deepu-sasidharan

Deepu is a polyglot developer, Java Champion, and OSS aficionado. He mainly works with Java, JS, Rust, and Golang. He co-leads JHipster and created the JDL Studio and KDash. He's a Staff Developer Advocate at Okta. He is also an international speaker and a published author.

Staff Developer Advocate

Deepu K Sasidharan

Join us this October as we celebrate Hacktoberfest 2024 by encouraging developers to contribute to the open-source community.

We are excited to announce our inaugural [Authtoberfest 2024](https://authtoberfest.io/)!

![Authtoberfest 2024](https://images.ctfassets.net/23aumh6u8s0i/XGONROR1fr5aabZYKtkDC/3ef4d233bfbb1e79dcb1fcf755af2bb6/authtoberfest-logo.jpg)

Are you ready for Hacktoberfest? We are excited to participate in [Hacktoberfest 2024](https://hacktoberfest.com/), and we are calling all developers to join us in contributing to the open-source community.

Whether you're new to open source or an experienced contributor, this is your chance to give back, make a difference, and win some cool swag in the process.

At Auth0 by Okta, we believe in the power of community-driven development and open source. That’s why we’re proud to support and celebrate Hacktoberfest and help developers of all levels get involved. Let's code, collaborate, and contribute together!

![Authtoberfest 2024 T-shirt](https://images.ctfassets.net/23aumh6u8s0i/1PWpoxpdJtgsFDs9vx8jJL/118ee5e900b1653da2566238f8b2f60e/t-shirt-image.jpg)

This year, you have the chance to win a cool limited-edition T-shirt from us when you participate in Hacktoberfest and contribute to any of the projects in the Identity and Security space shortlisted by us. The first 100 valid submissions will get the T-shirt.

> A GitHub user with two accepted/merged PRs sending us the confirmation emails and the Hacktoberfest badge will be considered a valid submission.

Visit the [Authtoberfest website](https://authtoberfest.io/) to learn more about the event and how you can participate.

Authtoberfest 2024 is Here!

Calah Vargas

Calah Vargas is the Associate Manager of Product Led Growth, focusing on nonprofits, startups, and partnerships. She works on product marketing and customer marketing initiatives. Outside work, you can find her cooking, trying new restaurants, and traveling with friends and family.

Associate Manager, PLG

How Open-Sourced Akto Uses Auth0 to Secure APIs

The security startup, [Akto](https://www.akto.io/), allows users to discover, test, and find API vulnerabilities in a minute. Security and engineering teams can evaluate their APIs utilizing the [Akto platform](https://docs.akto.io/readme) by taking API inventory, testing and finding business logic vulnerabilities, and monitoring issues in run-time. With 30 million developers using APIs every day, the Akto team discovered an opportunity to address the constant addition and modification of APIs and protect their customers from harmful data leaks. 


<include src="QuoteCard" body="API security is where people are lagging. There is no place to get your API inventory, and there’s no place to do API testing in an automated way." name="Ankita Gupta" title="CEO & Co-Founder" team="" company="Akto" />


In our sit-down with the team, [Ankita Gupta](https://www.linkedin.com/in/ankita-gupta-89214515), CEO and Co-founder, shared more about Akto’s product-led growth model that helps their customers jump into the platform and start for free in a minute. “From day one, we wanted to make it a product-led product. Early on, we realized that it’s more of a security engineer problem than a CISO problem, so we needed a bottom-up model.” (Fun fact: Auth0 also offers a product-led growth model that helps our customers get started immediately. We are always delighted to hear when other companies are doing the same!) 

Ankita shared more about Akto’s decision to [open source](https://www.akto.io/blog/introducing-akto-open-source) and everything they’ve developed so far. The team saw that their customers wanted to contribute, add custom tests, or add custom rules for their business case, so open source made sense. Once the results were in, they were met with customer praise and felt customers were more comfortable with customization. The Akto team strongly believes that open sourcing will help developers and security teams around the world secure their application APIs from attacks. [Ankush Jain](https://www.linkedin.com/in/ankushgjain?trk=public_post_share-update_actor-text), Co-Founder and CTO, shared, “We are building the platform by being transparent to the security community and getting the community’s help in building the product.” 

## Letting Auth0 Take Care of the Login Box

When the Akto team was building their product, they knew that login flow was one of the biggest problems they or any startup will have, but they didn’t want to build it themselves. “It’s been a very smooth journey for us; we don’t have to think of anything around login now,” said Ankita. They use Auth0 for their primary login page, where customers can sign up and start their onboarding journey. A few features that make this possible and frictionless are [email verification](https://auth0.com/docs/manage-users/user-accounts/verify-emails), [Social Login](https://auth0.com/learn/social-login), and [password recovery](https://auth0.com/learn/password-reset). They also built a custom login in-house, but compared to their Auth0 login flow, they saw reliability issues, especially with fake emails. With Auth0, they were not only able to streamline their customer onboarding experience but also receive accurate data for their business. 

![Checklist](https://images.ctfassets.net/23aumh6u8s0i/6TXxpAfYPc1XwopbYH5Mx8/132e780e64563d54464cd3af0884047f/Akto_Checklist_-1.png)

## Join Akto and the other 1700+ startups that benefit from Auth0

The [Auth0 for Startups](https://auth0.com/startups/profiles) program brings the simplicity, extensibility, and scalability of Auth0 to qualifying startups – **all free for one year**. We are passionate about helping startups get their applications up and running while we take care of identity needs. So much so that we recently [expanded our eligibility](https://auth0.com/blog/auth0-for-startups-expands-eligibility/) by increasing the funding limit to $5M, doubling our previous cap. If you have any questions, you can find us at [startups@auth0.com](mailto:startups@auth0.com) or apply [here](https://autheco.atlassian.net/servicedesk/customer/portal/4/group/9/create/53). 

A special thank you to Ankita, Ankush, and the entire Akto team. If your organization wants to secure your APIs in a minute, [get started](https://github.com/akto-api-security/akto) today. 

_This profile is the second installment in our series highlighting members of the Auth0 for Startups program. The Auth0 for Startups program began in 2020 and has since worked with 1700+ startups._


Startup Stories: Akto

auziros:mckenzie-mayer

Customer Identity (CIAM) Product Comms lead, driving collective storytelling across Okta and Auth0. Making technology accessible for everyone.

Customer Identity Product Comms Lead at Okta

McKenzie Mayer

Auth0 provides global community of 30 million developers, educators, and businesses with simple, secure identity management


**LONDON - July 29, 2019 -** [Auth0](https://auth0.com/), a global leader in Identity-as-a-Service (IDaaS), today announced it has been selected as the identity management platform of choice for Arduino®, the world's leading open-source hardware and software ecosystem. With a global community of 30 million "makers", [Arduino](https://www.arduino.cc/) will use Auth0 to replace its own Single Sign On solution for all of its public facing web properties, including Arduino Create and community apps.

Arduino is on a mission to enable anyone to innovate by making complex technology simple to use. Its simple and accessible electronic boards, open-source software, and user community have powered thousands of projects, [from everyday objects to complex scientific instruments](https://create.arduino.cc/projecthub). Educational institutions around the world also use Arduino as a resource for STEAM programmes &ndash; integrating Science, Technology, Engineering, Arts, and Math.

Arduino discovered its homegrown authentication solution would not scale to meet the rapidly developing needs of its growing global community, and reached out to Auth0. In addition to Single Sign On, Arduino will take advantage of Auth0's new [Universal Login](https://auth0.com/docs/universal-login), which enables developers to completely customise their branded authentication experiences quickly, and [Device Flow](https://auth0.com/device-flow/) for browserless or input-constrained devices.

"We wanted a robust platform to replace our SSO solution but also give us the flexibility to do cool, new things in the device authentication space. Auth0 is a brand we admire, and their API-based approach makes it easy to migrate our login data in a way that's completely transparent for the customer," said Gianluca Varisco, CISO at Arduino. "We are excited to welcome them to our global community."

Auth0 and Arduino plan to leverage the combined power of their communities and events, and explore a technical partnership in the IoT domain. Auth0 currently secures more than 2.5 billion logins per month for 21 million users.

"I have been using Arduino for years as the brain for my personal projects, so working with them in a business capacity is really rewarding," said Eugenio Pace, CEO and co-founder of Auth0. "When you empower the developer with simple, powerful tools, the whole business benefits. We are excited by the reach of the Arduino community and aligned in our mission to help the developer in their journey to innovate."

<include src="asides/AboutAuth0" />

### Media Contacts:

Mark Fowler<br/>
Racepoint Global for Auth0, EMEA<br/>
[auth0@racepointglobal.com](mailto:auth0@racepointglobal.com)<br/>
+44 (0) 77 1124 4113


Arduino Selects Auth0 as Standardized Login for Open-Source Ecosystem

ramiro

I am an internet guy who loves reading and asking questions—those are the two things that helped me the most as an autodidact 🤓. If I am not learning about the latest trends in digital marketing or listening to house music, you can probably find me watching a tennis tournament. And also, I manage Social Media at Auth0 ✌️

Manager, Social Media

Ramiro Nunez Dosio

Our 10 most-popular developer posts in 2018 ranging from front-end development to open source contributions.



Time flies when you are having fun. It's December already and we are getting ready to wrap up this year. 2018 was a prolific year for the Auth0 blog: we published more than 200 posts (😱) where we tackled a diverse amount of topics: frontend and backend technologies, data breaches, GDPR, Cybersecurity, Company Culture, and of course, Identity.

We believe looking back is key to look ahead. That is why this week, we are going to take a look back at the best and most impactful posts we have published in 2018.

One article wouldn't be enough to review this amazing year, that's why we have decided to split this year in review into 3 parts: Developer Posts, [Security Posts](https://auth0.com/blog/10-most-popular-security-posts-in-2018/), and [Identity Posts](https://auth0.com/blog/10-most-popular-identity-posts-in-2018/).

Without much further ado, here's the roundup of our 10 most-popular developer posts this year!

![Auth0's 10 Most-Popular Developer Posts](https://images.ctfassets.net/23aumh6u8s0i/6d6NAZbouw2Vm6KKuUxGkp/332d039ec84578561690ab2702ec30bf/auth0-blog-best-of-2018-developer-posts)

## <a name="Auth0s10Most-PopularDeveloperPostsin2018-How-tosTutorialsandMor"></a>Auth0's 10 Most-Popular Developer Posts in 2018 - How-to's, Tutorials, and More

> The following posts are not listed in any particular order.

1. <a href="#TheCompleteGuideToDeployingJavaScriptApplications-Part1" target="_self">The Complete Guide To Deploying JavaScript Applications - Part 1: Database, and API Deployment</a>
2. <a href="#ReactiveProgramminginPythonhttps" target="_self">Reactive Programming in Python</a>
3. <a href="#ReactTutorial" target="_self">React Tutorial: Building and Securing Your First App</a>
4. <a href="#DevelopingWebAppswithASP.NETCore2.0andReact-Part1https" target="_self">Developing Web Apps with ASP.NET Core 2.0 and React - Part 1</a>
5. <a href="#UsingPythonFlaskandAngulartoBuildModernWebApps-Part1https" target="_self">Using Python, Flask, and Angular to Build Modern Web Apps - Part 1</a>
6. <a href="#Vue.jsKanbanBoard" target="_self">Vue.js Kanban Board: The Development Process</a>
7. <a href="#BestPracticesinAndroidDevelopmenthttps" target="_self">Best Practices in Android Development</a>
8. <a href="#Real-TimeChartsusingAngularD3andSocket.IOhttps" target="_self">Real-Time Charts using Angular, D3, and Socket.IO</a>
9. <a href="#DevelopingReal-TimeWebApplicationswithServer-SentEventshttps" target="_self">Developing Real-Time Web Applications with Server-Sent Events</a>
10. <a href="#AFirstTimersGuidetoanOpenSourceProjecthttps" target="_self">A First Timers Guide to an Open Source Project</a>

## <a name="TheCompleteGuideToDeployingJavaScriptApplications-Part1"></a>1. [The Complete Guide To Deploying JavaScript Applications - Part 1: Database, and API Deployment](https://auth0.com/blog/the-complete-guide-to-deploying-javascript-applications-part-1/)

Atwood's law states that _Any application that can be written in JavaScript, will eventually be written in JavaScript._ In 2018, eleven years after this law was proposed, JavaScript is now the most popular language in the world. In this tutorial, you'll learn how to deploy your JavaScript applications to different cloud platforms such as Google Cloud, Microsoft Azure, Netlify, and others.

<AmpContent>
<a href="https://auth0.com/blog/the-complete-guide-to-deploying-javascript-applications-part-1/">
  <amp-img width="1.5" height="1" layout="responsive" src="https://images.ctfassets.net/23aumh6u8s0i/53GC5Ijur7QUmJR6wFiEOr/168205ab0c6003fa00829e1155e70236/awscreatetable" alt="Amazon DynamoDB"></amp-img>
</a>

</AmpContent>

<NonAmpContent>

<div class="clickable-image">
  <a href="https://auth0.com/blog/the-complete-guide-to-deploying-javascript-applications-part-1/">
  <img class="no-lightbox" src="https://cdn.auth0.com/blog/jsdeploy/awscreatetable.png" alt="Amazon DynamoDB"/>
  </a>
</div>

</NonAmpContent>

## <a name="ReactiveProgramminginPythonhttps"></a>2. [Reactive Programming in Python](https://auth0.com/blog/reactive-programming-in-python/)

In this tutorial, you’ll be learning how to use the RxPy library to create asynchronous and event-based programs by implementing observables, observers/subscribers, and subjects. You will start by getting our data stream from the GitHub API with a Tornado web socket and then you will filter and process it asynchronously. [In this GitHub repository](https://github.com/valerybriz/RxGithubSearcher), you can find the code that we are going to create in this tutorial.

<AmpContent>
<a href="https://auth0.com/blog/reactive-programming-in-python/">
  <amp-img width="1.5" height="0.7" layout="responsive" src="https://images.ctfassets.net/23aumh6u8s0i/4nxuqP7IqV1gHEsO9abqjL/9a49e46dab847b8f010d9b3ed92d0609/combine-latest" alt="RxPy combineLatest marble diagram"></amp-img>
</a>

</AmpContent>

<NonAmpContent>

<div class="clickable-image">
  <a href="https://auth0.com/blog/reactive-programming-in-python/">
  <img class="no-lightbox" src="https://cdn.auth0.com/blog/10-most-read-technical-articles-in-2018/combine-latest.png" alt="RxPy combineLatest marble diagram"/>
  </a>
</div>

</NonAmpContent>

## <a name="ReactTutorial"></a>3. [React Tutorial: Building and Securing Your First App](https://auth0.com/blog/react-tutorial-building-and-securing-your-first-app/)

In this article, you will learn the basic concepts of React. After that, you will have the chance to see React in action while creating a simple Q&A (Questions & Answers) app that relies on a backend API. If needed, you can check [this GitHub repository to check the code that supports this article](https://github.com/auth0-blog/react-tutorial). Have fun!

<AmpContent>
<a href="https://auth0.com/blog/react-tutorial-building-and-securing-your-first-app/">
  <amp-img width="1.5" height="0.95" layout="responsive" src="https://images.ctfassets.net/23aumh6u8s0i/SMBzTsEDRhGQGjRdfOXat/abf9d57a0f2163d77c95c30aaaf0204c/q-and-a-app" alt="React Q&A app"></amp-img>
</a>

</AmpContent>

<NonAmpContent>

<div class="clickable-image">
  <a href="https://auth0.com/blog/react-tutorial-building-and-securing-your-first-app/">
  <img class="no-lightbox" src="https://cdn.auth0.com/blog/react-tutorial/q-and-a-app.png" alt="React Q&A app"/>
  </a>
</div>

</NonAmpContent>

## <a name="DevelopingWebAppswithASP.NETCore2.0andReact-Part1https"></a>4. [Developing Web Apps with ASP.NET Core 2.0 and React - Part 1](https://auth0.com/blog/developing-web-apps-with-asp-dot-net-core-2-dot-0-and-react-part-1/)

In this series of posts, you will build a Web application based on ASP.NET Core 2.0 and React. To solve the identity management feature, you will integrate this stack with [Auth0](https://auth0.com/). In this first part of the series, you are going to use ASP.NET Core 2.0 to develop the APIs of your application. [The final code can be found in this GitHub repository](https://github.com/andychiare/netcore2-auth0).

<AmpContent>
<a href="https://auth0.com/blog/developing-web-apps-with-asp-dot-net-core-2-dot-0-and-react-part-1/">
  <amp-img width="1.5" height="1" layout="responsive" src="https://images.ctfassets.net/23aumh6u8s0i/3VdEYdUZjg1dZ8CjKW7FFy/e6dacc131f59c2ab0459cb72a6addb6a/creating-project" alt="Creating an ASP.NET Core Web App with Visual Studio"> </amp-img>
</a>

</AmpContent>

<NonAmpContent>

<div class="clickable-image">
  <a href="https://auth0.com/blog/developing-web-apps-with-asp-dot-net-core-2-dot-0-and-react-part-1/">
  <img class="no-lightbox" src="https://cdn.auth0.com/blog/dotnet-core-react/creating-project.png" alt="Creating an ASP.NET Core Web App with Visual Studio"/>
  </a>
</div>

</NonAmpContent>

## <a name="UsingPythonFlaskandAngulartoBuildModernWebApps-Part1https"></a>5. [Using Python, Flask, and Angular to Build Modern Web Apps - Part 1](https://auth0.com/blog/using-python-flask-and-angular-to-build-modern-apps-part-1/)

In this series, you will learn how to create modern web applications with Python, Flask, and Angular. You will use this stack to build a single-page application (SPA) and a backend API to expose exams and questions so users can test their knowledge regarding different technologies. [In this GitHub repository](https://github.com/auth0-blog/python-flask-angular-1), you can find the final code created throughout the first part of the series.

<AmpContent>
<a href="https://auth0.com/blog/using-python-flask-and-angular-to-build-modern-apps-part-1/">
  <amp-img width="1.5" height="0.75" layout="responsive" src="https://images.ctfassets.net/23aumh6u8s0i/1IfSLdFZd6LkXpiDgD6GWX/30ef9e44980a5b9fd549b8115db508d3/fetching-data" alt="Using Angular to fetch data from a Flask application"></amp-img>
</a>

</AmpContent>

<NonAmpContent>

<div class="clickable-image">
  <a href="https://auth0.com/blog/using-python-flask-and-angular-to-build-modern-apps-part-1/">
  <img class="no-lightbox" src="https://cdn.auth0.com/blog/flask-angular/fetching-data.png" alt="Using Angular to fetch data from a Flask application"/>
  </a>
</div>

</NonAmpContent>

## <a name="Vue.jsKanbanBoard"></a>6. [Vue.js Kanban Board: The Development Process](https://auth0.com/blog/vuejs-kanban-board-the-development-process/)

In this article, you will use Vue.js (the progressive
JavaScript framework) to build an interactive Kanban board in the browser. The complete source code for [this project is available on a GitHub repository](https://github.com/elkdanger/kanban-board) and [there is a demo available online](https://kanban.elkdanger.co.uk) of the finished project.

<AmpContent>
<a href="https://auth0.com/blog/vuejs-kanban-board-the-development-process/">
  <amp-img width="2" height="1" layout="responsive" src="https://images.ctfassets.net/23aumh6u8s0i/34JnBo0Yc1RwsWU3fPhGgy/68881fae75371f2ef43ba9cf3b6913ac/new-item-component" alt="Kanban board preview"></amp-img>
</a>

</AmpContent>

<NonAmpContent>

<div class="clickable-image">
  <a href="https://auth0.com/blog/vuejs-kanban-board-the-development-process/">
  <img class="no-lightbox" src="https://cdn.auth0.com/blog/vuejs-kanban/new-item-component.png" alt="Kanban board preview"/>
  </a>
</div>

</NonAmpContent>

## <a name="BestPracticesinAndroidDevelopmenthttps"></a>7. [Best Practices in Android Development](https://auth0.com/blog/best-practices-in-android-development/)

Best practices are simply professional standards that are acceptable in a field. In this post, you will look at such practices as it relates to Android development.

<AmpContent>
<a href="https://auth0.com/blog/best-practices-in-android-development/">
  <amp-img width="1" height="0.96" layout="responsive" src="https://images.ctfassets.net/23aumh6u8s0i/xUNLk6pd2SlY3RpC03DxS/aea85be3d402071f014e2f1aa1149106/viewmodel-lifecycle" alt="The lifecycle of an Activity as compared to that of a ViewModel"></amp-img>
</a>

</AmpContent>

<NonAmpContent>

<div class="clickable-image">
  <a href="https://auth0.com/blog/best-practices-in-android-development/">
  <img class="no-lightbox" src="https://cdn.auth0.com/blog/android-best-practices/viewmodel-lifecycle.png" alt="The lifecycle of an Activity as compared to that of a ViewModel"/>
  </a>
</div>

</NonAmpContent>

## <a name="Real-TimeChartsusingAngularD3andSocket.IOhttps"></a>8. [Real-Time Charts using Angular, D3, and Socket.IO](https://auth0.com/blog/real-time-charts-using-angular-d3-and-socket-io/)

Charts create some of the most catchy sections on any business applications. A chart that updates in real time is even more catchy/useful and adds huge value to users. Here, you will see how to create real-time charts using Angular, D3, and Socket.IO. You can find the final code produced throughout this article in [this GitHub repository](https://github.com/auth0-blog/angular-d3-socketio).

<AmpContent>
<a href="https://auth0.com/blog/real-time-charts-using-angular-d3-and-socket-io/">
  <amp-img width="1.6" height="1" layout="responsive" src="https://images.ctfassets.net/23aumh6u8s0i/5KHFbR84G0MCW5LuWqjRkl/0eef204a5b72bb81cf017ed7c08766b2/d3-charts-with-static-data" alt="Showing a D3 chart with static data in an Angular application."></amp-img>
</a>

</AmpContent>

<NonAmpContent>

<div class="clickable-image">
  <a href="https://auth0.com/blog/real-time-charts-using-angular-d3-and-socket-io/">
  <img class="no-lightbox" src="https://cdn.auth0.com/blog/angular-d3-socketio/d3-charts-with-static-data.png" alt="Showing a D3 chart with static data in an Angular application."/>
  </a>
</div>

</NonAmpContent>

## <a name="DevelopingReal-TimeWebApplicationswithServer-SentEventshttps"></a>9. [Developing Real-Time Web Applications with Server-Sent Events](https://auth0.com/blog/developing-real-time-web-applications-with-server-sent-events/)

Server-Sent Events (SSE) is a standard that enables Web servers to push data in real time to clients. In this article, we will learn how to use this standard by building a flight timetable demo application with React and Node.js. However, the concepts you will learn following this tutorial are applicable to any programming language and technology. [You can find the final code of the application in this GitHub repository](https://github.com/andychiare/server-sent-events).

<AmpContent>
<a href="https://auth0.com/blog/developing-real-time-web-applications-with-server-sent-events/">
  <amp-img width="2.1" height="1" layout="responsive" src="https://images.ctfassets.net/23aumh6u8s0i/7MwSxNH2e21wVVivNZQZlk/4355791a943ddbaeaf02a8fd4a9bb9a9/developing-real-time-web-applications" alt="Real-time flights tracker timetable"></amp-img>
</a>

</AmpContent>

<NonAmpContent>

<div class="clickable-image">
  <a href="https://auth0.com/blog/developing-real-time-web-applications-with-server-sent-events/">
  <img class="no-lightbox" src="https://cdn.auth0.com/blog/server-sent-events/developing-real-time-web-applications.png" alt="Real-time flights tracker timetable"/>
  </a>
</div>

</NonAmpContent>

## <a name="AFirstTimersGuidetoanOpenSourceProjecthttps"></a>10. [A First Timers Guide to an Open Source Project](https://auth0.com/blog/a-first-timers-guide-to-an-open-source-project/)

On open source in general, contributions by first-timers and code newbies are encouraged, because that is the essence of open source: Learning and collaboration, together, for the benefit of everyone. It can be scary and a little overwhelming the first time, but there are projects and [events like Hacktoberfest](https://auth0.com/blog/celebrate-hacktoberfest-with-auth0/) out there tailored to helping you to get involved and gain confidence in making your first contribution.

<AmpContent>
<a href="https://auth0.com/blog/a-first-timers-guide-to-an-open-source-project/">
  <amp-img width="1.86" height="1" layout="responsive" src="https://images.ctfassets.net/23aumh6u8s0i/2gqWE52GkPXd9SGFSNWjnC/95fd686c507fb7e58d3ce19975b68c87/step-2-github-generates-a-fork-repository-for-you" alt="GitHub will generate a copy of the repository"></amp-img>
</a>

</AmpContent>

<NonAmpContent>

<div class="clickable-image">
  <a href="https://auth0.com/blog/a-first-timers-guide-to-an-open-source-project/">
  <img class="no-lightbox" src="https://cdn.auth0.com/blog/a-first-timers-guide-to-an-open-source-project/step-2-github-generates-a-fork-repository-for-you.png" alt="GitHub will generate a copy of the repository"/>
  </a>
</div>

</NonAmpContent>

## <a name="WhatsNex"></a>What's Next?

We are already preparing our content pipeline for 2019. The world of technology keeps evolving very fast and it's our duty to keep our blog fresh and updated with all its upcoming trends and changes. We have a commitment to keep improving the quality of our products, services, and content. We'd like to take this opportunity to thank all of our readers for their consistent support and feedback.

Is there anything that you'd like us to cover in 2019? Any particular trend, topic, or technique? Please let us know in the comments below or through social media ([Twitter](https://twitter.com/auth0), [LinkedIn](https://www.linkedin.com/company/auth0)). As always, you can subscribe to our newsletter to receive a weekly digest of our blog content.

Happy Holiday Season!

<include src="asides/AboutAuth0" />


10 Most-Popular Developer Posts in 2018

a8912bdc06ed413351524360cc642cf2_400x400 avatar

a8912bdc06ed413351524360cc642cf2_400x400

Guest Author

Peter Shaw

Learn about Nancy, an open-source and lightweight alternative to the ASP.NET MVC framework.

Meet Nancy, a Lightweight Web Framework for .NET

kim-noel

Former Auth0 Employee

Kim Noel

What do apple picking, beer festivals, ghosts and goblins, and open-source all have in common?



We at Auth0 are excited to announce our participation in this years Hacktoberfest!

![Hacktoberfest 2018 logo](https://images.ctfassets.net/23aumh6u8s0i/64mee50TQDaqpOjwCo80bw/02fe61e51cd3a3935267e45bbbc652aa/hacktoberfest_logo)

## Hold up — What's Hacktoberfest?

[DigitalOcean](https://digitalocean.com/), [GitHub](https://github.com/), and - new for this year - [Twilio](https://www.twilio.com/) have partnered up for a month-long celebration of open-source software (OSS). This takes place from October 1st to October 31st inclusive, and you can sign up at any time during the month. This event facilitates the ability to be a part of a growing movement to encourage and contribute to open-source software. 

<include src="TweetQuote" quoteText="If you have never contributed to an open-source project before, there is a #hacktoberfest My-First-PR Starter Project at https://my-first-pr.github.io/hacktoberfest-2018/ available that you can use to practice making changes and creating pull requests"/>

Have you been looking for an opportunity to contribute to an open-source project? Had a hard time getting started? Been searching for a sign? _This is your sign!_ This is your chance to give back to the amazing projects that you and others alike use on a daily basis. Take advantage of this opportunity to help build a stronger product and have your voice heard! No contribution is too small: bug fixes to documentation, updates to translations, and much more are valid ways of participating.  

This month we get to see a lot of extra support to help folks get involved in open-source software and it’s with great enthusiasm we want people to take advantage of this! There are a large number of resources available to help you find a project and make your first contribution. Or, if it’s not your first, your next contribution. There are [many stories to read](https://medium.com/@thepriefy/my-first-github-pull-request-and-hacktoberfest-2017-a83622020390), and articles outlining [ways to get involved](https://medium.freecodecamp.org/i-just-got-my-free-hacktoberfest-shirt-heres-a-quick-way-you-can-get-yours-fa78d6e24307).

And guess what? This event has been taking place, every October, for 5 years!

_Happy five years of Hacktoberfest!_

A huge shoutout to DigitalOcean on a happy 5 years of Hacktoberfest. 

## How Do I Get Involved? 

First of all, sign up to the event on the [DigitalOcean Hacktoberfest site](https://hacktoberfest.digitalocean.com/), then head over to GitHub and take a [look through the projects](https://github.com/topics/hacktoberfest). These are all the open-source projects on GitHub that have the designated ‘hacktoberfest’ label. Another way to get started might be to look at the projects you use every day - they may just be open source!

If you have never contributed to an open-source project before, there is a [Hacktoberfest My-First-PR Starter Project](https://auth0.com/blog/a-first-timers-guide-to-an-open-source-project/) available that you can use to practice making changes and creating pull requests, before progressing to adding real value to other repositories that people depend on every day.

Furthermore, if you’re interested in [hosting your own Hacktoberfest event](https://hacktoberfest.digitalocean.com/eventkit), there is an event kit containing a guide on how to get started and run your event in the best possible way. You don’t have to be an expert or professional to host an event, just the passion and the time to get organized!

## It’s Not Just About the Swag 

Did someone say swag? Yes, there is swag! Swag is great and if you are fortunate enough to be a recipient of one of the exclusive Hacktoberfest t-shirts, we encourage you to wear it with pride knowing you were a part of a great movement for OSS. _That_ is why we encourage you to participate and earn the exclusive 2018 Hacktoberfest t-shirt! 

To qualify for your t-shirt, you just have to make 5 valid contributions as pull requests (PRs) into any public GitHub repository (your pull requests don’t have to be merged in that time). Of note is that it's OK to submit one PR to fix a typo, but submitting 5 PRs to remove extra whitespace here and there is not. T-shirts get sent out after October and can take a few weeks to a few months to arrive. 

Therefore, let’s take a quick look: submit **5 or more pull requests** and get an exclusive Hacktoberfest t-shirt courtesy DigitalOcean, GitHub & Twilio.

<include src="TweetQuote" quoteText="All of our #hacktoberfest projects can be found on our GitHub organization. Join us over in https://community.auth0.com if you have any questions or feedback."/>

## What If I Submit to an Auth0 Project?

At Auth0, [we’re heavily invested in the open-source software movement](https://auth0.com/opensource). Look out for a kickass 2018 Hacktoberfest t-shirt courtesy of the awesome Auth0 team, along with a psychedelic Auth0 sticker pack!

All of our qualifying projects can be found on [our primary GitHub organization](https://github.com/auth0), as well as [our community organization](https://github.com/auth0-community). Join us over in [community.auth0.com](https://community.auth0.com/) if you have any questions or feedback.

To notify us of your contribution(s), please submit your details in this [Google form]( https://goo.gl/forms/sNo604XkIMhCX8i03) and we will follow up at the end of the event with your swag! 

## Share Your Journey!
We want to hear how your Hacktoberfest journey is going, so make sure to use the #Hacktoberfest hashtag and, if you’re working with Auth0 this month, use #Auth0OSS. We will be re-sharing our favorites! 

## Have an Open-Source Project, and Looking for Contributions?
Share it in our [Community Corner](https://community.auth0.com/c/community-corner)! If you built something with Auth0 share it in our [Show Your Auth0 section](https://community.auth0.com/c/auth0-community/show-auth0/16). Inspire others and be inspired! Celebrate your hard work and let your project be shared with other amazing developers. 


Celebrate Hacktoberfest 2018 with Auth0!

956290?s=200

R&D Content Engineer

Luke Oliff

Open source is the past, present, and future. Pay it forward by learning how to make your first contribution with Auth0.

A First Timers Guide to an Open Source Project

1097492785caf9ffeebffeb624202d8f?s=200 avatar

1097492785caf9ffeebffeb624202d8f?s=200

Prosper is a great speaker, community leader, open source hacker, technical consultant, and a fervent Developer Advocate. He is a full-stack software engineer who has worked on biometric, health and developer tools. Prosper recently co-founded a startup called Eden that’s focused on improving the quality of lives in Nigeria and currently leads the engineering team. He also co-founded forloop, the largest developer community in Africa.

Prosper Otemuyiwa

Laravel 5.7 has just been released! What's new? What improvements were made? Learn how to build better PHP applications with this new release.



**TL;DR:** **Laravel 5.7** is a major release to, at time of writing, the most popular PHP framework on GitHub. Furthermore, [Laravel Nova](https://nova.laravel.com) was also released. In this article, I'll cover the new features in Laravel 5.7 and several other changes and deprecations.

<blockquote class="twitter-tweet" data-lang="en"><p lang="en" dir="ltr">🎊 Laravel 5.7.0 has been released! Includes support for email verification, guest policies, dump-server, improved console testing, notification localization and more! <a href="https://t.co/DIISmfm5oP">https://t.co/DIISmfm5oP</a> 🎊</p>&mdash; Laravel (@laravelphp) <a href="https://twitter.com/laravelphp/status/1036971212449243136?ref_src=twsrc%5Etfw">September 4, 2018</a></blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>


## What's new in Laravel 5.7?

### 1. Symfony Dump Server Integration

Marcel Pociot, authored a package called [laravel-dump-server](https://github.com/beyondcode/laravel-dump-server). This package provides you a dump server, that collects all your `dump` call outputs. It's inspired by [Symfony's Var-Dump Server](https://symfony.com/doc/current/components/var_dumper.html#the-dump-server).

Laravel 5.7 now officially ships with the _laravel_dump-server_ package and makes it available via the Artisan command:

```bash
php artisan dump-server
```

All `dump` calls will be displayed in the console window once the server has started.

![Laravel - Symfony Dump Server Integration](https://images.ctfassets.net/23aumh6u8s0i/6ZdDoNQrq8O2YAJG94bCoA/3b99720eb2119591f1d8546e4fc8f73d/laravel-dump-server)
_Source: murze.be_

### 2. Better Support For Filesystem

Laravel 5.7 ships with two new methods for reading and writing streams in the filesystem. They are `readStream` and `writeStream` methods for reading and writing streams respectively as shown in the example below:

```php
Storage::disk('s3')->writeStream(
    'new-package.zip',
    Storage::disk('local')->readStream('local-package.zip')
);
```

### 3. Improved Artisan Command Testing

Laravel 5.7 provides a better approach for testing artisan commands.

<blockquote class="twitter-tweet" data-lang="en"><p lang="en" dir="ltr">ICYMI Last week a new PR was merged into laravel 5.7 with a neat way for testing Artisan commands, check details here: <a href="https://t.co/36f9FbAhBI">https://t.co/36f9FbAhBI</a> <a href="https://t.co/pLC3sVLrJP">pic.twitter.com/pLC3sVLrJP</a></p>&mdash; Mohamed Said🐋 (@themsaid) <a href="https://twitter.com/themsaid/status/1033954657226420224?ref_src=twsrc%5Etfw">August 27, 2018</a></blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>

Check out the example below:

This is an Artisan command:

```php
Artisan::command('hackathon-starter:init', function () {
    $project = $this->ask('What type of project do you want to build?');

    $this->line('Initializing...');

    $answer = $this->choice('Which language do you program in?', [
        'pwa-on-steroids',
        'pwa-normal',
        'pwa-on-fire',
    ]);

    $this->line('Installing...');
});
```

You may now test the command above with the slick test approach below:

```php
/**
 * Test a console command.
 *
 * @return void
 */
public function test_console_command()
{
    $this->artisan('hackathon-starter:init')
         ->expectsQuestion('What type of project do you want to build?', 'PWA')
         ->expectsOutput('Initializing..')
         ->expectsQuestion('Please specify the type of PWA', 'pwa-on-fire')
         ->expectsOutput('Installing...')
         ->assertExitCode(0);
}
```


<include src="TweetQuote" quoteText = "Laravel 5.7 provides a better approach for testing artisan commands."/>

### 4. Multi-Lingual Support for Notifications

In Laravel 5.7, you can now send notifications in other locales, apart from the current language.

The `Illuminate\Notifications\Notification` class offers a `locale` method that can be invoked to set the preferred language.

```php
  $user->notify((new EmailSent($email))->locale('zh'));
```

```php
  Notification::locale('zh')->send($users, new EmailSent($email));
```

### 5. Paginator

By default, Laravel provides three links on each side of the primary paginator links.

In Laravel 5.7, there's a new option, `onEachSide`, to enable customization of the number of links displayed on both sides.

``` html  

 {{ $paginator->onEachSide(7)->links() }}

```

### 6. More Options for Guest Policies

By default, authorization gates and policies return _false_ for guest visitors to your application. In this new release, you can now allow unauthenticated visitors to pass through authorization checks by declaring an "optional" type-hint or supplying a `null` default value for the user argument.

```
Gate::define('modify-sheet', function (?User $user, Sheet $sheet) {
    // ...
});
```

### 7. Optional Email Verification

Laravel 5.7 provides an optional email verification feature. An `email_verified_at` timestamp column has to be added to the user's table migration for this feature to work as intended.

If you want new users to verify their email, the `User` model needs to implement the `MustVerfifyEmail` interface.

```php
<?php

namespace App;

use Illuminate\Notifications\Notifiable;
use Illuminate\Contracts\Auth\MustVerifyEmail;
use Illuminate\Foundation\Auth\User as Authenticatable;

class User extends Authenticatable implements MustVerifyEmail
{
    // ...
}
```

The newly registered users will receive an email containing a signed verification link. Once the user clicks the link, the app will automatically update the database and redirect the user to the intended location.

This feature also ships with a `verified` middleware for situations where you need to protect certain app routes from only verified members.

```php
  'verified' => \Illuminate\Auth\Middleware\EnsureEmailIsVerified::class,
```

### 8. Better Support for Development Errors

**Joseph Silber** submitted a PR that allows Laravel 5.7 to provide a clear and concise message when a non-existent method is called on a model.

<blockquote class="twitter-tweet" data-lang="en"><p lang="en" dir="ltr">Ever mistyped a method on an Eloquent model and got a cryptic error saying that the method doesn&#39;t exist *on the query builder* 😳<br><br>Well, in <a href="https://twitter.com/laravelphp?ref_src=twsrc%5Etfw">@laravelphp</a> 5.7 you&#39;ll now get a clear, concise message saying that the method doesn&#39;t exist on the model 👌<a href="https://t.co/uKAxbIVdmv">https://t.co/uKAxbIVdmv</a> <a href="https://t.co/aWgQ8zr2ak">pic.twitter.com/aWgQ8zr2ak</a></p>&mdash; Joseph Silber (@joseph_silber) <a href="https://twitter.com/joseph_silber/status/1028768236417036288?ref_src=twsrc%5Etfw">August 12, 2018</a></blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>

### 9. URL Generator & Callable Syntax

Laravel 5.7 now supports callable array syntax for controller actions that generate URLs.

_Before Laravel 5.7_

```php
$url = action('FoodController@index');

$url = action('FoodController@view', ['id' => 1]);
```

_Now_

```php
$url = action([FoodController::class, 'index']);

$url = action([FoodController::class, 'view'], ['id' => 1]);
```

### 10. Laravel Nova

Taylor already announced that he was working on a project several months ago. The long awaited project called **[Laravel Nova](https://nova.laravel.com)** has been released. Nova is a beautifully designed administration panel for Laravel. It offers support for filters, lenses, actions, queued actions, metrics, authorization, custom tools, custom cards, custom fields, etc.

![Laravel Nova](https://images.ctfassets.net/23aumh6u8s0i/2kxoN45cHorsLSHZgmzhij/509a5bbd27bba13bc0293ca7d57db1cc/screenshot)
_Laravel Nova_


<include src="TweetQuote" quoteText = "As if Laravel 5.7 wasn't enough, @taylorotwell formally introduced @laravel_nova, a beautifully designed administration panel for Laravel."/>

## Deprecations and Other Updates

* The _resources/assets_ directory has been flattened into _resources_.

Check out other [Laravel 5.7 updates on GitHub](https://github.com/laravel/framework/releases/tag/v5.7.0).

## Upgrading to Laravel 5.7

Laravel 5.7 requires `PHP >= 7.1.3`. And the estimated upgrade time from Laravel `v5.6` is about ten to fifteen minutes.

Check out this [comprehensive upgrade guide](https://laravel.com/docs/master/upgrade#upgrade-5.7.0). However, if you don't want to be bothered about manually configuring and changing files for the upgrade, I recommend using [Laravel Shift - A service that provides automated, instant Laravel upgrade services by an army of thorough bots and friendly humans](https://laravelshift.com).

<include src="asides/LaravelBackend" />

## Conclusion

**Laravel 5.7** PHP framework came loaded with new features and significant improvements. And **Nova** is a product every Laravel developer should try out!

Have you upgraded to Laravel v5.7 yet? What are your thoughts? Let me know in the comments section! 😊

<include src="TweetQuote" quoteText = "Laravel 5.7 has been released! Learn what's new in the most popular PHP framework"/>


Laravel 5.7 Release: What's New? 10 Features To Try

idee

Software Engineer building with Kotlin and Flutter.

Software Engineer at Busha

Idorenyin Obong

How to configure a Continuous Deployment pipeline utilizing Now.sh, GitHub, and Travis CI to automate your open-source Node.js web apps.

Continuous Deployment Pipelines and Open-Source Node.js Web Apps

jenny-obrien

I'm a former business journalist who's fascinated by the intersection of tech and business strategy — in particular how the right solution can transform an idea into reality. I specialize in ROI, data privacy, and identity.

Business Content Manager

Jenny O'Brien

Auth0's Universal Identity Management platform will securely authenticate voters as they log in MiVoz’s decentralized platform



Trusting elections is tough when more than [two-thirds of Uruguayans surveyed](http://en.mercopress.com/2017/12/31/corruption-in-uruguayan-government-very-much-extended-says-opinion-poll) believe that their politicians are corrupt, nonprofit [MiVoz](https://mivoz.uy/) sees an answer in injecting innovative technology into the election process.

“The political part of our society is really old — 200 years. We were thinking that the main reason democracy exists is so that people can really feel that they are living in the society that they want”, says [Leonardo Giovanetti, Technical Leader for MiVoz and the Digital Party](https://www.linkedin.com/in/leogiovanetti/).

Social media has programmed people to trust information found via their social networks for both good and bad outcomes. What if that interaction, trust, and energy could be harnessed in a way that allowed each voter to have a say in each political decision, instead of waiting years to weigh in during the election of a representative?

MiVoz is hoping to prove that direct democracy doesn’t have to be unwieldy or even time-consuming. By creating an effective and secure digital platform, taking part in democracy could become a more seamless part of modern lives.

## Mending Trust with Digital Values like Transparency

But changes to long-established institutions and processes can take time.

For the initial phase, MiVoz is targeting Uruguay’s National Elections of 2019 and the following year’s departmental elections. They only need to sign up 30,000 people to secure a representative who will vote in accordance with how citizens vote on MiVoz’s online platform.

“We're intending to promote the usage of an online platform to bring up participation levels and to bring transparency to decision-making on financial reports, which is something that political parties here in Uruguay have lost,” says Giovanetti

As a nonprofit, MiVoz needed the most efficient and low-cost method of securely authenticating voters. But the big issue was trust. Based on past experience with political parties, citizens in Uruguay were reluctant to place their trust in yet another political party.

“We really want to let people know that they can use the tool that we're providing because it's really safe because one vote needs to correspond to one person. Auth0 was really a blessing from my perspective because it's really the best way to go,” says Giovanetti.

While MiVoz is still exploring fully digital means of uploading and validating voter credentials, currently, government-issued identification will be used to validate each voter in person via various locations throughout Uruguay. After that initial effort, Auth0 will securely authenticate voters as they sign in to access MiVoz’s platform.

## Encouraging Participation through Collaboration and Delegation

The initial rollout is focused on the 2019 elections, but later plans include the ability for voters to weigh in on each decision their representative faces — including the possibility of delegating votes on topics like energy or education to close friends. “No one knows everything about every single topic,” says Giovanetti. “We're trying to provide the right tools for people to really represent themselves, sometimes through a trustee who can make a better decision than ourselves because of their background.”

Originally, MiVoz tried DemocracyOS for collecting votes, but after exploring their voting process, they shifted to Sovereign’s decentralized platform. In addition to encouraging collaboration and discussion through tools like Discourse, MiVoz plans to store credentials using blockchain accessed via an Auth0 plug-in.

“We're really passionate about making democracy for this millennium. We’re looking to involve people instead of having them vote and forget about it, but still complain on Facebook or Twitter. Our idea is to put up a platform that could really bring people together for new causes for democracy in their society.”


Nonprofit MiVoz Hopes to Upgrade Democracy with Auth0

Laravel 5.6 has officially been released. What's new? What improvements were made? Learn how to build better PHP applications with this new release.



---

**TL;DR:** On Wednesday, February 7, 2018, **Laravel 5.6**, was released to the public. It's a major release to the most popular PHP framework on GitHub as of this writing. Furthermore, [Spark 6.0](https://spark.laravel.com) was also released alongside **Laravel 5.6**. According to the policy laid down by the Taylor and the core team, major Laravel framework releases are released every six months (February and August). In this article, I'll cover the new features in Laravel 5.6 and several other changes and deprecations.

---

Laravel is the most popular, open-source PHP framework as of this writing. It is designed for building web applications with an expressive and elegant syntax. With Laravel, application development is fast because it ships with a lot of features out of the box. Without further ado, let's dive right into **Laravel 5.6**.

## What's new in Laravel 5.6?

### 1. Support For Argon Password Hashing

Argon2, the recommended password hashing algorithm by the [Password Hashing Competition](http://password-hashing.net), is a modern algorithm for securely hashing passwords. And it comes in two distinct flavors, Argon 2i and Argon 2d. PHP 7.2 recently added support for Argon 2i password hashing. Therefore, [Michael Lundbol](https://github.com/morloderex) took the initiative to add support for Argon hashing in Laravel.

![Argon Password Hashing Support](https://images.ctfassets.net/23aumh6u8s0i/5L2DynjxdZyyidmafRBIGB/520c2ffe34b5298eb7e67b62379f7cca/argon)
_Initiative to add Argon Password Hashing_

The `bcrypt` driver is the default driver for password hashing in Laravel. However, Laravel 5.6 now supports `argon`.

![Config File for Hashing](https://images.ctfassets.net/23aumh6u8s0i/2UxXTOybvNMutMq0CSUuMb/09a2461f07e263e59a2311c91a061c1a/argondriversupport)
_Config file for hashing_

**Note:** Laravel 5.6 ships with a [hashing config file](https://github.com/laravel/laravel/blob/develop/config/hashing.php) as displayed above.

### 2. Better Support For Dynamic Rate Limiting

One of the beautiful built-in features of Laravel is _API Rate Limiting_. Before now, Laravel's rate limiting configuration involved specifying a hard-coded number of requests on a group of routes. However, Laravel 5.6 adds icing to the cake by allowing you specify a maximum number of requests based on an authenticated User model attribute.

```php
Route::middleware('auth:api', 'throttle:rate_limit,1')->group(function () {
    Route::get('/users', function () {
        // do something awesome
    });
});
```

In the code above, the `rate_limit` parameter is an attribute of the `User` model in a Laravel 5.6 application.

### 3. Model Serialization on Steriods

Before now, there was a persistent bug on queued models. When queued models are finally processed, it's without their loaded relationships in place.

In Laravel 5.6, huge improvements have been made to ensure that relationships loaded on queued models are automatically re-loaded when the job is processed by the queue.

### 4. Improved Logging

There is a new [logging config](https://github.com/laravel/laravel/blob/develop/config/logging.php) file in Laravel 5.6. In this file, you can set up logging stacks that send log messages to various handlers.

Check out the example below:

```php
'channels' => [
  'stack' => [
      'driver' => 'stack',
      'channels' => ['syslog', 'slack'],
  ],

  'syslog' => [
      'driver' => 'syslog',
      'level' => 'debug',
  ],

  'slack' => [
      'driver' => 'slack',
      'url' => env('LOG_SLACK_WEBHOOK_URL'),
      'username' => 'Laravel Log',
      'emoji' => ':boom:',
      'level' => 'critical',
  ],
],
```

The `stack` driver allows you to combine multiple channels, in this case, `syslog` and `slack`, into a single log channel as shown above.

Furthermore, with the `tap` array on a channel's configuration, you can easily customize Monolog for an existing channel like so:

```php
'single' => [
    'driver' => 'single',
    'tap' => [App\Logging\CustomizeFormatter::class],
    'path' => storage_path('logs/laravel.log'),
    'level' => 'debug',
],
```

**Note:** Monolog is a library that sends your application logs to files, sockets, inboxes, databases and various web services. It's a comprehensive library with various log handlers.

Check out more [information on Logging in Laravel 5.6](https://laravel.com/docs/5.6/logging).

### 5. Single Server Task Scheduling

Before now, if your app ran on multiple servers and the task scheduler was active on those servers, then your scheduled tasks also executed multiple times. However, in Laravel 5.6, you can now schedule your task to execute on just a single server if your app runs on multiple servers.

<include src="TweetQuote" quoteText=" In Laravel 5.6, you can now schedule your task to execute on just a single server if your app runs on multiple servers."/>

```php
$schedule->command('launch:flasheavy')
         ->tuesdays()
         ->at('12:00')
         ->onOneServer();
```

### 6. Beautiful Error Reporting With Collision

[Collision](https://github.com/nunomaduro/collision) is an awesome package developed and maintained by [Nuno Maduro](https://twitter.com/enunomaduro). It is a detailed, beautiful and intuitive error handler for console/command-line PHP applications.

Laravel 5.6 now ships with Collision via the `dev` composer dependency. When working with your Laravel app via the command line, Collision provides an awesome error reporting interface like so:

![Collision Integration](https://images.ctfassets.net/23aumh6u8s0i/5WAEpSxPY66GW98BjUjqKT/8ef48bc254ac36c22540813347e7d23e/collision)
_Collision Integration with Laravel 5.6_

### 7. Elevated Eloquent Date Formatting

Laravel 5.6 provides a subtle way to cast Eloquent date model attributes to a specific date format. All you need to do is to specify the desired date format in the `$casts` array.

<include src="TweetQuote" quoteText="Laravel 5.6 provides a subtle way to cast Eloquent date model attributes to a specific date format."/>

Now, you can customize the date model attributes like so:

```php
protected $casts = [
  'date_enrolled' => 'date:Y-m-d',
  'date_evicted' => 'datetime:Y-m-d H:00',
];
```

When the model is cast to JSON or array output, the attributes will be formatted to the date formats example provided above like so:

```bash
date_enrolled: 2005-02-19
date_evicted: 2018-02-20 8:30
```

### 8. Aliasing Blade Components For Easier Access

This feature is very handy. Accessing a blade component in a sub-directory is easier via aliasing. With the component method, you can alias `components.card` to `card` assuming the card component's directory is `resources/views/components/card.blade.php`.

```php
Blade::component('components.card', 'card');
```

Once it has been aliased, you can invoke the component like so:

```php
@card
  This is your Valentine card.
@card
```

### 9. Broadcasting Channel Classes

In Laravel 5.6, you can now generate broadcasting channel classes via the `make:channel` Artisan command. The generated channel class will be placed in the `App/Broadcasting` directory.

```bash
php artisan make:channel PurchaseChannel
```

Registering the channel is as easy as calling the `Broadcast::channel` method below in the `routes/channel.php` file:

```bash
use App\Broadcasting\PurchaseChannel;

Broadcast::channel('purchase.{purchase}', PurchaseChannel::class);
```

In the `PurchaseChannel` class, you can add the authorization logic in the `join` method. Before now, the authorization logic was placed in the channel authorization Closure.

```php
<?php

namespace App\Broadcasting;

use App\User;
use App\Purchase;

class PurchaseChannel
{

  ....

  /**
   * Authenticate the user's access to the channel.
   *
   * @param  \App\User  $user
   * @param  \App\Purchase $purchase
   * @return array|bool
   */
  public function join(User $user, Purchase $purchase)
  {
      return $user->id === $purchase->user_id;
  }
}
```
### 10. Daring Upgrade Of Symfony Components and Bootstrap

All the Symfony components used by Laravel 5.6 have been bumped to the `~4.0` release. Furthermore, all the front-end scaffolding of Laravel 5.6 and Spark 6.0 has been bumped to `v4`.

I covered all the [major additions and deprecations of Bootstrap 4 in this article](https://auth0.com/blog/whats-new-in-bootstrap4).

## Deprecations and Other Updates

* Generating an API resource controller can now be done by using the `--api` switch when executing the `make:controller` command.
* Laravel 5.6 introduced helper methods, `Arr::wrap()`, `classes_uses_recursive()`, `Str::uuid()`, and `Str::orderedUuid()`, the latter generating a timestamp first UUID that's more easily and efficiently indexed by databases like MySQL.
* PHPUnit, upgraded to v7.
* Laravel Mix, upgraded to v2.
* The deprecated Artisan `optimize` command has been removed.
* Added support for customizing the mail message building in `ResetPassword::toMail()`.
* Add `policies()` method to `AuthServiceProvider` to retrieve all the policies defined by the provider.
* Two new blade directives have been added to the framework, `@csrf` and `@method`.
* Support for PostgreSQL comments was added. Furthermore, Laravel 5.6 now has better support for enumeration columns.

Check out other [Laravel 5.6 updates here](https://github.com/laravel/framework/releases/tag/v5.6.0).

## Upgrading to Laravel 5.6

Laravel 5.6 requires `PHP >= 7.1.3`. And the estimated upgrade time from Laravel `v5.5` is about ten to thirty minutes.

Check out this [comprehensive upgrade guide](https://laravel.com/docs/5.6/upgrade). However, if you don't want to be bothered about manually configuring and changing files for the upgrade, I recommend using [Laravel Shift - A service that provides automated, instant Laravel upgrade services by an army of thorough bots and friendly humans](https://laravelshift.com).

![Laravel Shift](https://images.ctfassets.net/23aumh6u8s0i/35hQnVliNvBtSA4KxrMoXL/f3d875e8dcbf6ac8bc5494c1dfd2f8f6/laravelshift)
_Laravel Shift_

<include src="asides/LaravelBackend" />

## Conclusion

**Laravel 5.6** came loaded with new features and significant improvements. Another major release will be out by August and some of the features shipping with the next major release will be unleashed at [Laracon 2018](http://laracon.us). Get your tickets already!

Have you upgraded to Laravel v5.6 yet? What are your thoughts? Let me know in the comments section! 😊


Laravel 5.6 Release: What's New?

ryan-chenkie

Ryan is a full-stack JavaScript developer and trainer who mainly works with React, Angular, Node, and GraphQL. He runs a consultancy where he builds apps for companies and also helps established dev teams with their modern JavaScript challenges.<br /><br />Ryan is a Google Developer Expert, the host of the Entrepreneurial Coder Podcast, the author of Securing Angular Applications, and an all-around fanatic about application security.

Developer

Ryan Chenkie

Learn the essentials of Falcor--the newly open-sourced library from Netflix that lets you represent your data as a single virtual JSON object.

Getting Started With Falcor

42e2ec6a72627f8c15115e279a5f7d8e

Ben Schwarz

Introducing an official 'ember simple auth' add-on



<div class="alert alert-info alert-icon">
  <i class="icon-budicon-500"></i>
  <strong>Visit <a href="/blog/build-and-authenticate-an-emberjs-3-application/">Build and Authenticate an EmberJS 3 Application</a> to read our most up-to-date tutorial.</strong>
</div>

<div class="alert alert-danger alert-icon">
  <i class="icon-budicon-487"></i>
  <strong>This tutorial has been deprecated.</strong>
</div>

__TLDR;__ Install the add-on using ember-cli `ember install auth0-ember-simple-auth`, or checkout the generated [example application](https://github.com/auth0/auth0-ember-simple-auth/tree/master/examples/simple) to get started.

-------

At Auth0, we’re huge fans of [Ember](http://emberjs.com), the Javascript framework made famous for writing ambitious single page applications (also known as SPA).

Unfortunately, up until now our support and resources for Ember have not equalled our enthusiasm for it. Thankfully, starting today, we have some great news —

![Auth0 + Ember logos](https://images.ctfassets.net/23aumh6u8s0i/1OmRtzhY0B2pQjr7zmQvDF/042e08bfa6bceb14b1216c9b2af0594a/auth0-ember)

# Introducing an official 'ember simple auth' add-on

For those familiar with Ember, it might go without saying that “[ember-simple-auth](http://ember-simple-auth.com)” is the most popular authentication helper library around. It implements a strategy based plugin system that allows users to write their own custom authentication strategies.

That is exactly what one of our customers, [Aram Zadikian](https://github.com/brancusi) did, and thanks to his generosity, we’re able to share his fantastic work with you today!

We'll be maintaining `auth0-ember-simple-auth` on an ongoing basis, so you can rely on it to build your ember applications.

## What does it do?

`auth0-ember-simple-auth` is an Ember-cli add-on that uses [Lock](https://auth0.com/lock), and, after some simple configuration will allow you to sign up/in and out — protecting whichever pages you've specified in your router.

```
// app/routes/application.js

import Ember from 'ember';
import ApplicationRouteMixin from 'simple-auth/mixins/application-route-mixin';

export default Ember.Route.extend(ApplicationRouteMixin, {
  actions: {
    sessionRequiresAuthentication: function(){
      // Check out the docs for all the options:
      // https://auth0.com/docs/libraries/lock/customization

      // These options will request a refresh token and launch lock.js in popup mode
      var lockOptions = {authParams:{scope: 'openid'}};

      // This tells simple-lock to use our `auth0-ember-simple-auth` add-on
      this.get('session').authenticate('simple-auth-authenticator:lock', lockOptions);
    }
  }
});

```

Now that you have enabled your simple-auth strategy, its just a matter of importing the `AuthenticatedRouteMixin` from `ember-simple-auth` to lock down routes that need to be protected.

```
// app/routes/my-protected-route.js

import Ember from 'ember';
import AuthenticatedRouteMixin from 'simple-auth/mixins/authenticated-route-mixin';

export default Ember.Route.extend(AuthenticatedRouteMixin);
```

Now you've already got a secure single page application. Time to focus on writing your app!

![A sample application in use — Running through an authentication flow](https://images.ctfassets.net/23aumh6u8s0i/5QVfIyB3z912z95cgeJ8aw/31297f25190488606cf5508938904367/ember-simple-auth)

You can install & run the `auth0-ember-simple-lock` add-on, or, to fast forward to a fully working ember application (shown above), you can download the seed project from [your application dashboard](https://manage.auth0.com/#/applications).

We can't wait to see what you do with ember, make sure you [reach out on Twitter](https://twitter.com/auth0) with what you create.

✌️ Happy hacking!


"open-source"