Midwest JS is a 3-day premier technology conference focused on the JavaScript ecosystem.

Midwest JS

According to LastPass, their average user has 191 passwords stored in vaults. They also state that 81% of confirmed data breaches are due to passwords. The popular security site Have I Been Pwned lists 6.4 million leaked credentials from over 340 exploited websites. 

It is clear that managing secure passwords for the average user is too complex. Solutions like LastPass work nicely for the technically literate, but your average baby boomer is in a bad situation. The industry is working to solve this problem with simpler more secure solutions. 

This talk covers three of the most promising solutions and demonstrates their implementations. I will cover Social Logins, Passwordless, and WebAuthN; discussing their benefits, appropriate contexts and implementation.

Passwords Have Failed: 3 Alternatives for Authenticating Users

Zoid allows cross-domain messaging, also know as, post messaging. Zoid is built on a framework called post-robot, which allows simple post messaging. Zoid attempts to make this more robust and more simplistic. A core example of the tech in work is PayPal Checkout.

Zoid: JS Toolkit for Cross Domain Messag

If we as an industry want to stand a chance against modern threats, then our development process needs to change. Security needs to be part of the initial design, and in this session I will walk you through those steps, end to end.

Secure By Design

While you sit admiring your perfect code coverage score, your users are struggling through the bugs in your software. The hours you spend writing and updating unit tests aren’t reflected in the quality of your application. What gives? 

In this talk, we’ll move beyond code coverage, discussing tools and techniques to improve test quality. You’ll learn to write tests the way users interact with your software, thereby maximizing test impact on the quality of your application.

Beyond Code Coverage: User-Centered UI Test

Vue is a lightweight, fast and awesome library for building user interfaces. Its learning curve is gentle and its API is not complex to understand. 

OAuth and OpenID Connect are standards-based protocols for identity and access management in applications. 

In this presentation, we will take an existing Vue application and implement authentication with OIDC, discover several idiomatic ways to integrate authentication, user profile consumption and conditional formatting with Vue as well as consuming a secure backend with OAuth.

Secur Vue.js with OpenId Connect and OAuth

Did you ever notice that Fass and Serverless is a lot like the Fast and the Furious series of movies? No, of course not. That would be crazy. 

Well, I have and it's not as crazy as you might think. Each of the different characters Dom, Letty, Brian, Tej, Roman, etc. specialize in doing one thing really well and when you combine their abilities as a team they can accomplish just about anything. This is the same as when you have a bunch of well written functions that can be composed into even more powerful functions. The characters respond to plot points like when, Spoilers, Dom finds out Letty is alive at the end of Fast 5. 

This is like events or triggers which call a function or a composition of functions in order to perform a task. As well since all of the characters implement a common interface; driving a car; they can be easily deployed anywhere there are roads. Just like well our functions can be deployed to any serverless Faas container.

FAAS And The Serverless

What if you could take the power of modern JavaScript framework components and export them into generic web components? Good news! There are now tools that allow this to happen! 

In this session you will learn what web components are, get a view of some of the tools available to export Angular/Vue/React components, and see code examples of mixing exported components within other frameworks and vanilla HTML/JavaScript. 

Creating web components from your framework code may have some nice benefits depending on your project. Some example use cases include: * Use existing components in one framework with another framework (use Angular components inside of React or Vue). * Provides a piecemeal migration path from an older framework to a new one. For example, embedding Angular within AngularJS. * Embed web components inside of other technologies like a CMS or server side rendering technology. 

Although some of these tools are relatively new and still under development, it presents an exciting glimpse of what it may be like one day to have a more generic and open web.

Reduce, Reuse, Recycle Your Framework Code into Web Components

For a long time, JavaScript was missing any kind of processing threads. While the single-threaded model added to developer comfort, it also made the platform unable to do serious and time-consuming calculations, and the only way to circumvent it was to do it on a remote server. 

Luckily, with the introduction and widespread adoption of Web Workers, we can now do resource-intensive calculations on background threads. A Web Worker allows you to run JavaScript in the background, without affecting the performance of the page. Even if you are running really resource intense code in the browser, you can continue to do whatever you want: clicking, selecting things, etc., while the Web Worker runs in the background. 

In this talk, we will explore: 
* Web Workers, how and when you can use them, and their peculiarities. 
* Perf and framerate benefits (with data!) 
* Polyfilling for naughty browsers 
* Future: WebGL, Canvas2D, and other marvels browser vendors are cooking up.