#indiewebcamp 2013-07-17

2013-07-17 UTC
jfranusic, andreypopp, smus, scor and smus_ joined the channel
#
Loqi
Ok, I'll tell them that when I see them next
smus, hupili and pdurbin joined the channel
#
pdurbin
'Then, Gina and Kevin tackle two kinds of social network rebellions: starting-from-scratch to build new ones (like Diaspora and App.net) to the "let's break the TOS and see what happens" kind, like Falcon Pro.' -- http://5by5.tv/inbeta/56
#
pdurbin
starts around 27:00 or so. pretty interesting
brianloveswords and benwerd joined the channel
#
Loqi
benwerd: aaronpk left you a message 1 hour, 54 minutes ago: there's something weird going on with your markup on the comics! http://pin13.net/mf2/?url=http%3A%2F%2Fwerd.io%2Fcomic%2F51e0a67dbed7de5277b4c530%2Findiecomix-indieweb and check out http://aaronparecki.com/replies/2013/07/14/1/indieweb
#
benwerd
So there is!
#
@OnTheWebz
RT @t: Beautiful. @benwerd posted an #indieweb comic:
#
benwerd
I did. Thanks, Loqi.
#
benwerd
I had this great idea to draw a regular indieweb comic about bears. Unfortunately, it turns out I can't draw bears.
#
aaronpk
then draw squirrels!
#
benwerd
Ha! That's actually awesome advice.
#
benwerd
And I will read it now.
hupili joined the channel
#
benwerd
aaronpk: I really like that, particularly just for the principle of it
#
benwerd
thanks for the link!
#
aaronpk
it's very clever!
#
benwerd
It is, both in implementation and as an argument
#
benwerd
I like it
#
bret
hey aaronpk, do you have a free moment this evennig? I had some q's about pingback.me
fmarier and b0bg0d joined the channel
#
bret
first off, I made a booboo.. I exposed my API key to the public on accident
#
bret
but I wanted the data to be public, so it isnt that huge of an issue
#
bret
im not sure how you want to handle that
#
bret
the other thing is that, when I was experiemening with the API key, I kept getting 403 denied errors when my javascript tried to called a function in using JSONP
#
bret
the API key was in the request, I have since removed it
#
bret
the api key value is there
#
bret
oh wait, let me use an example that has a mention actuallyu
#
aaronpk
oh interesting
#
bret
i also removed the empty API parameter
#
aaronpk
do you want to allow public access? I can make it work without an API key
#
aaronpk
that'll probably just make things easier
#
bret
yes i will need that for this to work
#
bret
but it wasnt working with the API key
#
bret
kept getting 403's when the script made the request
#
bret
but doing a manual requst in the browser it worked fine
#
aaronpk
that's odd...
#
bret
I wasnt sure if that was a thing with pingback or cross domain restrictions
#
bret
cool!
#
aaronpk
that's odd because I thought there weren't cross-domain restrictions with jsonp
#
bret
let me test now
#
bret
nope, still getting a 403 from the script... check the web console on this page: http://bret.io/2013/06/24/t4/
#
bret
403 makes me think the web server is doing something odd
#
aaronpk
oh..do you really not want to use jquery or something?
#
@Ladygoldiee
#BuyTheWayOnItunes Full Eclipse" The Album https://itunes.apple.com/us/album/full-eclipse/id317227879 … it's BLACK SUN #Follow @BlackSunDMV #HipHop #indiewebcamp
#
bret
XD I was trying without jquery
#
bret
but if you recomend it I can start there
#
aaronpk
wtf why is that tweet hashtagged with indiewebcamp
#
bret
lol no idea
#
aaronpk
well i'm suspicious of the browser in this case
#
bret
I knonw something similar happens with my pinboard code: http://bret.io/about/
#
bret
its probrably something subtle
#
benwerd
You know #indiewebcamp has made it when ...
#
bret
maybe the webserver is also enforcing some sort of cross domain restriction
#
aaronpk
mostly because the pingback.me site doesn't actually return 403s anywhere :)
#
bret
ok, well thats good to know
#
bret
I wasn't sure
#
aaronpk
it'll return 401 "This site does not allow public access to its pingbacks" and 401 "Access token was not valid"
#
bret
benwerd, do you see why this would return a 403 for a jsonp request? https://github.com/bcomnes/bcomnes.github.io/blob/master/assets/js/webmention.js
#
bret
(if you have time)
#
bret
Its incomplete but it should at least add the jsonp as an external javascript to the DOM
#
benwerd
I'm surprised by 403
#
bret
check your console
#
benwerd
and yet when you load the resource manually it comes in fine
#
bret
yeah
#
aaronpk
hmm why are you appending to the heaD?
#
aaronpk
what happens if you append to the body instead?
#
bret
thats what jsonp example I saw did
#
bret
let me try that
#
aaronpk
just checked my server logs. server is defintiely returning 403. wtf
#
bret
its the browser then
#
bret
i need to read more about jsonp i guess
#
bret
same 403 on the body append... I'll look into it more then
#
bret
well thanks for making it publuc and your perspective. It helps :)
#
aaronpk
i'm confused why the server would be returning 403 when it's not part of the code
#
bret
Maybe the 403 isnt coming from the server?
#
benwerd
it has to be if it's in the server logs
#
bret
im only seeing it in the browser console log
#
bret
aaronpk does not see any 403
#
bret
which probrably means I am doing something I am not supposed to be doing
#
benwerd
wait, I thought he said it was in his logs, above?
#
bret
oh missed that!
#
benwerd
is it a GET request, do you know?
#
bret
yeah
#
bret
benwerd try opeing http://bret.io/2013/06/24/t4/ with your browser console open
#
benwerd
yep, definitely see it
#
aaronpk
wait now there's a couple that are returning 200
#
aaronpk
from 50.156.92.153
#
bret
maybe those are the manual ones
#
aaronpk
who's that?
#
benwerd
that's me clicking on them directly
#
aaronpk
oh darn
#
bret
"Here's an example on how to enable cross-domain resource sharing in PHP:"
#
bret
but then "api.jquery.com/jQuery.getJSON - Script and JSONP requests are not subject to the same origin policy restrictions. – Joseph the Dreamer Jan 5 '12 at 23:27"
#
aaronpk
but jsonp is supposed to get around all the cross-domain stuff
#
Loqi
AROUND ALL THE CROSS http://loqi.me/7dN
#
aaronpk
loqi all the things!
#
bret
haha
#
aaronpk
so why would making the request from the browser cause the server to do something different
#
bret
no idea
#
benwerd
so, what's the code that actually launches the get request?
#
benwerd
right, it's that
#
aaronpk
specifically line 12, where it puts the script tag into the body
#
bret
webmentionGet('links')
#
bret
triggers the function
#
bret
and then, its supposed to find every class of a particular kind
#
bret
and then for each instance of that class, insert some jsonp with the proper URL found in the elements ID
#
bret
then append a script with the source beeing the API request
#
bret
which is formatted as a javascript function containing the json data I want
#
bret
on this page, there is only one DOM element that qulifies
#
bret
so only one request is attempted
#
bret
oh shit, maybe I didnt declair the function right
#
bret
ill look at more jsonp tutorials... maybe there is something obvious but subtle
#
aaronpk
ok... i'm super confused by this. let me know if there is something I need to change
#
aaronpk
i can't imagine what, since a direct request does not 403
#
bret
I was thinking, that maybe it would be good to include the target somehow in the returned data for a specific target
#
benwerd
question: maybe urlencoding the URL? the browser will sanitize automatically, but maybe not the JS?
#
bret
ohh good call
#
benwerd
URLencoding the URL in the first URL parameter, I mean, if that makes sense?
#
aaronpk
that's usually handled by the jsonp client. like if you use jquery to make a bunch of requests it will generate a bunch of different function names that will be called with each individual payload
#
aaronpk
benwerd: I think you're right!!!!
#
benwerd
does the prematurely correct dance
#
bret
so, URL encode the whole request URL?
#
bret
http%3A%2F%2Fpingback.me%2Fapi%2Flinks%3Ftarget%3Dhttp%3A%2F%2Fbret.io%2F2013%2F06%2F24%2Ft4%2F%26jsonp%3DwebmentionProcess
#
aaronpk
just the URL that goes in the target parameter
#
bret
do I want CGI Escape or URI Escapes?
#
benwerd
you can just use encodeURIComponent(var)
#
bret
oh is that a function?
#
bret
saweet
#
bret
woop!
#
benwerd
I get unexpected token: <
#
bret
but the request returned data!
#
aaronpk
too much url encoding!
#
benwerd
you've urlencoded too much, sir
#
bret
doop
#
benwerd
just the contents of the first parameter
#
bret
i totally asked aaronpk, and then proceeded to do the wrong thing oops
#
benwerd
not the variable names or the separator
cweiske joined the channel
#
benwerd
literally var mentionDataUrl = "http://pingback.me/api/links?target="+encodeURIComponent(mentionTarget)+"&jsonp=webmentionProcess"
#
benwerd
should work
#
benwerd
*should*
#
aaronpk
whaaaat
#
bret
I think either its the browser, or PHP doing it
#
benwerd
now, have you considered the possibility that your website is simply possessed?
#
bret
could PHP also have some kind of preventative enforcement?
#
aaronpk
it's not php. it's ruby behind nginx
#
bret
or maybe nginx
#
bret
let me futz with some more jsonp tutorials
#
aaronpk
i'm looking at the nginx logs and it returns 403. i havne't actually checked whether the ruby app gets the request
#
benwerd
it could potentially be something to do with the accept header etc
#
aaronpk
oh... server is returning "X-Frame-Options:sameorigin"
#
aaronpk
but that shouldn't matter for jsonp requests I thought
#
aaronpk
also I'm not sure where that's being set
#
aaronpk
ah it's a Rack thing
#
aaronpk
one sec
#
bret
also, i never noticed how many application cache events occured during a page update
#
aaronpk
ok now it's not returning that header, but no change
eschnou joined the channel
#
bret
no change, as in still 403s
#
aaronpk
correct
#
aaronpk
also just added a debugging statement and it looks like the ruby app is in fact getting hte request
#
aaronpk
looks like it's making its way all the way to the end of the ruby function tryinug to return the response
#
bret
hrrm
#
aaronpk
so at least it's not a problem with that code
#
bret
what if I just hardcode it into the page...
#
bret
to see what happens
#
bret
I could probrably do that
#
benwerd
definitely worth trying
#
bret
even for debugging
#
aaronpk
ok I gotta go to sleep. let me know what you find and let me know if you need any changes on the server
#
bret
ok thanks for trying though!
#
benwerd
trying to look at it in a debugger
#
benwerd
so bizarre
#
bret
benwerd, im going to bake it into my page, see if it like that better
#
bret
so no dom insertions
#
bret
now its baked into the page
#
bret
still 403
#
bret
crap, didnt esacape part of the url
#
benwerd
right, was about to say that
#
benwerd
http:// still unescaped
#
bret
fixing
andreypopp joined the channel
#
cweiske
bret, what's that Δ beside the date?
#
bret
it was the old permalink anchor
#
bret
benwerd, still getting a 403 with the ecaped name
#
benwerd
totally baffling
#
bret
haha
#
bret
crap
#
Loqi
lolz
#
bret
this isnt funny Loqi
#
cweiske
bret, you write "Mozilla Persona has many benefits over the siloed implementations of openID." on http://bret.io/2013/06/28/indiewebcamp-2013-roundup/
#
bret
i meant Oauth need to fix that
#
cweiske
the "many benefits" links to a post that doesn't give any benefits over openid
#
cweiske
could you explain?
#
bret
"you can log into web sites using the email address of your choice" rather than just an account on a supported silo
#
bret
ie sign in with google, facebook etc
#
cweiske
OpenID is about as decentralized as you can get
#
cweiske
I put cweiske.de in the openid fields
#
bret
like I said before, I meant Oauth, that was a mistake
#
cweiske
oh, I didn't realize that this was related to me
#
benwerd
(The big benefits to Persona over OpenID are user experience and ease of implementation)
#
bret
and it is in reference to the auth providers used in indie auth
#
bret
which were all silo'd auth providers
#
bret
github, twitter etc
#
bret
which use Oauth
#
bret
ill fix that hang on.
#
bret
OpenID is a good idea, but has arguably failed? Plus aparenty people find it hard to use
#
benwerd
Logging in with a URL is not something that most people feel comfortable doing
#
benwerd
we had OpenID support on Elgg and our hosted social network for teachers
#
cweiske
haha. indieauth wants an url
#
benwerd
~0.02% of users made use of it
#
bret
part of RelMeAuth is to take the OpenID concept, but make it easier to use, I think
#
bret
cweiske, you a javascript guru? I'm trying to understand why I keep getting 403d when making a request via JS, when the same request in the browser or curl works fine
#
cweiske
not a guru, but maybe i can help
#
bret
check your console... I am making two requests, one is baked into the HTML, the other is inserted to the dom dynamically. both ways fail
#
benwerd
It HAS to be a referer, Accepts or encoding issue
#
bret
benwerd, Im about to ask it over at #javascript, wish me luck
#
benwerd
Good luck!
#
cweiske
bret, the referer
#
cweiske
HTTP/1.1 403 Forbidden
#
bret
hrrmmm! good find
#
cweiske
why did you assume it's a js problem?
#
bret
cause I dont know what I'm doing XD
#
benwerd
Also, that's totally weird
#
bret
cweiske, im really new at JS, and only have about a year of HTML experience
#
cweiske
as soon as the referer is set and not pingback.me, there is a 403
#
cweiske
that could be a rails settings problem
#
bret
i think aaronpk is using rails
#
benwerd
Sounds a lot like it
#
cweiske
the http headers say so
#
cweiske
the code says so
#
bret
off to #rails
#
cweiske
bret, probably more sinatra
#
cweiske
but that's a guess
#
cweiske
there is the problem
#
cweiske
a year ago
#
cweiske
This is a bug in rack-protection. I'm working on a rewrite. If I don't get it done within reasonable time, I'll push a quick-fix. Here is how you should be able to solve it for now:
#
cweiske
set :protection, :except => :json_csrf
#
cweiske
so it's something aaronpk has to fix
#
bret
cweiske Cool!
#
bret
thanks a ton
#
bret
ill forward this to aaron
#
benwerd
Oh, Rails.
#
benwerd
Said the PHP programmer.
#
bret
teehee
#
cweiske
i'm also a php programmer
#
bret
im a..
#
bret
programming largely still in training
#
bret
programmer*
#
benwerd
no such thing as a programmer who *isn't* in training
#
bret
benwerd, dig the comix!
#
bret
(but where's the witty alt-text?) ;)
#
benwerd
Thanks! I've totally given myself an excuse to scan and upload my doodles now, which may not be wise
#
benwerd
Oh just wait
#
benwerd
I did once have a webcomic, long ago. Sold T-shirts, the works
#
benwerd
We'll see if I resist the habit.
#
bret
cool! You could recycle some old content
#
benwerd
prrrrobably not ;) everything I know about viral web content, I learned from a website I'd be kind of mortified if people discovered now
#
benwerd
and that's all I'm going to say about that.
#
bret
!tell aaronpk: I think we found the issue with pingback.me thanks to cweiske: https://github.com/aaronpk/Pingback/issues/5
#
Loqi
Ok, I'll tell them that when I see them next
#
benwerd
Whoa, it's almost midnight. Goodnight Indieweb!
#
Loqi
ciao
#
bret
bye!
#
benwerd
(Friendliest. Bot. Ever.)
#
benwerd
Night ;)
Guest32288, seyz and andreypopp joined the channel
#
@BlackSunDMV
RT @Ladygoldiee: #BuyTheWayOnItunes Full Eclipse" The Album https://itunes.apple.com/us/album/full-eclipse/id317227879 … it's BLACK SUN #Follow @BlackSunDMV #HipHop #indieweb…
andreypopp, eschnou, friedcell, sandeepshetty, hober2, b0bg0d, barnabywalters, erikmaarten, adactio and tantek joined the channel
#
barnabywalters
morning tantek
#
tantek
afternoon, barely, from Frankfurt airport :)
#
tantek
will disappear in a few minutes.
#
barnabywalters
I just noticed you’re an editor of the requestFullScreen API — how actively is it being developed?
#
tantek
it's pretty done
#
tantek
ok time to board
#
barnabywalters
okay, cool — looking into using it at work, also implementing a web-based distraction-free style authoring UI
#
tantek
yes, please go ahead
#
tantek
feel free to ping me about any issues
#
barnabywalters
will do, thanks
#
barnabywalters
what are you up to in frankfurt? work stuff?
friedcell and scor joined the channel
andreypopp joined the channel
#
tommorris
and we have spam.
#
tommorris
that didn't take long.
#
cweiske
where?
#
tommorris
cweiske: in channel. ;)
#
tommorris
aaronpk: we have some spam issues with Loqi.
#
cweiske
oh. i"ve set him to ignore
#
tommorris
puts Loqi on ignore temporarily
b0bg0d joined the channel
pfefferle joined the channel
erikmaarten joined the channel
sandeepshetty and scor joined the channel
#
neuro`
Good morning.
#
tommorris
hey neuro`
#
neuro`
Hi tommorris
eschnou, sandeepshetty, brianloveswords, scor, b0bg0d, andreypopp_, ozten, morrocco_mole, melvster and marjolein_ joined the channel
#
aaronpk
holy pingback spam
#
Loqi
aaronpk: bret left you a message 9 hours, 24 minutes ago: I think we found the issue with pingback.me thanks to cweiske: https://github.com/aaronpk/Pingback/issues/5
#
aaronpk
bret: cool, looks like I can reproduce the error with the curl command!
#
aaronpk
bret: pushed! Now you have another problem
#
aaronpk
you don't need to JSON.parse this, because it's sent to this function as JSON data already, not as a string. https://github.com/bcomnes/bcomnes.github.io/blob/master/assets/js/webmention.js#L19
spinnerin, friedcell, benwerd, brbcoding, marjolein_, barnabywalters and sandeepshetty joined the channel
#
bret
awesome aaronpk ! Thanks for your work.
andreypopp, julien51, marjolein_ and dpk joined the channel
#
hadleybeeman
tommorris, are you going to #indiewebcamp Brighton?
#
hadleybeeman
(Also, is it deliberate that there isn't a lanyrd page for it? Or am I just missing it?)
#
@janl
@rockbot indieweb ftw :)
#
tommorris
hadleybeeman: no, I'm not. I'm going to be in NY for a wedding at the time.
#
tommorris
hadleybeeman: which is a shame.
#
tommorris
hadleybeeman: nobody has created a lanyrd page, but you are welcome to.
#
hadleybeeman
Ah— that is a shame, tommorris. Silly people getting married. :)
andreypopp joined the channel
#
tommorris
hadleybeeman: it's a good friend of mine. she helped me come out. I'm repaying the favour by being the secular equivalent of a vicar and leading the ceremony. it'll be lovely.
#
tommorris
hadleybeeman: I'm picking up my suit for it on Friday.
#
tommorris
I'm also missing State of the Map which is in Birmingham this year
#
hadleybeeman
That's lovely, tommorris! What a nice thing to do.
andreypopp joined the channel
#
hadleybeeman
tommorris, would you mind editing the wiki to remove the to-do item? I don't have access at the moment. http://indiewebcamp.com/2013/UK
#
tommorris
hadleybeeman: doing.
#
hadleybeeman
cheers :)
#
tommorris.org
edited /2013/UK (-15) "/* IndieWebCampUK */ Lanyrd URL, thanks hadleybeeman"
(view diff)
#
hadleybeeman
:)
shaners, sandeepshetty_, andreypopp and tilgovi joined the channel
andreypopp joined the channel
#
@brightconf
IndieWebCampUK, 8th September 2013: IndieWebCampUK - 8th September 2013
andreypopp, tantek and ozten joined the channel
#
@janl
The best place that nobody will ever find your writing again is to post it on medium.
catsup, tilgovi and tantek joined the channel
#
neuro`
Good vening
#
neuro`
Hi aaronpk, how're you going?
#
shaners
aaronpk: I was looking for the indieauth + sms details. and this seems out of date.
#
aaronpk
yes, that doesn't have the new info about SMS and google authenticator
#
shaners
aaronpk: Also, i'm getting an error trying to signin to indiewebcamp site with iamshane.com via indieauth
#
shaners
can you take a look at it?
b0bg0d joined the channel
#
aaronpk
shaners: looks like you can log in with twitter or github, what error do you get after you try?
#
shaners
There was a problem!
#
shaners
Parameter "profile" must be one of the rel=me links in the site specified in the "me" parameter
#
aaronpk
scroll down and click the second github button. looks like that's a glitch on my end with http vs https
#
shaners
that worked. thank you.
#
aaronpk
cool. i'll take a look at that later
fmarier, shaners_, marjolein_, melvster, ozten, b0bg0d, barnabywalters, sandeepshetty, franco00 and jfranusic joined the channel