to False by default, but it’s
generally good practice to make code secure by default. That way, a
developer can intentionally and knowingly change the defaults to be
insecure for development purposes, but is less likely to leave them
insecure in production.</div>
<div style="font-family:Helvetica,Arial;font-size:13px;color:rgba(0,0,0,1.0);margin:0px;line-height:auto">
* Rather than setting a default ASK_ROUTE setting, why not
construct this as a Flask Blueprint, so the developer can attach it
to whatever URL he/she wants?</div>
<div style="font-family:Helvetica,Arial;font-size:13px;color:rgba(0,0,0,1.0);margin:0px;line-height:auto">
<br></div>
<div style="font-family:Helvetica,Arial;font-size:13px;color:rgba(0,0,0,1.0);margin:0px;line-height:auto">
Let me know if you’d like me to clarify some of these points. In
spite of my comments, I think this is a really nifty idea, and I
might want to try using it sometime!</div>
<div></div>
<div>
<br></div>
<div>David
Baumgold</div>
<br>
<p>On May 12, 2016 at 11:12:41 AM, John Wheeler
(<a href="mailto:jwheeler1@gmail.com" target="_blank">jwheeler1@gmail.com</a>)
wrote:</p>
<blockquote type="cite">
<div>
<div>
<div dir="ltr"><span>Hello everybody out there,</span>
<div><span><br></span></div>
<div><span>I've been working on a Flask extension, called
Flask-Ask, for programming Alexa skills on the Amazon Echo. I've
been working on this for a few weeks now and have a release pushed
up to pypi, samples, and documentation.</span></div>
<div><span><br></span></div>
<div><span>The Alexa service is based on its own request / response
model that uses JSON over HTTP. I made Flask-Ask's API similar to
Flask's in that regard with routing / parameter mapping, context
locals, and integration with Flask's template system.</span></div>
<div><span><br></span></div>
<div><span>The code and samples are available at</span></div>
<div><span><br></span></div>
<div><span><a href="https://github.com/johnwheeler/flask-ask" target="_blank">https://github.com/johnwheeler/flask-ask</a><br>
</span></div>
<div><span><br></span></div>
<div><span>The documentation is here</span></div>
<div><span><br></span></div>
<div><span><a href="http://flask-ask.readthedocs.io/en/latest/" target="_blank">http://flask-ask.readthedocs.io/en/latest/</a><br>
</span></div>
<div><span><br></span></div>
<div><span>I'd like to know what people think of the API and what
features they want. I'm working on a tutorial that shows how to
rapidly develop skills with Flask-Ask and <a href="http://ngrok.io" target="_blank">ngrok.io</a>, and I'm available for a Google
Hangout if you want to try and need help in the
interim.</span></div>
<div><span><br></span></div>
<div><span>John</span></div>
</div>
<span>_______________________________________________<br>
Flask mailing list<br>
<a href="mailto:Flask@python.org" target="_blank">Flask@python.org</a><br>
<a href="https://mail.python.org/mailman/listinfo/flask" target="_blank">https://mail.python.org/mailman/listinfo/flask</a><br></span></div>
</div>
</blockquote>
</div></div></span></blockquote></div></div></div></blockquote></div><br></div></div>