@TopinFrassi which website is it that we're supposed to 'chat at'?

Just realised, there's not really a way of preventing "spoofed" entries - one could go and enter any CR user... I think we'll need a community challenge after Dec.11, to come up with a small web app that uses the SE API to authenticate users and their entries.

does SE support Oauth on 3rd party sites?

api.stackexchange.com/docs/authentication Yeah, it does

@DanPantry is a JavaScript guy, I'm sure he could use something like this to authenticate: andreareginato.github.io/oauth-ng

Never mind, this is a better option (lol): api.stackexchange.com/docs/js-lib

@Quill It's the same that will be used to draw names. It's in the meta post!

@Mat'sMug Or, we can ask in chat if X user has registered for the challenge. If not, it's a spoofed entry?

But the web app sounds fun too. :p

@TopinFrassi What if a false and the real apply

how can you tell the difference

I'd be fine to help write the web app, which seems like a more viable option, additionally it could have some more work put into it and become a stack app for other sites too

@Quill We could ask in chat for this person to send another email. And say at what time they sent it? But yeah, the web app is clearly more secure

I'll be back tomorrow!

if it's a concern, we could ask people to use the email they've registered their SE account with - it's a CR community thing after all

that way moderators could review the list of participants, and validate that the alleged account matches the email address it came from

not sure how much of a stretch of the moderators' agreement it might be though

What sort of numbers are we looking at right now?

no idea

If it's a relatively small number, I imaging a CM could be asked to do it for you. .... they would likely oblige....

I used another email haha

lol

Or Topin / Dan could send a code back to the email and we could put it in our CR profiles

not crazy at all. #SOreadytohelp-style

exactly

#SeekritSanta

@Quill I can look at creating a web interface if you would like (and do away with the other secret santa site), but are we sure we want to tell people to email @TopinFrassi & then sign up on the web app?

Seems like bad UX to me

I could probably throw something together this weekend, tbh, I have a 3-day weekend. and it would be a nice way to learn React properly!

If we do that, I'll make a github project + org, invite @Quill (and anyone else that wants to contribute) and we'll get @Duga in here

I can also host the production app too on a digitalocean droplet, they're pretty cheap and frankly the cheapest one should be more than enough for our means at $5 a month (which I do not mind paying for)

@Quill Send them e-mails. We know the regulars, so the fakes won't be that hard to spot I hope.

The whole reason nobody has done this before it's because it's a PITA to manage. Being CR users, we do it anyway and try to find the best method along the road.

What about heroku isn't that free

I didn't really have issues with security, I mean really

Some of the others might, I guess it's up to you, I can help either way if you need it

@Quill Heroku is free but doesn't scale very well at all (in terms of price)

I'm creating the node project now

I'll push it to github later today around midday my time

Alright, I'll be kicking around here at that time

also, DO gives you much more control over your environment than Heroku does

ie you can ssh onto DO, I don't believe you can do that with Heroku

ah, okay

@Quill github.com/danpantry/secret-santa

@DanPantry If all you need is a webserver, I'm already running one. It isn't using it's resources much so I can probably host another on it.

@Mast It'll need to be able to serve static assets but we will also need something that can run a small node app

And can store data using mongodb or a flat file DB

so I think DO is a better idea

Yea, I can't guarantee you anything databasey

It's alright, we'll just use DO

It'sp retty cheap and we can likely host it all on one box

is everyone gonna know who had who after the event?

I don't expect many concurrent users

Dunno, I'm not running this thing. I just suggseted the idea and will make an app that isn't crap ^^"

Ask @Mast or @TopinFrassi

@Quill Only if they tell.

outlook asks me to verify every time I try to send an email, and I verify and try to resend and the same thing occurs, so I haven't sent an email yet

@Mast, okay, cool

should I feature the meta post?

@Mat'sMug Wouldn't that imply any official-ness?

that's why I'm asking ;-)

As long as the ROs of The 2nd can bear a link to the meta and chat every once in a while, I don't think it's necessary to feature the meta.

ok

I think it would be cool to feature it. It'd shout "Look how great Code Review is, we even do Secret Santa 'cause we rock". But, I'm afraid it might drag too many not honest persons

eh, people that pay meta a visit will see it

That's fine by me!

@TopinFrassi That last part is another thing I'm hesitant about. @DanPantry, opinion?

Technically it's not CR doing Secret Santa. It's a bunch of regulars who got the idea to have a Secret Santa. We so happen to be regular on CR, but it has nothing to do with CR.

I don't think it should be endorsed

At least not this time. Maybe next year, after a trial run

That ^^

Well, perhaps not endorsed at all, it would bring a lot of paperwork to SE I think.

Yeah that sounds legit. Maybe if it grows big it could be endorsed, but right now it's no use.

coming along nicely :-)

nice!

github.com/danpantry/secret-santa/commit/…

Using TDD, which is why it's a bit slow at the moment

The project generator doesn't give you the nicest structure either, but oh well

(PRs/CSS/etc welcome)

It doesn't have to look good, it just has to do it's job.

Yeah, I'm probably just gonna shove some bootstrap in it

or something simple like that

CSS **vomits**

@TopinFrassi well, it is actually SASS, not raw CSS.

is SASS like LESS?

Yes

Syntactically Awesome Style Sheets. :-)

I should check it out. I got a little experience with LESS. Though it didn't make my designs any better. ahah

It doesn't really make your designs better, it just helps with organising CSS through modules/mixins

I wish there was something that made my design better. ahah

Hello~

@TopinFrassi thoughts? gist.github.com/danpantry/5c352b95cb58af85bba3

Also @Mast and @Mat'sMug. What do you think about a rep requirement to be able to participate?

Would prevent people from creating burner accounts. I wouldn't suggest any more than the rep required to talk in chat, though.

@DanPantry It isn't something official anyway, so we can manually check the accounts before entering them and remove them when we see abuse.

It isn't rocket science.

given that we are already using the OAuth API, it wouldn't be hard to extend it I don't think. Just wanted to have a second opinion.

api.stackexchange.com/docs/…

@DanPantry 20 seems fair enough

@DanPantry If we do turn this into a trial run thing, it would turn into 20 eventually. So it won't hurt implementing it now.

Okay. I'm going to see if I can get a quick demo up and online tonight.. no point using react for something this simple, so I'm just going to use pagejs and fetch

Excellent! Good job Dan! :)

And yeah, 20 is perfect

Okay, so far I've made a super simple set up with zurb foundation

It uses pagejs for routing, and all pages can be written in markdown

@DanPantry At least you know what to use when.

no sass support - only css - but shouldn't be necessary with zurb

I'm amazed.

@Mast actually, I picked zurb foundation because buck footstrap.

^^