#mkowensIt looks like a much better solution than OpenID in general, but I was trying to think of a way that a user like myself who may have multiple auth options could "pre-select" which option to use.
#mkowensOr, for example, what happens when you find multiple auth options: do you present the user with a choice or just assume they don't care which they use?
#mkowensIn general, for example, I prefer to use Facebook as my identity provider except when the content is likely to be more valuable connected with Twitter or Github or whatever.
#aaronpkit assumes the links on your site are in order of preference
#mkowensExample: Logging into StackOverflow would be best done using Github because the identity space is code-related there and my social graph on Github is much more attuned to the one that I would want to immediately be able to interact with on StackOverflow.
#mkowensExample 2: Logging into Zynga.com would be best done using Facebook because the identity space is personal-related there and my social graph on Facebook is most likely to overlap with the concept of social games.
#aaronpkah, but in this case your identity is actually mowens.com.
#aaronpkit's not mowens on github or mowens on twitter
#aaronpkit just delegates the actual authentication to some other provider, but it doesn't matter which it is. you are still you.
#mkowensRight, but I would hope that as the indieauth system improves, it could delegate more data from the authentication provider used down to the site with which I just connected as mowens.com
#aaronpkso the site that's trying to log you in doesn't even need to know which you used to authenticate. and indieauth.com doesn't even tell the site. (look at the sample response for indieauth.com/session)
#aaronpkyou mean like your name / email / other profile data?
#aaronpkwell ideally that should come from your domain too! marked up properly with microformats of course
#mkowensInstead of simply being an identity delegate, it could also be a social graph delegate.
#mkowensMost of my friends don't use FOF or XFN properly even if I do. :-P
#aaronpkyea. social graph stuff is interesting, but one step at a time :)
#mkowensI'm not saying it's a realistic need or desire, but it might be something to consider when working with the authentication preference concept, as it does create an interesting method for independently delegating data to a service without giving access to or revealing data you don't want shared with a service.
#mkowensLately, I've also been spending most of my time looking at network graphs and the intersections of network graphs over time and location, so my mind is definitely on "how do I improve personal graph use" mode.
#aaronpkah cool. I'd love to read about what your'e finding, are you documenting things on your site somewhere?
#mkowensNot currently. It's a long-term side project that is not yet publicly available.
spinnerin__ joined the channel
#mkowensI'm documenting things, but I want to get the side project to a reasonable point before I start really talking too much about it publicly.
#tantekaaronpk - you shoudn't have to whitelist fb.me - the relmeauth consumer is supposed to handle redirects (a redirect is an implied rel-me)
#tantekI certainly had to add some code to relmeauth.php to specifically make that work
#aaronpkI have code that checks whether a link is a known OAuth provider, I need to add it there.
#tantekor rather, process a URL for redirects *before* checking it
#aaronpkunfortunately that would break Google profile URLs, since the redirected version is the URL that has a bunch of numbers in the string. Then I wouldn't know the Google account name
#tantekI believe per HTTP / Web Architecture - you don't have much of a choice you're supposed to treat redirects like they're the real thing
#tantekhey - where should I link to in the indieauth github repository for the Ruby implementation of RelMeAuth? (i.e. not the whole indieauth.com website, but just want a Ruby developer would include if they wanted to do the authing themselves - e.g. what Ward wants to do with FedWiki)
#aaronpkgreat! I'll make a repository called relmeauth soon, and it'll be easy to use, like `gem install relmeauth`
#aaronpkhow much of the oauth/relmeauth is handled by your php library? is it just things like parsing the web pages, or does it include twitter oauth client code as well?
#aaronpki'm wondering what sort of dependencies that module should require, as in a database, twitter client credentials, etc
#tantekthe twitter oauth client code is handled by tmhOAuth.php
#tantekrather, it's a generic Oauth client library
#tantekwhich is written quite cleanly and requires very little twitter-specific code in relmeauth.php
#tantekI'd actually recommend tmhoauth.php for your OAuth book as well
#aaronpkok, I'll take a look. It's OAuth 1 only tho, right?
#tantekaaronpk - the whole todo.txt thing has made me think - I wonder what the right "indieweb" solution is to to-do lists
#tantekmany (most?) to-do things I'm ok making public, in the pronoia hopes/perspective that others knowing about it may help get it done more easily
#tantekplus there's the use case of send each other to-dos etc. via web pages
#aaronpkwell there's a crazy idea! a to-do item as a web page! seems like you could leverage git to power that in some interesting ways
#tantekwe have some examples of things like to-do items on web pages already - e.g. when someone tweets a plancast tweet that they're "planning" something - that's like a to-do on a web page (tweet permalink page)
#tantekfoursquare's tips are kind of like geofenced to-do items when you add them to your to-do list on foursquare
#tantekbut they have the assumptions of repeatability
#tantekprivate tips and limited count tips would be interesting - i.e. only things you can do, and only things a certain number of people can do - like tickets to an event.
danbri, tantek, voxpelli, wajiii-afk, davida and tantek_ joined the channel