#dev 2017-12-17

2017-12-17 UTC
gRegorLove, tantek, KartikPrabhu, eli_oat, genet, [miklb] and renem joined the channel
#
aaronpk
curve25519: your comments are working! Mostly anyway. If you add a p-name class to the same class as e-content they'll look better. You can send the webmentions again to my posts and they'll parse the updated HTML
#
GWG
aaronpk, does the Indieauth token endpoint have an undocumented verification query string?
#
aaronpk
Should be all documented in the spec. What are you trying to do?
#
GWG
I can't find a reference to /verify?token= but I will look again
#
aaronpk
Where did you see /verify?
#
GWG
Pfefferle put it into the Indieauth plugin for WordPress. I wanted to replace it with the official method
#
aaronpk
Is that what you're looking for?
#
GWG
That is what I want it to do so it is not Indieauth.com dependent
#
aaronpk
Ah one sec
#
aaronpk
That's the "verify the auth code" step
#
GWG
I am still mastering your book, but I thought I would give it a shot.
#
aaronpk
It's a request to the authorization endpoint
#
GWG
Interesting.
#
GWG
That explains a lot
#
GWG
This isn't using the token endpoint at all.
#
GWG
I am not sure how I missed that.
#
aaronpk
The first version of IndieAuth.com (before it was meant to be a spec) implemented that as a separate endpoint but then I realized it was simpler to use the same one. So the IndieAuth.com service is updated to not use /verify anymore too.
#
aaronpk
Yep no token endpoint if you're just doing login
#
GWG
So, either way, I should replace it.
#
GWG
If I want to make it platform neutral
#
GWG
And I can't trust you to support it forever
#
aaronpk
What you should change it to depends on the goals of this plugin
#
aaronpk
Are you trying to provide a way to log in to your own wordpress site without a password, perhaps using twitter/github/relmeauth?
#
GWG
Aaronpk, right now, the goal was to login to your site using Indieauth. The goals never achieved include logging into your own site with any arbitrary Indieauth server.
#
aaronpk
So it's a RelMeAuth plugin then?
#
GWG
And the stretch goal making WordPress itself an authentication endpoint
#
GWG
Isn't relmeauth just one authentication method?
#
aaronpk
Saying you want the plugin to let people log in with IndieAuth is more like how our wiki lets anyone log in, which is very different from wordpress' normal user accounts work
#
GWG
aaronpk, that is what it does now. It maps domains to a user account.
#
GWG
That's also how WordPress Micropub handles it
#
aaronpk
Okay so you want the plugin to for example let me log in to your wordpress site and your plugin directs me to my own IndieAuth server, never touching IndieAuth.com?
#
GWG
To any Indieauth server specified by the site administrator
#
aaronpk
That's not quite how it works
#
GWG
So, defaultly Indieauth.com, but if I implement the specification, shouldn't it not matter?
#
GWG
aaronpk, then I am still confused
#
aaronpk
The confusion comes back to my naming of IndieAuth.com so I apologize for that
#
GWG
Isn't the endpoint specified by the authentication endpoint header?
#
aaronpk
Yes, of the persons domain who is signing in
#
GWG
Which, on a WordPress site, which is the domain, would be set by the site administrator.
#
aaronpk
Not quite
#
aaronpk
So if I'm signing in to your wordpress, the plugin will be talking to the endpoint that my domain points to, not what the Wordpress admin says
#
GWG
I think I am not explaining the scenario well
#
aaronpk
That's why I was trying to clarify the scope of the plugin
#
GWG
Right now, the plugin adds a domain field to the WordPress login page. If filled, it starts the auth process with Indieauth.com
#
aaronpk
Okay, that is one of the two uses of IndieAuth.com, the one that I'm renaming to indielogin.com since it does not actually deal with the IndieAuth spec.
#
aaronpk
In that situation, the plugin is letting this external service handle authenticating users, which it does via RelMeAuth as well as PGP and email logins.
#
aaronpk
To remove the hard coded url to IndieAuth.com from this plugin, you should include an admin setting for which login service to use, defaulting to IndieAuth.com (or indielogin.com once I launch that)
#
aaronpk
If you want to go one step further, then if a user enters a domain in that box that is not the domain the wordpress site is installed in, then you can implement the IndieAuth login flow in the plugin, which looks like
#
aaronpk
Since the IndieAuth.com API is identical to the spec, this difference ends up being extremely minor, basically setting a default if no authorization endpoint exists at the users domain
#
GWG
That's sort of my first step. Second is Indieauth authentication for the WordPress REST API
#
GWG
Stretch goal, Indieauth server
#
GWG
I think I can do 1 and 2
#
aaronpk
Turning it into an IndieAuth server is definitely a bigger project, but not crazy. You should take a look at the selfauth project as a reference since it's a relatively small amount of code
#
GWG
aaronpk, still a stretch goal
#
GWG
Not everyone wants to run their own authentication provider
#
GWG
Will look at selfauth though
#
GWG
I think the progression I am planning will help me learn
KartikPrabhu and [pfefferle] joined the channel
#
Zegnat
GWG if you are going to look at selfauth I am always happy to answer implementation questions re IndieAuth :)
#
patrick.multitek.no
created /Getting_Started-nb (+12183) "First part of Norwegian translation"
(view diff)
[mlopatka] and jonnybarnes joined the channel
#
patrick.multitek.no
edited /Getting_Started-nb (+213) "Translate more of the article"
(view diff)
genet joined the channel
#
patrick.multitek.no
created /discuss-nb (+4702) "Translated to Norwegian"
(view diff)
#
patrick.multitek.no
created /User:Patrick.multitek.no (+245) "Created page with "<span class="h-card">[https://patrick.multitek.no/ <img src="https://gravatar.com/avatar/61dd646db0cfa031a46944b398ea913d" style="width:128px;float:right;margin-left:1em"/>'''...""
(view diff)
raretrack joined the channel
#
patrick.multitek.no
edited /Getting_Started-nb (+637) "Completed translation"
(view diff)
snarfed, [miklb], genet, [kevinmarks], John____, cerp, krop_, radiopetushki and krup joined the channel; genet and krop_ left the channel
#
www.svenknebel.de
edited /Leaders (+162) "/* Issues */ +o across timezones /cc Zegnat"
(view diff)
krup, tantek, tracya and [miklb] joined the channel
#
patrick.multitek.no
edited /other-languages (+0) "/* translations ordered by number of articles */"
(view diff)
#
patrick.multitek.no
created /Contribute-nb (+730) "Translated"
(view diff)
#
patrick.multitek.no
created /stable-pages-nb (+1151) "Translated to Norwegian"
(view diff)
[miklb] joined the channel
#
www.boffosocko.com
edited /Storify (+267) "Alan Levine export ideas for Storify"
(view diff)
#
gRegorLove
Heh "Third party clown service"
#
gregorlove.com
edited /read (+111) "/* gRegor Morrill */ first p-read-status=finished"
(view diff)
[eddie] joined the channel
#
[eddie]
!tell gRegorLove: That’s interesting having the “finished read” post be a reply to the “started read” post. 🤔
#
Loqi
Ok, I'll tell them that when I see them next
#
gRegorLove
Yeah, the main use right now just being you can see it as a comment on the "currently reading" one
#
Loqi
gRegorLove: [eddie] left you a message 7 minutes ago: That’s interesting having the “finished read” post be a reply to the “started read” post. 🤔
#
gRegorLove
I need to re-think my aggregate reading page, though. https://gregorlove.com/reading/ The book still shows currently reading since that post read-status didn't change.
#
gRegorLove
Seems more like I need a permalink for each book and the to-read, reading, and finished statuses would be in reply to that. Then I could filter the latest replies to put them in the appropriate list.
#
gRegorLove
That's kind of complicated with my current setup, so will focus on continuing to post the /read statuses
#
gRegorLove
I am using local /isbn links for books, so that's a starting point. They only redirect to Amazon for now, though.
chrisaldrich joined the channel
#
[eddie]
gRegorLove: Yeah, I think I’m likely going to end up with a permalink for each book as well. That’s interesting, thinking of status updates as replies to a book’s permalink.
#
[eddie]
Lots of directions I feel like it could end up going in the long-run. I think one downfall of replies is I restrict replies from a lot of my feeds. A reply to a person and a book update that is a “reply” to the book doesn’t quite match up on the behavior I’m looking for in my streams. So that is one roadblock for me.
inzen91 joined the channel
[1 line deleted]
# KartikPrabhu joined the channel
KartikPrabhu, krup, Loqi, ludovicchabant and [pfefferle] joined the channel
#
arlojamesbarnes.com
created /IndieWeb:General_disclaimer (+187) "Silly start to page, should be replaced with real content"
(view diff)
#
arlojamesbarnes.com
created /IndieWeb:Privacy_policy (+29) "Stopgap measure until a real policy is instituted"
(view diff)
#
arlojamesbarnes.com
created /IndieWeb:Autoconfirmed_users (+791) "Numbers should be confirmed"
(view diff)
#
arlojamesbarnes.com
created /IndieWeb:Users (+28) "Should be replaced with real content"
(view diff)