Old-school CGI guestbook in Joker

[dbohdan]

I have made a thing using Joker: joker-cgi-guestbook. It is a toy old-school CGI guestbook that stores the guestbook entries in Bolt and uses joker.crypto/hmac for a stateless captcha (meaning that individual captchas aren't tracked on the server).

You can try it live at dbohdan.sdf.org/guestbook/.

[candid82]

@dbohdan This is pretty cool! The implementation is truly in the spirit of Joker: simple and concise.

[dbohdan]

Thanks! I wanted the guestbook to be self-contained like Joker. At first I thought I'd have to rely on an external signing tool like minisign but then found HMAC in the standard library.

[candid82]

@dbohdan I noticed you had to implement parse-query function. I just added joker.url/parse-query to the standard library to make things like this easier: 4f0c27f

[dbohdan]

This helps, thanks! I have refactored the code to use it: dbohdan/joker-cgi-guestbook@912fd89. It seems to work fine: http://dbohdan.sdf.org/guestbook/#entry-33d9cf.

(Check out the new entry ids, like the one I have just linked to. They also use HMAC so an attacker won't know how many entries you have deleted.)