#dev 2016-09-04

2016-09-04 UTC
tantek, singpolyma, KevinMarks_ and KevinMarks joined the channel
#
tantek.com
edited /database-antipattern (+274) "fix header depth, add tweet / article re: 5 min of ways databases might fail"
(view diff)
thebaer, KevinMarks, tantek and mblaney joined the channel
#
mblaney
!tell snarfed strange, just reading logs from yesterday and I received webmentions from you on the 21st of August?
#
Loqi
Ok, I'll tell them that when I see them next
#
GWG
mblaney: pfefferle suggested it was a problem with WP-Cron. Which I explored as well.
#
mblaney
GWG: maybe intermittent then? the webmentions were for older posts.
#
GWG
mblaney: He reported problems in April. 4.5 was released in April. Wondering if something in there changed it
KevinMarks, tantek and KevinMarks_ joined the channel
#
@digilotta
Das Konzept von IndieAuth https://t.co/aymMaloIOy wird nicht so recht klar ... #wcfra
(twitter.com/_/status/772036881349505024)
cmal and cweiske joined the channel
#
@dailypia
@Rougerepertoire Google mal Webmention. Sind einige Plug-ins, die eingerichtet werden müssen.
(twitter.com/_/status/772397941940158467)
dmaczka and cmal joined the channel
#
@aswath
There are many ways to federate w other id providers - OpenID, OAuth, IndieAuth, ...
(twitter.com/_/status/772443907380670464)
cmal joined the channel
#
bear
currently thinking of ways to get nginx (or anything really) to be able to trigger a webhook when it routes to certain locations of a static site
#
bear
purpose is to allow for a load balanced (HA even) static site still be able to have a dynamic feel by calling webhooks for certain endpoints
#
bear
first thought: nginx + lua; second thought custom flask app that is basically a map of location -> webhook
#
voxpelli
bear: my thinking is to achieve that through client side javascripts that fetches the data from those endpoints
dmaczka joined the channel
#
bear
yea, i'm trying to avoid anything client side
#
bear
the context I didn't share above is that i'm noodling on a service to allow for pure static domains as a service for indieweb folks
#
voxpelli
I considered it a progressive enhancement – as long as one can find the content somehow through curl it doesn't have to be as conventient as with js
#
bear
you sign up, configure your domain and where to pull static files then my service does all the web stuff
#
voxpelli
would fit well with my "dynamic stuff as a service" things that's geared towards static sites ;)
#
bear
yea, your method would work for folks who are familiar with js - I'm trying to find a way that allows for jekyll style site creation to be deployable by folks with zero web knowledge
#
voxpelli
my webmention service right now can list all mentions when linked to and enhance that link to get realtime embedded webmentions
#
bear
now that's handy
#
voxpelli
bear: I'm also targetting people with zero web knowledge, my js requires three lines to be added to a theme and eg. miklb is working a ready built theme with everything built in
#
bear
and it is exactly that type of feature i'm trying to not disable with this static site service
#
bear
yea, my goal is to allow zero web knowledge to take the output of miklb's stuff and "have a domain"
#
bear
nginx config, lets encrypt, github commit triggers == all the backend stuff that we take for granted
#
voxpelli
I've been thinking about making an automatic wizard that could set up a full Micropub + WebMention ready site on GitHub Pages if one just signs in with ones GitHub account, this would be similar to that
#
bear
it could also end up being nothing but a long weekend coding activity that does nothing useful ;)
#
bear
right
#
bear
I am thinking about something like github but for people who don't want github (as easy as it is even)
#
voxpelli
yeah, I'm targeting it initially as my micropub endpoint currently doesn't use raw git to commit stuff but rather GitHub's API
#
voxpelli
would love a lets encrypt enabled alternative to GitHub Pages
#
bear
yea, maybe i'll focus on the pure static part first - get the backend scripts working to enable a internet->nginx->static setup that creates the letsencrypt part for you
#
bear
cool - i'll focus on that as a first step
#
bear
goes to setup his flask framework
miklb and tantek joined the channel
#
sknebel
cweiske: why let's encrypt specifically? Or just something that supports HTTPS with custom domains out of the box?
#
cweiske
sknebel, what where?
#
cweiske
I'm missing the context here
#
sknebel
sorry, meant voxpelli
#
sknebel
don't know why I typed your name ;)
#
voxpelli
sknebel: not lets encrypt specifically but rather the new "lets-encrypt:ish" certificates that's becoming popular
#
voxpelli
if one eg. is fluent in AWS, then their free https certs works just as well, and there are probably other ways to get a free good https cert also
#
voxpelli
(imho GitHub Pages should prioritize supporting https for pages with custom domains as well)
#
sknebel
https://www.netlify.com/ those guys recently made HTTPS for custom domains free, they do static hosting and some sort of CI on top
#
voxpelli
yeah, been looking at them, thinking of whether to move there or do get Cloudflare in front of my site
#
voxpelli
kind of thinking of doing a tantek and dogfooding a bad host just to get experience with what an ordinary site owner experiences
#
voxpelli
hence sticking with GitHub Pages
#
bear
well poo, netlify sounds like what I was aiming for :)
#
voxpelli
there's surge.sh as well
#
bear
surge.sh (when I last looked at it) seemed very much geared towards the developer
cmal joined the channel
#
voxpelli
bear: yeah, front-end developer
#
voxpelli
though bothit and Netlify seems to mention "CLI" a bit too many times for any ordinary person to use
#
bear
i'll chew on this still - interested in seeing if I can get a UX flow that goes from sign-up to static-site without having to ever touch a dev tool
#
voxpelli
ideally it should be as easy to sign up for a page on such a service as it is to sign up for one on WordPress.com
#
aaronpk
bear++ that'd be awesome
#
Loqi
bear has 163 karma (4 in this channel)
#
bear
even if the UX limits the choices to those tools that can be driven by a server side environment
#
voxpelli
pick a theme -> get a site with Micropub set up -> do all editing from Micropub? with eg. Jekyll one could also easily switch theme
#
bear
first to get a flask app that has good solid auth and let's me create accounts (trying desparately to avoid the term "user")
#
bear
yea, i'm definitely gearing towards a theme + micropub setup
#
voxpelli
ah, the auth, that's where I'm still a bit stuck to get my Micropub up as a hosted service (and to extend my Webmeention service)
#
voxpelli
bear: planning on doing your own Micropub or leveraging someone elses?
#
bear
I wanted to use my python micropub libs to get them into a production environment
#
aaronpk
after the conference i went to this week, and doing a bunch of research on OAuth 2 to finish writing my book, I'm planning on finding a way to describe IndieAuth better as a "profile" of OAuth 2 rather than as its own thing
#
bear
but I can't see (right now) why it should be limited to just a single endpoint
#
voxpelli
as long as an endpoint can read and write posts to a Jekyll, Hugo or such repo/file system then multiple could be supported
#
bear
aaronpk - are you going to incorporate anything that Eran has worked on lately?
#
voxpelli
a tricky partis handling auth against other services – signing up for an account at one of the sites and getting automatically signed up for services on some others
#
aaronpk
bear: not planning on changing much of the functional part of indieauth, just changing how it's described
#
bear
k - just wondering if you were contemplating diving into his new stuff yet
thebaer joined the channel
#
aaronpk
nah there's a lot of interesting work still being done in the OAuth group that has more of a chance of actually getting deployed
#
bear
coolness
#
aaronpk
(a lot of silly complicated work too but that's a different story)
#
bear
I look forward to you wading thru the complicated stuff and giving us normal devs a roadmap
#
aaronpk
the two things i'm most excited about right now are the PKCE extension which essentially plugs the security hole in the redirect for native apps or other things where you can't rely on the security of the redirect URI, and the device flow for CLI clients or other clients that don't have web browsers
#
bear
the device flow I would love to help test :)
#
aaronpk
i actually wrote a proxy server that can enable a device flow for any existing OAuth server. I was using it to log in to my github account on an appletv app.
#
bear
yes! that is what i'm talking about :)
#
bear
is getting better at reading php code because of aaronpk's samples
#
aaronpk
i was meaning to do a blog post about that whole thing but never got around to it
#
bear
sounds like this book will be one big offline blog post about it
#
aaronpk
pretty much :)
#
aaronpk
it's online now! i'll be working on the print version in the coming months https://oauth.com
#
bear
wow - how did you get oauth.com domain
#
aaronpk
from eran :)
#
aaronpk
at the same time I got oauth.net (and .org and .info)
#
bear
ah - when he shed all things oauth ... nice
#
bear
that was a great talk he did about leaving oauth behind :)
#
bear
(tho very rude and blunt)
#
aaronpk
indeed :) that's also where i got my favorite oauth shirt. the oauth cat getting run over.
#
bear
I have one in my "keep forever" box
#
bear
where you at the realtime conference?
#
bear
oh my - never knew that - could have said hi
#
bear
err, I could have said hi to you that is
#
aaronpk
i remember running into you at one of them, but not sure which
#
bear
so many people that I had some serious fan-boy moments with
tantek and Loqi joined the channel
#
tantek.com
edited /Squarespace (+518) "Friendly - mf2 and webmention support requested by acegiak, open to it!"
(view diff)
KevinMarks joined the channel
#
KevinMarks
realises he hasn't read all the scrollback and you did indeed see them
KevinMarks and myfreeweb joined the channel
#
ben_thatmustbeme
hey aaronpk, i seem to be having some issues with indieauth
#
ben_thatmustbeme
i don't think it likes '#' being part of the URL
#
ben_thatmustbeme
so the redirect back to my app fails as it has the url encoded /%23/auth instead of /#/auth
#
ben_thatmustbeme
if i correct the link locally, it continues fine, but then i get error=invalid_request&error_description=The+%27redirect_uri%27+parameter+did+not+match
tantek and singpolyma joined the channel
#
aaronpk
your redirect URI can't contain #
#
aaronpk
ben_thatmustbeme: https://www.oauth.com/oauth2-servers/redirect-uris/redirect-uri-registration/ "Registered redirect URIs may contain query string parameters, but must not contain anything in the fragment."
#
tantek.com
edited /Lanyrd (+641) "Downtime 2016-09"
(view diff)
KevinMarks joined the channel
#
tantek.com
edited /POSSE (+155) "/* Advantages */ cite tweet (ironically?) for reducing 3rd party dependence"
(view diff)
thebaer joined the channel
#
ben_thatmustbeme
Ick. That's unfortunate. That may scrap any hope of having the framework do the login at all
#
ben_thatmustbeme
I may have to hack some things
tantek and thebaer joined the channel
#
aaronpk
The framework needs to not rely on fragment URLs in order to support any OAuth service
#
tantek
hey GWG since you were talking code and webmentions, continuing conversation here
#
tantek
that's how I call do link discovery without repeating myself with scanning HEAD or BODY
#
tantek
hey aaronpk, since you at least co-maintain this library, you may be interested in the new file and two functions I added: https://github.com/indieweb/link-rel-parser-php/blob/master/src/IndieWeb/get_rel_webmention.php
#
tantek
selfdogfooded in Falcon for quite some time
#
tantek
and per GWG's recent questions re: how to do webmention/pingback discovery without repeating himself, I figured it was easiest to share the code with how I do so
#
tantek
since I think it should be fairly drop-in re-usable
#
aaronpk
Oh is there new stuff there?
#
tantek
yes that's a brand new file
#
tantek
that's how I call the existing functions in the library
#
tantek
it's a higher level abstraction as it were
#
tantek
since the link rel parser is generic for any link rel values
#
GWG
tantek: I have to use WordPress functions though.
#
GWG
But it can be adapted
#
tantek
GWG, sure, use the equivalent wordpress functions. point is - the logic is in the code I shared
#
tantek
drop in whatever wordpress equivalent functions you need to
#
aaronpk
hm I will have to take a look. I suspect I will have to add tests for it :-)
#
tantek.com
edited /private_posts (+22) "/* See Also */ private account"
(view diff)
#
tantek.com
edited /Webmention (+294) "/* Sending */ note open sourcing of get_rel_webmention"
(view diff)
#
tantek
aaronpk re: tests, FWIW that's the code I used with Falcon to pass the webmention discovery tests
#
aaronpk
cool. well the tests will mostly be there to make sure the functionality doesn't change in the future
#
ben_thatmustbeme
Nevermind, found a way around it
#
ben_thatmustbeme
Login success! Can't post with it yet, but that won't be too hard