2015-01-27 UTC
# 00:05 Loqi KartikPrabhu: gRegor` left you a message 1 hour, 51 minutes ago: Coming to HWC this Wednesday?
tantek, lukebrooker and wolftune joined the channel
carlo_au joined the channel
# 01:18 Loqi tantek: GWG left you a message 1 hour, 42 minutes ago: There is a problem with too many different WordPress comment solutions
# 01:21 GWG tantek: I have to rethink my security measures though in light of this.. The problem is some are too draconian.
# 01:24 GWG I verify the client IPs of pingbacks and trackbacks and flag them
# 01:25 tantek and separable from content-based anti-spam measures
# 01:26 GWG But, my issue is I have nothing to override the moderation.
# 01:29 GWG Until webmention spam comes in, I'm probably safe auto-accepting all webmentions
# 01:37 Loqi Ok, I'll tell them that when I see them next
# 01:40 tantek snarfed: np, and thanks for fixing! happy to help find bugs. :)
mlncn joined the channel
# 01:41 snarfed huh. easy fix, but odd that the unit tests didn't catch it
# 01:41 tantek KevinMarks_: perhaps add the decode and submit it in a comment - or ask if you could put it on github?
mdik_ and KartikPrabhu joined the channel
# 01:58 snarfed hold onto your britches everybody, looks like there are 89 invitations :P
# 01:59 tantek (apologies for the mass bridgy alerts for all the invitations)
KartikPrabhu joined the channel
# 02:25 GWG snarfed: I'm trying to consider a scenario under which autoapproving all webmentions from that URL would be bad
# 02:26 GWG snarfed: I was thinking about tantek's challenge about WordPress moderation being an issue
# 02:27 GWG WordPress's moderation doesn't do by URL.
# 02:27 snarfed other people here whitelist bridgy as a wm source, so you'd be in good company
# 02:27 GWG I'm wondering how I would design it.
# 02:31 GWG WordPress has a comment moderation match list, a comment blacklist, but not a whitelist. Should be easy enough to add
cmhobbs and lukebrooker joined the channel
# 02:36 snarfed GWG: hmm. semantic-linkbacks overrides the wm source param with u-url if available, right?
# 02:37 GWG Well, it has several fields actually that it adds.
# 02:37 snarfed ah, ok, so if this is a semantic-linkbacks-specific whitelist, then nm
# 02:38 GWG Well, if the plugin is enabled, it sets _canonical to the canonical source URL, and _source to the source URL.
# 02:40 GWG I think that is probably something I can trust.
prtksxna, anticar, j12t, KartikPrabhu, gRegor` and danlyke joined the channel
nloadholtes and loic_m joined the channel
# 06:40 snarfed hard to test against the facebook api when it's down :(
tantek joined the channel
# 06:47 tantek good night #indiewebcamp. just wanted to say how much I appreciate each and every one of you here, and for being here.
snarfed joined the channel
KartikPrabhu joined the channel
cweiske, KevinMarks and KartikPrabhu1 joined the channel
Jihaisse, snarfed, j12t, KevinMarks__, LauraJ and iandevlin joined the channel
pfefferle, eschnou, j12t, fahrstuhl, LauraJ, michielbdejong and petermolnar joined the channel
Sebastien-L, KevinMarks, iandevlin, j12t, pfefferle, LauraJ, sanduhrs and elf-pavlik joined the channel
pfefferle joined the channel
# 11:21 Loqi Ok, I'll tell him that when I see him next
j12t, Sebastien-L, stream7, nloadholtes, veselosky, friedcell, pfefferle and LauraJ joined the channel
cweiske, Sebastien-L, j12t, eschnou, friedcell, pfefferle, mlncn, myfreeweb, interactivist and stream7 joined the channel
# 14:04 interactivist pfefferle: hello, thanks for merging the PR for wp-indieweb access caps
stream7 joined the channel
# 14:05 interactivist pfefferle: yes, this is me under my IRC handle
# 14:06 interactivist pfefferle: I'd be happy to contribute further… just wondered what your priorities are
eschnou joined the channel
danlyke joined the channel
# 14:08 interactivist pfefferle: oh, okay… then would you be happy with some TLC applied?
# 14:08 interactivist pfefferle: I meant, which of the WP plugins is most in need of attention
# 14:08 interactivist pfefferle: there are a few little tweaks that could be done to wordpress-indieweb
# 14:09 pfefferle I think the indieweb plugin still needs some attention because it is the stating point for most wordpress/indieweb users
# 14:09 interactivist pfefferle: translation methods, a small readme.txt fix that would credit dshanske in the WP directory, etc etc
# 14:10 GWG interactivist: Might be my turn to blush
# 14:10 interactivist pfefferle: you need a comma spearator between wp usernames in readme.txt :)
# 14:11 interactivist pfefferle: am happy to submit a few useful PRs, just wanted to touch base forst
# 14:11 GWG But I started to separate out the Getting Started text with the idea of having other languages if needed
# 14:12 interactivist GWG: all the text content still needs wrapping in i18n functions (hello btw_
# 14:12 pfefferle GWG, interactivist that might be another great construction site: i18n
# 14:13 GWG interactivist: I have been working on learning how to do that.
# 14:13 interactivist pfefferle: no text-domain is specified or registered as yet, and though you are using 'indieweb' throughout, it won't have any effect
cweiske joined the channel
# 14:14 interactivist GWG: pfefferle: I'll send a couple of PRs through then
# 14:14 GWG I spent much of last weekend working on language support.
# 14:14 GWG To be honest, it was not something I'd researched prior
# 14:15 GWG interactivist: As a recent contributor to the project...I'll say contributions are appreciated.
# 14:16 interactivist GWG: it's less preachy than the title sounds!
# 14:16 GWG interactivist: What is your site, out of curiousity?
# 14:16 interactivist though the site's *cough* a bit out of date
# 14:19 GWG pfefferle: Forgot to change the description...I just noticed
Sebastien-L joined the channel
# 14:21 interactivist I'd recommend putting almost all of Getting Started in the description of readme.txt - people rarely read further on the WP directory
# 14:25 GWG At that point, it is probably easier for the Options page to read and display the readme
# 14:27 GWG Also, the page is based on a wiki page
# 14:27 interactivist GWG: I'd prefer to see the Getting Started page as a sub-page of the plugin's main installer page.
# 14:27 interactivist GWG: hmm, okay, that's useful info
# 14:28 GWG interactivist: There are limitations of where the Plugin Installer page can be because of the coding of the tgm plugin activation class
# 14:28 interactivist GWG: I'm not recommending moving it - just that the Getting Started page can hang off that
# 14:28 interactivist GWG: everything in one place :)
ben_thatmust joined the channel
# 14:30 GWG Well, if you have any ideas. Changing the tgm class would be an issue for future updates of same from upstream.
# 14:33 GWG interactivist: You using any of the Indieweb plugins at the moment?
# 14:35 interactivist GWG: just getting started on the bridgy thing… want to integrate this with BuddyPress ultimately
# 14:36 interactivist GWG: IMO it's not just individuals that need this, but communities too - keeps the conversation local & global at the same time
prtksxna and eschnou joined the channel
# 14:37 interactivist GWG: I work with http://commonsinabox.org/ which curates BP-related plugins, much the way that wp-indieweb curates the ones you've selected
eschenal, shiflett and gRegor` joined the channel
# 14:47 GWG interactivist: You do commons in a box? Don't they use an alternative plugin installer to the one bundled in wp-indieweb?
# 14:47 interactivist GWG: amongst other things
Sebastien-L and cweiske joined the channel
# 14:53 GWG pfefferle: I'm trying to figure out where to hook into the webmention/semantic linkback chain to do moderation on webmentions.
# 14:54 pfefferle why do you want to? why not use the normal comment moderation?
# 14:56 GWG pfefferle: I want to use pre_comment_approved, which is designed for filtering that.
# 14:56 GWG pfefferle: But I' trying to figure out if it fires before or after you add the extra data
# 14:56 GWG pfefferle: Basically, I want to auto-approve webmentions based on certain criteria.
j12t joined the channel
# 14:58 GWG pfefferle: pre_comment_approved fires when you do wp_add_comment
# 14:59 pfefferle GWG I think it is called before someone approves a comment
# 15:00 GWG The filter is applied to the proposed comment's approval status, allowing a plugin to override.
# 15:02 GWG It's called on wp_add_comment. But you use update_comment
# 15:02 interactivist is "IndieWeb" camelcase usually?
# 15:03 GWG So, I could probably use your filter, semantic_linkbacks_commentdata to do the same thing. Change the moderation status.
verdi joined the channel
# 15:06 GWG pfefferle: I want to auto-approve anything that comes from Bridgy, for example. It should be simple to code.
# 15:24 interactivist pfefferle: Apart from prettifying the code a little, that completes my list of housekeeping jobs.
# 15:24 GWG interactivist: So, what is next for you? More WordPress developers is a plus in my opinion.
# 15:24 interactivist pfefferle: I reckon well indented, well documented code could encourage others to contribute :)
# 15:25 interactivist GWG: the post types plugin?
# 15:27 pfefferle interactivist sure! do you prefer tabs or because of the wp coding guidelines?
# 15:27 interactivist pfefferle: yeah, tabs
# 15:27 interactivist pfefferle: there'll be less moaning from WP devs with tabs :)
# 15:28 pfefferle interactivist can you update the indents of the other files?
# 15:28 interactivist pfefferle: GWG do you have makepot? it'll need running each time you publish to the WP repo at minimum
# 15:29 interactivist pfefferle: it's only indieweb.php and getting_started.php though?
# 15:29 GWG I added it to pfefferle's Gruntfile to automatically run
# 15:30 GWG I spent some time learning Grunt over the weekend too.
# 15:30 GWG interactivist: Post Kinds, you mean?
# 15:30 gRegor` Morning, indieweb
# 15:32 interactivist pfefferle: makepot's sweet in that you just issue it in your git repo root and it auto-creates the new pot file for you
# 15:33 interactivist pfefferle: do you really need "Pre-2.6 compatibility"?
# 15:34 pfefferle Poedit is also able to generate pot files from a source directory
# 15:34 interactivist pfefferle: I'll leave it for now...
# 15:34 interactivist pfefferle: oh, okay, that's cool
# 15:35 interactivist pfefferle: vry nice
# 15:37 GWG pfefferle: Can I make a suggestion?
# 15:38 GWG pfefferle: Add this Grunt plugin to generate makepot automatically.
# 15:38 GWG pfefferle: You inspired me to research Grunt
# 15:41 GWG pfefferle: I keep picking up things.
# 15:41 GWG _s adopted SASS, so I learned that.
# 15:41 GWG You wanted me to run Grunt to generate markdown, so I learned about Grunt and adopted that too
# 15:42 GWG pfefferle: I like your work and that inspires me, so muse works
# 15:43 millette GWG, if you're using grunt, might be worth your time to checkout yeoman too (and gulp ;-)
danlyke and elf-pavlik_ joined the channel
# 15:46 pfefferle millette sure! but I think yeoman is not that relevant for WordPress plugins/styles
# 15:46 GWG millette: There's another weekend lost.
# 15:48 millette when I can, I prefer to use gulp, the syntax is more staightforward for me.
# 15:49 pfefferle but I think it is the same ”žfight“ as with sass and less
tantek joined the channel
# 15:49 millette well, I didn't put the emphasis on gulp, but on yeoman :-)
# 15:54 GWG For now, I have two useful tools I've gotten the hang of for building code
# 15:58 gRegor` What is grunt?
# 16:02 tantek oh ok - did you consider using one and reject it for a specific reason?
gRegor`_ joined the channel
# 16:05 gRegor` tantek: I was beginning work on a style guide for my site, in part to clean up my CSS. I was weighing the option of using some lightweight reset. I have heard of plenty, but not done much research on them so wanted opinions/experience.
# 16:06 gRegor` Do you use one, tantek?
# 16:07 gRegor` I got a couple +1s for normalize.css. We've used Bootstrap a fair bit at work and I understand it uses normalize.css in part (and much more, of course).
# 16:08 gRegor` If I experiment with normalize.css or something else, I will document it.
# 16:08 gRegor` I'm leaning towards something minimal that I write myself, though.
# 16:08 gRegor` Me? Not sure what that is.
# 16:11 gRegor` Heh, I just read you co-created normalize, JonathanNeal :)
# 16:11 tantek gRegor`: funny you should ask - I'll fill you in on a bit of history ;)
# 16:11 gRegor` I was sure you had some (hi)story on it, tantek :)
KevinMarks____1 joined the channel
# 16:13 GWG tantek: Because my theme is based on _s, which uses one?
# 16:18 rhiaro I've used normalize.css for years, it's small, simple and sensible as far as I'm aware, but haven't compared it to any others
JasonO joined the channel
# 16:19 JonathanNeal IMHO, some of the box-sizing: border-box css bases are really nice to work with.
# 16:21 tantek JonathanNeal: it depends on your goals for such a stylesheet
# 16:21 JonathanNeal For IE8+, and it sets a bunch of useful baseline defaults without getting too up in layouts business.
# 16:21 tantek hardest part is writing down what is the specific design intent of such a style sheet
rhiaro and pfefferle joined the channel
# 16:22 tantek in addition to "undohtml.css" (I think "reset" is misnamed, as they're not really *resetting* to something specific), I use one I've called "simple.css" to make a reasonable readable stylesheet for arbitrary semantic markup
# 16:22 JonathanNeal tantek: normalize.css set styles to whatever the most-compatible most-prevelent default was.
# 16:23 JonathanNeal reasonable.css would set styles to whatever the most-compatible developer-preffered default is.
# 16:23 JonathanNeal tantek, they were pretty ugly, but frankly you want a list to look like a list most of the time.
# 16:23 tantek I think "most-compatible developer-preffered default" is a poor way to start a design
# 16:24 tantek I agree with "want a list to look like a list"
# 16:24 tantek that doesn't mean you have to do "most-compatible developer-preffered default" - which is far more damaging
snarfed joined the channel
# 16:24 tantek rhiaro: so you're saying you like small & simple for an undo/reset CSS. what do you mean by "sensible" ?
# 16:25 JonathanNeal tantek: well, i can’t speak for modern normalize.css, it was stirring toward “whatever the spec says, otherwise what is common”
# 16:25 tantek JonathanNeal: democracy ("most developers") is rarely good design, if ever
# 16:25 tantek JonathanNeal: I'm trying to get at what underlying principles are being used for each of these
# 16:26 tantek and my point is, some of the "principles" you are referring/implying are very poor from a design perspective
# 16:26 rhiaro tantek: Just that values are set to sizes/etc that I think either looks nice or are a good base to build on
# 16:26 tantek and thus we must reject them, and the conclusions from them
# 16:27 tantek rhiaro: "looks nice or are a good base to build on" is a good design principle as well for an undo/reset CSS
# 16:27 JonathanNeal Back in the day, I was aiming for consistency. I can’t speak to normalize.css today. I haven’t contributed in years.
# 16:27 tantek JonathanNeal: in genearl "majority of …" is a very poor way to do design
# 16:27 tantek it leads to design by rear view mirror of the lowest common denominator
# 16:27 rhiaro I haven't thought about it in great depth, don't tend to get too deep into the css these days
# 16:27 JonathanNeal Yea. That’s why I’m putting the blame on myself and making sure it doesn’t reflect normalize.css. No idea what its current goals are.
# 16:29 JonathanNeal consistency with the spec and with other browsers, minimal in markup as to easily allow change.
iandevlin joined the channel
# 16:32 JonathanNeal tantek: “it leads to design by rear view mirror of the lowest common denominator” - I remember hearing things like that when it first came out, too. Necolas was already writing the same thing himself, and he understood something about it that kinda made it into an empire. So, tantek, are you suggesting that normalize.css is bad for developers, or as a
# 16:32 tantek JonathanNeal: consistency can be used to justify plenty of crappy design
# 16:32 tantek consistency in and of itself is insufficient for any kind of a design principle
# 16:33 tantek e.g. "spec and other browsers" is lowest common denominator - a very poor goal
# 16:33 JonathanNeal it’s not really about design, but about creating a baseline to build upon.
# 16:33 tantek from bad principles you get bad design, bad work
# 16:34 tantek by starting with a badly design foundation, you have a poor baseline to build upon
# 16:35 JonathanNeal idk, isn’t there some proof in the pudding when you consider bootstrap and foundation and all of the developers who have found value in the project?
# 16:35 tantek hah - that's pretty funny because bootstrap has resulted in so many unmaintainable fragile bloated projects/designs that I'm amazed people still take it seriously
# 16:35 JonathanNeal Was it all just marketing? Why did developers adopt it to begin with? Why do they continue to adopt it?
# 16:36 tantek because of the "first launch / ship" experience is not sucky, look pretty initially, but is hell to maintain / update
# 16:36 tantek and clients often pay for first deployment of a project, and then rarely for the maintenance
# 16:37 tantek so developers adopt what "demos well" not what maintains well
# 16:37 tantek but here's the thing, for the *indieweb* perspective, for your *own site*, maintains well is 100x more important than demos well
# 16:38 rhiaro bootstrap always seemed to me like an *awful* lot of code for some rounded clicky buttons..
# 16:38 tantek if those developers were selfdogfooding their use of such tools/frameworks/foundations - they would quickly (in a year or two) find out that such approaches, to put it mildly, sucked
# 16:38 tantek this is one of the reasons selfdogfooding leads to better design
# 16:39 tantek because you quickly debunk the "demos well" "new & flashy" "ooh pretty" marketed CSS/JS frameworks/tools etc.
# 16:39 rhiaro I converged on my own boilerplate css a few years ago, then lost interest in CSS sate of the art, so it's been the same for years
# 16:39 gRegor` What is technical debt?
# 16:39 gRegor` Or is it technology debt?
# 16:40 tantek JonathanNeal: the trick is recognizing it as trendy, and taking the time / energy to evaluate approaches as to whether they are trendy OR based in actual sustainable principles
# 16:40 JonathanNeal knowing that you don’t need to mess with user agent differences is a real gain.
# 16:40 tantek no one advertises their stuff as trendy, you have to figure that out on your own
# 16:41 tantek JonathanNeal: that's a much better more minimal principle to use "don’t need to mess with user agent differences" - a good start, but also insufficient (need more principles)
# 16:41 JonathanNeal don’t throw baby out with the bathwater, normalize has technical benefits, which include reduced time to ship and reduced maintainence.
# 16:41 tantek as all user agent differences come from their own "html.css" that they use internally (whether in code, or in an actual built-in style sheet)
# 16:41 tantek part of that "undoing" is undoing of user agent differences
# 16:44 JonathanNeal undoing is inspecific, as anything touching a default style could be undoing.
# 16:45 JonathanNeal undoing also sounds like taking something away entirely rather than changing it or setting it somewhere specific. reset seems more undo than normalize.
# 16:46 JonathanNeal And remembeer that normalize came out during a time of Chrome, Firefox, Safari, and IE6-9, so why should ua stylesheets be a barrier of entry? Especially for indiewebbers, who don’t need to become css experts.
# 16:46 JonathanNeal They can, but by nature of indieweb, you don’t need to. That’s why I love all the specs and frameworks folks are making here, because that would be a huge barrier of entry for me.
j12t joined the channel
# 16:47 tantek yes. those are more good principles "why should ua stylesheets be a barrier of entry? [reduce barrier to entry from ua defaults]"
# 16:47 GWG Why should anything be a barrier?
# 16:51 GWG tantek: I don't see that as a high bar
prtksxna joined the channel
# 16:51 GWG I'm not against medium sized bars
# 16:53 GWG I think there is a ground between someone having to demonstrate skill vs having to be an expert.
# 16:53 tantek it's not even demonstrate skill - that's the key
# 16:53 tantek it's demonstrate *interest* (AKA passion) and *commitment* (AKA time)
# 16:54 JonathanNeal tantek: In CSS, margins and padding are a barrier of entry. I am still searching for the words: but “width” seems like a explicit request, so when padding changes width, it requires extra calculation, and that’s a barrier.
# 16:54 tantek JonathanNeal: agreed that the default CSS box model is non-trivial and unnecessarily challenging. nevermind margin collapsing.
# 16:54 JonathanNeal So, my cheering on something like reasonable.css would be that, to make a baseline that lessened the common stresses in developing with css.
# 16:54 tantek JonathanNeal: you'll note that my original undohtml.css did 0-out margins
# 16:55 JonathanNeal vertical margin collapsing, horizontal not margin collapsing - it makes me use margin sparingly.
# 16:56 tantek margin collapsing was a bad idea (CSS1) in hindsight. no collapsing would have been more predictable, and thus easier to use.
# 17:10 gRegor` You killed it, snarfed ;)
# 17:12 GWG snarfed: We got a new WordPress enthusiast. That's always good
wolftune and adactio joined the channel
squeakytoy, j12t and snarfed joined the channel
# 17:52 KevinMarks Andi's event where the Foundation and Bootstrap authors talked about their goals was interesting
KartikPrabhu and LauraJ joined the channel
# 18:06 KevinMarks_ twitter launches group messaging. puzzled faces from oldschool twitter users who remember when that was he whole point
# 18:07 Loqi KevinMarks_ meant to say: twitter launcthes group messaging. puzzled faces from oldschool twitter users who remember wthen that was the whole point
prtksxna, iandevlin, veselosky, LauraJ and j12t joined the channel
nloadholtes joined the channel
# 19:29 tantek aaronpk I see (partial and whole) ephemeral FB outages nearly every day
nloadholtes and shiflett joined the channel
nloadholtes, KartikPrabhu, nloadholtes_, dies_el, KevinMarks, snarfed, interactivist, bigbluehat_, lmorchard23, reidab_ and halorgium_ joined the channel
nloadholtes_, amblin_ and amblin joined the channel
# 20:44 GWG snarfed: It's something I've been working on if you don't set a post kind
# 20:47 GWG snarfed: I have a plan for people who haven't coded their prior posts. The absence of a post kind set will have it assume it is a note
# 20:47 GWG I thought I had set that up. Maybe I didn't push that update
nloadholtes joined the channel
# 20:52 GWG snarfed: I'll write that code tonight.
# 20:52 GWG In the meantime, just set a kind for the post
# 20:57 snarfed GWG: thanks! not my site, so feel free to tell the owner
Sebastien-L joined the channel
nloadholtes, shiflett_ and verdi joined the channel
nloadholtes and dorian joined the channel
interactivist and nloadholtes joined the channel
cmhobbs joined the channel
pauloppenheim joined the channel
# 21:37 gRegor` I'm still thinking about the 'start' and 'finish' status
# 21:37 gRegor` Without having too much invisible data, that is
# 21:39 gRegor` It is pretty... something. Geeky
# 21:39 aaronpk can't think of a good term tho, and neither apparently could last.fm
# 21:39 snarfed there's some other popular site for checking into tv shows that people use as a verb too, right?
# 21:40 gRegor` GetGlue became TvTag became dead recently.
# 21:40 gRegor` I'm sure there's other checkin sites, but GetGlue was the big one
# 21:40 aaronpk it's just an awkward overloading of the term "checkin" from foursquare
# 21:40 gRegor` What is logging?
# 21:40 snarfed retry: personally i don't care about checking into media, but i definitely like keeping lists of media
# 21:41 aaronpk you literally check in to a doctor's office. you don't literally check in to a tv show
# 21:41 gRegor` Book logging: blogging. I'm so smrt!
# 21:41 gRegor` snarfed: Like lists you've read, to-read, etc?
jgarber joined the channel
# 21:42 gRegor` Nice. Yeah, I want that too. I figured this would be a simpler start
# 21:42 aaronpk i totally want to log music, movies, tv, books, etc.
# 21:42 snarfed gRegor`: oh also i see a feature request for your site: html titles
# 21:42 gRegor` What are lists?
# 21:43 gRegor` I have it. You mean on my notes pages, like include the note content?
# 21:44 snarfed gRegor`: i mean, using the post name or summary in the title, as opposed to it always being "gRegorLove.com — little g big R"
# 21:44 jgarber And this /only/ happens when submitting from my IP address. localhost:3000 works fine.
# 21:45 aaronpk it's trying to go fetch your app info from the URL specified by the client_id
# 21:45 snarfed (gRegor`: my indie like/reply/repost bookmarklets auto generate post content based on <title>)
# 21:45 gRegor` Yeah, my articles use it, but not the notes yet. My /notes are kind of hacked onto the CMS currently, so it's a bit tricky.
# 21:45 jgarber aaronpk: Ahhh, and it sees an IP and assumes it's globally accessible?
nloadholtes joined the channel
# 21:45 gRegor` Right, I remember seeing that, now that you mention it.
# 21:45 gRegor` I'll add it to my list.
# 21:46 aaronpk jgarber: i think it just fails quickly when trying to access localhost
interactivist joined the channel
# 21:47 aaronpk jgarber: arg, it's gonna take me longer than 2 minutes so I don't really have time for it right now. can you work around it in the mean time?
# 21:47 aaronpk you could just use a client_id that is a public URL
# 21:48 jgarber aaronpk: Oh yeah, it's not a huge showstopping thing. Just ran into it while testing out my app
# 21:48 aaronpk you can keep the redirect uri set to your IP address so everything will keep working
# 21:48 aaronpk the client ID is meant to be a public identifier, it doesn't actually affect the auth flow
# 21:50 jgarber aaronpk: So the client_id could be /any/ publicly available URL, but /should/ be the URL to the homepage of the application?
# 21:50 aaronpk it should ideally have x-h-app markup that specifies the app name and logo
# 21:52 jgarber Oh, very cool. Not familiar with 'h-x-app'. Will check it out. Thanks for your help!
# 21:53 aaronpk ben_thatmust: yeah, it's getting to the point i can't catch up anymore
# 21:55 aaronpk oh good, wasn't sure if anyone was actaully reading that
# 21:57 aaronpk i like how this channel has turned into jeopardy where we provide answers in the form of a question
nloadholtes and prtksxna joined the channel
nloadholtes joined the channel
# 22:19 Loqi Tantek-ing is a method of encouraging people to contribute to the wiki by indirectly prompting the person who first mentioned the term to create a short wiki dfn page for it https://indiewebcamp.com/tanteking
myfreeweb joined the channel
KevinMarks joined the channel
prtksxna and lukebrooker joined the channel
# 22:30 KevinMarks Makes sense in that if they're using utm cruft they need rel canonical to get the right url indexed by Google
# 22:33 snarfed hrm. so. i have a POST endpoint that i want to oauth-protect
# 22:33 snarfed …except oauth redirects can obviously only be GETs
tfontaine joined the channel
# 22:34 snarfed i'm starting to oauth-protect the interactive bridgy publish flow
# 22:34 snarfed specifically, the final publish part, after the preview
# 22:35 snarfed which should be a POST, since it modifies state inside your silo account (creates new posts, etc)
# 22:35 snarfed ie make it a GET and verify the access token first?
# 22:36 snarfed that helps prevent exploits, but it doesn't protect against double submission, etc
# 22:37 snarfed general case: i have a POST form with a button. when the user clicks on that button, it has some side effect.
# 22:38 snarfed i want to do the oauth dance when they click that button, and only perform the action if the oauth dance succeeds.
# 22:39 snarfed aaronpk: maybe i can make it GET and use a nonce and server side transaction to guarantee only-once
# 22:39 gRegor` I don't really know Oauth, but are you talking about redirecting a POST to a GET? Isn't that HTTP 303?
# 22:40 snarfed gRegor`: nah, i actually want to redirect a GET to a POST
# 22:40 aaronpk is it possible that they will be logged in to bridgy already? or are you planning on doing the oauth dance each time they press the button?
# 22:40 snarfed bridgy has no accounts or logging in of its own. it's all per-silo oauth.
# 22:41 aaronpk so once the oauth dance succeeds, they end up back on bridgy with the credentials that bridgy uses to verify their login
# 22:41 aaronpk assuming you're verifying the login server-side, (which you have to do for twitter), you could do the publish server-side at that point as well
# 22:41 snarfed aaronpk: yeah, but again, i'm then vulnerable to double submission
# 22:42 aaronpk most oauth apis won't let a second verify request succeed
# 22:42 snarfed oh wait, maybe not, since oauth prevents replay attacks?
# 22:42 gRegor` tfontaine: I think bear mentioned that in #indiechat, but not in here yet. Fun times.
# 22:43 aaronpk some of them will let you verify a request as many times as you want within some time window like 30 seconds. others will allow only one verify for the auth code.
# 22:43 snarfed this is fb, tw, and ig. i should probably just do the nonce thing on top.
# 22:44 aaronpk you're gonna have to store the user's submission before you start the oauth flow anyway
# 22:45 snarfed we're quite good at overloading the state param at this point :P
# 22:45 snarfed hmm. one alternative is to always require the invisible bridgy publish link, even for interactive
# 22:45 aaronpk i thought the point of interactive was to not require the bridgy publish link
# 22:46 snarfed it's also so you get a preview, and for sites that don't send wms and/or non-technical people, etc
# 22:47 snarfed pretty much all reasonable CMSes should let you insert empty links, right?
# 22:50 snarfed kylewm: curious of what you think of this possible bridgy publish UX change ^^^ (requiring the brid.gy/publish/… link even for the interactive flow)
prtksxna joined the channel
# 22:51 KevinMarks_ re scrobbled etc - we used 'play' in activity streams because it covered audio, video and games
# 22:51 snarfed hmm. one drawback is, if your server does send wms automatically, this would prevent you from using interactive, since it would always send the publish wm
pwcc and tantek joined the channel
# 22:57 GWG tantek: So, you are suggesting that when held for moderation, my site/other WordPress sites return 202 instead of 200?
# 22:57 GWG I may put it on the issue tracker
# 22:57 tantek I thought that was already in the 202 description/discussion re: moderation
# 22:58 tantek we certainly discussed moderation interaction with webmention 202 response in IRC before
prtksxna joined the channel
# 22:58 tantek perhaps aaronpk can check the IRC logs for discussion of moderation interaction with webmention 202 response in IRC
# 22:58 tantek GWG, right that's my point perhaps moderation wasn't captured there
# 22:59 GWG Human moderation is error code 200
# 22:59 tantek sorry I'm mobile and can't double check stuff
# 23:01 GWG aaronpk: But that is only noted for Async webmentions.
snarfed joined the channel
# 23:04 GWG No wonder I can't find the record to explain what tantek was proposing.
# 23:04 aaronpk i dunno, my instinct now is that moderated comments should have the same response as async processed comments since they both appear the same to the viewer
# 23:05 aaronpk also the point of returning 202 accepted is that it can also return a status URL people can click on to check if the processing is done
# 23:05 aaronpk presumably could do the same for moderated comments, to see when their comment is posted
# 23:06 aaronpk so there is some discussion for the logs on why 202 makes sense for moderated comments
# 23:06 aaronpk so there is some discussion for the logs on why 202 makes sense for moderated webmention comments <-- (more keywords to search for in the logs later)
mlncn joined the channel
# 23:10 KevinMarks_ there is antispam lore that says not to return different results for "posted" and "queued" as spammers use it as an oracle to test the boundaries of your filter
# 23:10 KevinMarks_ but as we aren't assuming content based filtering that may not be an issue
# 23:11 aaronpk frankly the goal is for most webmention endpoints to return 202 regardless of whether a comment is moderated, to encourage async processing
KevinMarks joined the channel
indie-visitor joined the channel
# 23:29 Loqi Welcome, indie-visitor! Set your nickname by typing /nick yourname
prtksxna joined the channel