
# This blog post consists of my journey for GSoC`21 with Owasp in Week 1 and Week 2

So, let's continue from my previous blog, I got to learn in these weeks very much. I learnt about OAuth2.0 Authentications for social accounts and about Code Coverage Auth Tokens, I have also started working on HubStaff, where I can manage my tasks and set a timeline for that. My mentors can also track my timings from that.

First I started with fixing some css stuff in BLT Repo, after that I added Rest APIs for Login, Logout, Password Recovery, Mailing, Github Login, Google Login, Facebook Login, Registration and all authentication stuffs, after that I have created some issues in BugHeist Repo for the upcoming tasks I have to complete in this GSoC.

I also have added Code Coverage Github Actions as well, from that we can conver all the code base present in the Repo, also created issues from Figma Screenshots, I have also fixed some APIs in frontend and currently working on it.

**Weekly Meeeting**

I had a meeting with my mentor about all the updates. We have decided about what we have to cover next and what are the challenges we are facing.

**Here you can look out all the contributions**

- **Added Rest APIs for all the authentication stuff**:  [Check out](https://github.com/OWASP/BLT/pull/772)
- **Fixed styling of some pages**: [Check out](https://github.com/OWASP/BLT/pull/775)
- **Added Code Coverage**: [Check out](https://github.com/Bugheist/Flutter/pull/37)
- **Created Issues With Figma Screenshots**: [Check out](https://github.com/Bugheist/Flutter/issues/created_by/ankit2001)
- **Created a PR for adding all authentication APIs in the frontend**: [Check out](https://github.com/Bugheist/Flutter/pull/64)

So those are the updates about my Week 1 and Week 2 journey in GSoC`21, I'll be back soon with a blog post on my mid evaluation. 👋 👋 👋 👋

## So Let's resume Coding😒

```py
while time.now() < deadline:
  code() and debug() and document()
```

![Coding image](coding.gif)



Week 1 and Week 2, GSoC`21 @ OWASP


# Introduction

Bug Logging Tool (Bugheist) lets anyone find and report issues on the internet. If you find something out of place on Amazon or any other website let them know. Companies show their response time and history. Get points on every bug you find on the internet and keep the internet free of bugs. Whenever you find a bug, just report it...
Bugs or Issues are the vulnerabilities which you find on Websites or Applications when you expect some functionalities to occur but something else happens, which can cause some problems from minor to major level such as tempering a website like Amazon to buy things at relatively lower prices. 
Here comes BugHeist with an ultimate solution to the problem where users can report bugs/issues and can win exciting prizes or money.

**What does it cover for all?**

Points are awarded to keep the interest of users.
Money is offered if you join the BugHeist Contest Community.
There is a jackpot money listed in the leaderboard of BugHeist Issues.
Money is offered if you are given tips by someone through the tip button.
A good experience for your resume.

**How does it Proceed and how does it work?**

Firstly create a User Account on BugHeist Website.
Then click on report and issue .
Describe the type of issue you want to upload.
Attach the screenshot of the bug or issue you have found.
Click on the submit button to submit the information.
You can organise a company  sponsored Bug Hunt also and can also decide a prize money for it.
You can also participate in BugHeist or OWASP sponsored events or contests and the prize money will be called a tip.

**The idea is to create a:**

Flutter Application for the bug hunters and people who want to contribute in making the Internet Bug Free.
Having the code which follows the existing style guides, which also passes all the existing quality gates regarding test coverage and code analysis.

**Mentor Advices**

So I had some meetings with my mentors about all the updates. We have decided about what we have to cover next and what are the challenges we are facing. And decided what should be completed untill now. I was continously active on slack also with my mentors and asked my doubts from them there.


# Work

I started with fixing some css stuff in BLT Repo, after that I added Rest APIs for Login, Logout, Password Recovery, Mailing, Github Login, Google Login, Facebook Login, Registration and all authentication stuffs, after that I had created some issues in BugHeist Repo for the upcoming tasks I had to complete in this GSoC. I also had added Code Coverage Github Actions as well, from that we can cover all the code base present in the Repo, also created issues from Figma Screenshots, I have also fixed some APIs in frontend.
I had integrated Facebook SDK for IOS and Android also, made a call using web view in the App on our Facebook App and after getting accessToken from Facebook, we are using it in our database. So it will be a 2 way authentication for Facebook. I learnt too much while implementing this feature and have good grasp over social authentication stuffs. 
You can seet the preview here.
![Coding image](ezgif.com-gif-maker2.gif)
After that I had spent huge time for fixing the drawer and app bar in the app. For me, its look awesome after giving drawer the idea of layers, whenever a user clicks on the menu Icon, it opens the 3rd layer of Drawer, having 2nd and 1st layer on certain angles, which looks attractive. 
I have learned about offset and matrix tranform for making this feature and learnt about how to set offsets in x and y axis and with certain angles. 
Here is the preview for that.
![Coding image](ezgif.com-gif-maker.gif)
Also I have fixed the splsh screen and created an animation from the scratch. I have used every layer one by one and created an animation using Bugheist Logo.
Have a look at this also.
![Coding image](ezgif.com-gif-maker1.gif)
Also there is one more exciting feature I loved to work with, i.e. creating the Flutter UI for the Pricing Page. I have used the Carousel Widget to give all 4 pricing pages a horizontal slider look. Solved some null safety issue with code to implement it, and I learned too much about position and options parameter in Carousel class for implementing this feature.
Please check it out.
![Coding image](ezgif.com-gif-maker3.gif)

Apart from these beautiful features, I have added some APIs in the backend for terms, policy page rendring and for the search bar. I have integrated them in the UI also. I have used flutter_html module to simply render the HTML content in the Flutter App. Used Navigator and Animation Controller and made a API model for fetching HTML content using Rest API, and then, just integrated it by making Terms, About, and Privacy Classes.
You can check out this at: [Check out](https://github.com/Bugheist/Flutter/pull/70)

I have added and modified the screen, with a better UI, and the functionality of uploading bug in the website. I have used the /issues routes from the website from its APIs and also added it for the anonymous user. You can just tick on checkbox to post bug Anonymously on the Website. It was a fun to make this page, used scroll view to handle the page in landscape mode.
Please check it out: [Check out](https://github.com/Bugheist/Flutter/pull/67)

I have also implemented the Error page for the App. If their is a connection failure or some authentication error. It pops up and inform the user about the issue. After that I have implemented the Feed Page or Social Page for the Bugheist App. I loved to take this up and used social_embed_webview package for implementing the feature and embedded all the twitter feed from the Bugheist Twitter Handle to the Bugheist Feed App Page. Please [Check out](https://github.com/Bugheist/Flutter/pull/72) here.

After that I designed the figma elements for some pages like user profile details, company scoreboard, invite a friend and issue list and details. Then, I converted each page from figma to Flutter UI and added responsiveness for every page. 

You can check out all my PRs for the BugHeist UI Repo at: [Check out](https://github.com/Bugheist/Flutter/pulls/ankit2001)

And in the Backend Repo at: [Check out](https://github.com/OWASP/BLT/pulls/ankit2001)

# Challenges

While doing my work, I have encountered with many bugs and challenges that I am able to solve timely. First while implementing the Facebook Auth, I encountered with the connection of facebook token with the UI and then I researched about the Facebook Authentications. Then I used ngrok for testing out my Facebook web app for Social Authentication and integrated the Secret and Client key in the UI, which and called the Graph APIs in the UI for getting the info about the user and then using facebook_auth module in flutter I integrated the API in UI.

Another challenge is using the carousel module. While implementing the Pricing Page, I encounter with many null safety issues as we are using the lower version of Flutter in the BugHeist that we will upgrade later. So for getting rid of that issue, I had to migrate the code in null safety parameters.

Apart from that implementing some features like Drawer Page was bit challenging and I have read about transformations for implementing the feature, also for implementing some pages like pricing, company dashboard, invite friends, I have implemented a tranform class for vectorisizing the stuffs. So overall these features were mostly challenging.


# Experience

I have learned a lot of new things this summer. This GSoC with OWASp was an enjoyable experience. The mentors I have been assigned with were very friendly, helpful, and supportive. The community as a whole is fabulous and enthusiastic. It was one of the most awesome experience for me in my life. I would love to contribute more in the project even after the GSoC and will definately apply for the GSoC mentor for the project next year if I got a chance.
I can now say, I have done all the tasks sincerely, and I should pass the Final Evaluation ass I have designed whole UI for the BugHeist App in this Summer of Code.😊😊😊

# Acknowledgment

I am very thankful to my mentors Sourav and Donnie. Without them, the work never would have been this joyful and rewarding. Both were always available to answer my questions on time. I love the OWASP community for its welcoming and enthusiastic nature.
Finally, thanks to the GSoC program, without which, I wouldn’t be a part of this awesome project and gain this memorable experience. I am thankful to them for creating this kind of opportunity for students. I am grateful and love to contribute more in open source.


# Future Work

Complete and Integrate the Flutter UI from separte PRs in the Single Branch.

Integrate all the Backend APIs in UI for a full functional APP.

Improve the UI for some pages like Invite Page and Social Page.

Updating the Flutter version for the Current APP for getting support for SVG assets as current version is incompatible for that

# Last Words


So with this I am done with my blog post for GSoC evaluation. But the journey will go on. I will continue to contribute in the project after the GSoC as well and all the bugs if occurs. I will also apply in next year also for the same project if not as a student then as a mentor. Now, I will come back with new update in my project if I got a chance. 

So yaa, good byeeee👋🏻👋🏻👋🏻👋🏻👋🏻



Final Report — Bugheist The Flutter Project, GSoC`21 @ OWASP


# This blog post consists of my journey for GSoC`21 with Before Mid Evaluation

So, let's continue from my previous blog. So in these 3 weeks I have learnt and applied my skills to solve good problems. I have solved some issues and added new features in the App.
I was continuously engaged with the project and asked mentors what to do or not. Now we have a good understanding of project and half of project is almost finished. I am sure now I will be able to complete it in this GSoC Period.
Using weekly meetings I got an idea, where am I going wrong and using my mentors advices, I am able to solve some difficult tasks also. These weeks enhanced my skills in UI development. Made some fantastic designs and got some passion about UI also, which I really lacks in Frontend.


**Weekly Meeetings**

So I had some meetings with my mentor about all the updates. We have decided about what we have to cover next and what are the challenges we are facing. And decided what should be completed untill now. I was continously active on slack also with my mentors and asked my doubts from them there.


**So What I have done in last Weeks**

- **Added Rest APIs for Terms, Policy and About Pages**:  [Check out](https://github.com/OWASP/BLT/pull/786) 

I have created Rest APIs in html format so that we can use them using App without any refractoring, now, we can chang our pages any time from the server, without changes in App. I have made templates email and reset password also, and made some files for mobile version, which can be imported in website pages, so we can easily update those pages on website and App both simultaneously.

- **Added Splash Screen**: [Check out](https://github.com/Bugheist/Flutter/pull/66)

It have done some hardwork for implementing it from scratch. I have used delay display module to give delay to widgets to become visible on screen and using figma logos, just thought what I could do and just code them randomly, and tried to change them. So finally it took the shape of good splash screen, and, I got satisfied after investing good time in it. 

- **Added Bug Uploading Page**: [Check out](https://github.com/Bugheist/Flutter/pull/67)

I have added and modified the screen, with a better UI, and the functionality of uploading bug in the website. I have used the /issues routes from the website from its APIs and also added it for the anonymous user. You can just tick on checkbox to post bug Anonymously on the Website. It was a fun to make this page, used scroll view to handle the page in landscape mode.

- **Added Error Page**: [Check out](https://github.com/Bugheist/Flutter/pull/68)

I have added a Error Page in the App using Figma designs. It looks pretty, and same as in figma. I have connected it to Internet Connection for now in leaderboard and issue list. I will just modify it as per our needs. By this page we can notify the user about error and help them to just report on the BugHeist Website.

- **Fix Designing of the drawer**: [Check out](https://github.com/Bugheist/Flutter/pull/69)

I have spent huge time for making this feature. For me, its look awesome after giving drawer the idea of layers, whenever a user clicks on the menu Icon, it opens the 3rd layer of Drawer, having 2nd and 1st layer on certain angles, which looks attractive. I have learned about offset and matrix tranform for making this feature and learnt about how to set offsets in x and y axis and with certain angles.

- **Adding Terms, Privacy and About Page**: [Check out](https://github.com/Bugheist/Flutter/pull/70)

So, this was in continuation with my PR regarding Rest APIs for all those pages. I have integrated them in the UI also. I have used flutter_html module to simply render the HTML content in the Flutter App. Used Navigator and Animation Controller and made a API model for fetching HTML content using Rest API, and then, just integrated it by making Terms, About, and Privacy Classes.

- **Adding All Login Authentication**: [Check out](https://github.com/Bugheist/Flutter/pull/70)

So, I have almost done with adding all types of Authentication in the App. It was one of big challenge for me, as I have integrated Facebook SDK for IOS and Android also, made a call using web view in the App on our Facebook App and after getting accessToken from Facebook, we are using it in our database, using the APIs which were added in previous weeks. So it will be a 2 way authentication for Facebook. I learnt too much while implementing this feature and have good grasp over social authentication stuffs.

## So Let's see what happenps😊

I can say, I have done all the tasks sincerely, and I shoul pass the mid term evaluation as I am done with half of project, which I wrote in my GSoC proposal. 

I learnt too much while working on this project. So all in all it is a success for me already.
![Coding image](success.gif)


So I am done with my blog post for GSoC evaluation. Now, I will come back with new update in my project after 2 week. So yaa, good byeeee👋🏻👋🏻👋🏻👋🏻👋🏻



Mid Evaluation, GSoC`21 @ OWASP


# This blog post consists of my journey for GSoC`21 with Owasp and for its Community Bonding Period

Hello everyone, I am Ankit Choudhary, a 3rd year student pursuing B.Tech in Computer Science from NIT Hamirpur. I have been selected as a student developer in Google summer of code under the OWASP (Open Web Application Security Project) organization & will be spending my summer working on [BugHeist Project](https://github.com/Bugheist/Flutter) under the guidance of my mentors Sourav Badami and Donnie.

BugHeist lets anyone find and report issues on the internet. If you find something out of place on Amazon or any other website let them know. Companies show their response time and history. Get points on every bug you find on the internet and keep the internet free of bugs.

You can more details about my project from here : [Project Details](https://summerofcode.withgoogle.com/projects/#5125090552840192)

# How I started 

I always had interest in Cyber Secuity and Hacking Stuffs from my High School, when I explored I got to know about OWASP organisation, I was always excited to explore stuffs in this organistion. And when I become awared about GSoC in 1st year, I could not apply as I was 17 years which is not meeting the criteria for GSoC, then in the 2nd year due to some reasons I was not able to crack GSoC, but finally I have got the opportunity to work with them.
I started to explore the stuffs in the Organisation before the GSoC application period. As I knew Flutter and Django, and also I like hackerone way of reporting, BugHeist excites me most. I started contributing for the project before the GSoC Period. My mentors Donnie and Sourav guide me about, how should I write my proposal and how should I contribute, and then, finally I got selected for the GSoC. 🥳

**I have made some significant contribution in Pre GSoC Period:**

# Some of them are

- **Added Docker Image for the Project**:  [Check out](https://github.com/OWASP/BLT/pull/675)
- **Added Recaptcha Features to the website**: [Fixed Captcha](https://github.com/OWASP/BLT/pull/682), [Added Captcha](https://github.com/OWASP/BLT/pull/719)
- **Added Internationalization for Japanese, Hindi and Russian**: [Check out](https://github.com/OWASP/BLT/pull/715)
- **Added Swagger Documentation**: [Check out](https://github.com/OWASP/BLT/pull/718)
- **Added Gitub Actions and modify the dependabot**: [Check out](https://github.com/OWASP/BLT/pull/712)
- **Added Login, Signup, Forget Password UI Templates**: [Check out](https://github.com/Bugheist/Flutter/pull/5)
- **Added UserAccounts Header and fixed sideBar** [Check out](https://github.com/Bugheist/Flutter/pull/18)


**So finally with that much contribution I was selected as Google Summer of Code Student 2021 @ OWASP🥳🥳**

# Here is my journey week wise for Community Bonding, after that:

### Week1 (18th May to 24th May)

- **Advancing my skills in Django**: I got my hands dirty on Some projects on Django, to revise my concepts in it.
- **Code Base**: Took a deep dive into the codebase. Figured out how various things are working in the project.

### Week2 (25th May to 31st May)

- **Advacing my skills in Flutter**: During this week I also have done some projects on Flutter to revise my concepts in it so that I have complete understanding of codebase.
- **Learning to write Tests**: I learned how to write tests in python as Test Driven Development is highly important for better program design and higher code quality. Errors can be easily detected using tests. Code Coverage also increases.

### Week3 (1st June to 7th June)

- **Back to Proposal**: I revisited my proposal noted down all the features I have to work upon over the span of 10 weeks and now I'm ready for the coding period.
- **Interaction with Mentors**: I recieved a google meet invite and discussed further things which I will do in the projcts with mentors.
- **Talking to Mentors**: Being constantly in touch with mentors asking them doubts that I face. They solve them Immediately.

## Coding Begins

```py
while time.now() < deadline:
  code() and debug() and document()
```

## Let's get ready to code

![Coding image](coding.gif)

So those are the updates about my Pre GSoC Period and I'll be back soon with a blog post on the Coding phase journey soon with bi-weekly updates. 👋 👋 👋 👋


👋🏼 Hello, I am Ankit Choudhary

Featured Blogs

Week 1 and Week 2, GSoC`21 @ OWASP

Final Report — Bugheist The Flutter Project, GSoC`21 @ OWASP

Mid Evaluation, GSoC`21 @ OWASP

Pre Gsoc`21 @ OWASP and Community Bonding Period