#dev 2018-06-03

2018-06-03 UTC
[tantek] and eli_oat joined the channel
#
ancarda
So I'm working on WebMentions, and I have this page sending me notifications: https://webmention.rocks/receive/1/841787b2e24649e204738086454d50f6 -- when I run it through XRay, I can't see the link at the top of the page to my blog post
#
Loqi
[Webmention Rocks!] Receiver Test #1
#
ancarda
Should I always use an HTML parser to find <a> links? I was thinking of using XRay so I can see if it's a comment, like, or bookmark of a page on my website
#
ancarda
Also, one thing I'm not sure of -- if I get a WebMention for a page and I go looking for that URL only to find it *does not exist*, should I delete the like/comment on my website?
renem joined the channel
#
aaronpk
oh tricky, I guess I should have made that test use in-reply-to markup
#
aaronpk
but the answer to your first question is: it's up to you, heh
#
aaronpk
if you want to accept webmentions from sites that may not be using microformats markup, then you'll need to use an HTML parser to check for <a> tags
#
aaronpk
but if you only care about webmentions from pages that use microformats (so that you can show something nicer than just the link) then you can use XRay and just know that you'll be dropping webmentions on the floor if they don't have microformats
#
aaronpk
I just updated webmention.rocks to add in-reply-to so you'll see your URL in xray now
#
ancarda
Thanks!
#
ancarda
So my general plan is to look (using XRay) for proper IndieWeb content, then if nothing is found, use an HTML parser to look for an <a/img> that links to me. If there's IndieWeb content, I can show the display picture along with the name and some details
#
aaronpk
sounds great
#
ancarda
By the way, your blog has a textbox & button to submit a WebMention. Does that just drop a URL into your queue to be processed as if it were submitted? Is that a useful thing to also have (it's very easy to make, just write a JSON file out to be picked up by the cron job)
#
aaronpk
yeah it's actually an HTML form that posts directly to my webmention endpoint
#
aaronpk
so basically it makes your browser send a webmention
#
aaronpk
you'll notice the same source and target fields on that form
#
ancarda
Hmm, that's neat
#
ancarda
My endpoint is passing all the tests for https://webmention.rocks/receive/2 but it only checked a handful. The homepage has a ton of tests for sending WebMentions, but not as many if you are receiving. Do you know if there's more tests I can run?
#
Loqi
[Webmention Rocks!] Receiver Test #2
#
aaronpk
yeah I never ended up making a thorough suite of receiver tests
#
ancarda
I can read through the spec again tomorrow. I'm not sure I got everything right (e.g. I'm not yet verifying the scheme is `http` or `https`)
#
aaronpk
there are a few other tools for throwing stuff at your endpoint, but they test more the comment display side of things https://indieweb.org/webmention-implementation-guide#Resources
#
ancarda
Ooh, thanks. Interesting one tries to do an XSS attack
#
ancarda
Although I can't login to https://checkmention.appspot.com/job -- I just get redirected back to that URL after logging in :/
#
aaronpk
hm me too
#
ancarda
Right, I have to go to bed. Absolutely shattered. Goodnight
#
aaronpk
goodnight! congrats on the progress!
#
Loqi
see you in the morning!
#
ancarda
Thanks
#
ancarda
I'd say "Send me a WebMention!" but you can do that when I have some better content haha
#
markdain.net
edited /Nginx (+163) "Add a note about my Nginx usage"
(view diff)
jjuran, j12t, [snarfed], cloud-maingo and snarfed joined the channel
#
GWG
Been slow this evening.
#
dansup
hi GWG
#
GWG
Hello, dansup. What are you up to?
#
dansup
I am working on this, a federated instagram alternative. https://pixelfed.social/dansup
#
dansup
I have spoken with aaronpk about adding indieweb support :)
#
GWG
dansup: What do you consider to be Indieweb support?
#
dansup
GWG: project website: https://pixelfed.org/
#
dansup
so websub and webnotifications are on my roadmap
#
GWG
dansup: Where are the photos stored? On the Pixelfed site or can they be stored on your own site?
#
dansup
GWG: you can host your own instance, its powered by ActivityPub
#
GWG
dansup: I understand that. But, I like to post photos on my own website. Can I share those photos with Pixelfed?
#
dansup
GWG: if you support ActivityPub, than anyone can follow you as if you were on the same site! They could send comments and likes to your ActivityPub inbox
#
GWG
dansup: I don't currently. I support webmention though. Have you considered supporting that?
#
dansup
I'm working on a GNU/Social ActivityPub plugin and also ActivityStreams! https://github.com/dansup/php-activitystreams
#
Loqi
[dansup] php-activitystreams: Activity Streams is a simple specification used to describe social actions around the web.
#
dansup
oh i meant webmentions, not webnotifications. Been a long day
#
GWG
Okay
#
GWG
I thought you meant the web notifications API.
#
GWG
Receiving or sending webmentions?
#
dansup
that is planned!
#
dansup
GWG: sending for now
#
GWG
Well, sounds interesting
#
GWG
How has the response been?
#
GWG
Or still early?
#
dansup
So I launched 2 days ago in alpha, and 573 users who posted 934 statuses and over 300k + hits! https://i.dansup.xyz/3I0F2p2B321c
#
dansup
GWG: its been early
#
GWG
Not bad though
#
dansup
federation support isnt finished yet
#
@colelyman
↩️ That did the trick!! Thank you so much. PS I just got webmentions working (which I based off of your implementation), when I write up my post on my site I will send you a webmention ;)
(twitter.com/_/status/1003153534848602112)
AngeloGladding joined the channel
#
ancarda
When I pass Zegnat's website (or mine) into XRay, why don't I see all, or most, of the information? For example, job-title is missing from mine: https://xray.p3k.io/parse?expect=card&url=https%3A%2F%2Fmarkdain.net%2F
#
Zegnat
Which website are you talking about? :P
#
Zegnat
Because licit.li is a little special, and will not work at the best of times
#
Zegnat
XRay will also transform mf2 data into jf2. I am not sure author cards ever include more info than what you are seeing there. (see https://www.w3.org/TR/jf2/#author)
#
Loqi
Mr. Mark Dain
#
ancarda
No just vanderven.se/martijn. The one with *all the microformats*
#
Zegnat
Ooh, I love that you have the prefix
#
ancarda
Haha, there's some hidden data like job title that I figured may be useful if someone is parsing the page to show a card or something
#
Zegnat
Job title shows correctly in the PHP mf2 parser, so you are good there.
#
ancarda
If I ever get a suffix (BSc, MSc, Ph.d.), oh I will show that everywhere
#
Zegnat
I am guessing XRay’s normalisation just doesn’t include it because it isn’t general enough. (XRay is especially nice for things like Webmentions *because* it normalises a lot of stuff.)
#
ancarda
Well, I was hoping to use pronoun for when I get a WebMention (it should send me a push notification describing the mention), but I could always word the string to avoid that
#
Zegnat
Ooh, that is an interesting usecase! That might be worth taking up either on the jf2 spec for author objects, or in an XRay issue
#
ancarda
Like "Martijn liked your post on vanderven.se/martijn" rather than "Martijn liked your post on his website"
#
ancarda
... Now that I think about it, you're almost certainly going to use licit.li, which is the weird HTTP/2 only setup ...
#
Zegnat
Solution: host XRay yourself and run up-to-date curl? ;)
#
ancarda
Yeah I could do that (I was going to host myself anyway)
#
ancarda
As for curl, I have whatever is current in Ubuntu Server right now
#
ancarda
curl -i https://licit.li/ => curl: (52) Empty reply from server
#
ancarda
shakes fist at Zegnat
#
Zegnat
`curl --version | grep HTTP2`
#
ancarda
Yeah that returns nothing (it's not supported)
#
ancarda
curl 7.55.1 (x86_64-pc-linux-gnu) libcurl/7.55.1 OpenSSL/1.0.2g zlib/1.2.11 libidn2/2.0.2 libpsl/0.18.0 (+libidn2/2.0.2) librtmp/2.3. \n Release-Date: 2017-08-14
#
Zegnat
I am still surprised by how non-standard HTTP/2 is in libraries. Basically nobody has complained that their browser didn’t support licit.li
#
ancarda
I guess it's a good test, I need to somehow sort this out
#
Zegnat
“need” is a strong word.
#
Zegnat
curl 7.60.0 (x86_64-apple-darwin16.7.0) libcurl/7.60.0 OpenSSL/1.0.2o zlib/1.2.8 libidn2/2.0.5 nghttp2/1.32.0 \n Release-Date: 2018-05-16
#
Zegnat
Is what I have locally
#
ancarda
Well, I'm not sure if you saw last night's posts (~3 AM) -- I can now accept WebMentions! They just get logged for the time being but I have half a cron job that can process them
#
ancarda
You'll surely be liking all my posts, so I do need to have working curl to your website
#
Zegnat
As soon as I figure out where I wanna go with my blog, yes. So you’ll be safe for another few months :P
#
ancarda
Well anyway, my plans for today are to add XRay to my WebMention cron job, so I can start adding replies, likes, etc... on posts on my website
#
ancarda
That'll be a bit tricky with my CSP header, so I might need to proxy display pictures
#
Zegnat
Nice!
#
Zegnat
You wouldn’t be the first to proxy/cache the avatars
#
ancarda
Probably won't cache - I'm not sure how well that would work
#
ancarda
Is anyone else using immutable URLs?
#
ancarda
Oh the other reason I can't use XRay is I want to get the given name (if available) for the notification, not just the fullname and I'm not just doing a substring by first space, as that won't always work; on my own website that'll just return "Mr."
#
ancarda
I could have some horribly broken logic that assumes [Martijn, van, der, Ven] is given-name, middle-name1, middle-name2, family name. "Mr. Ven" would be completely wrong
#
Zegnat
That would indeed be completely wrong.
#
Zegnat
Hmm, do I list a honorific?
#
Loqi
Martijn van der Ven
#
Loqi
Martijn van der Ven
#
Zegnat
Apparently not
[kevinmarks] joined the channel
#
[kevinmarks]
If the given name isn't explicitly marked up, I would not suggest trying to guess what it is. You'll end up annoying people or forcing them into a US English mould.
#
ancarda
Ok, so I'll look into using https://github.com/indieweb/php-mf2 rather than XRay
#
Loqi
[indieweb] php-mf2: php-mf2 is a pure, generic microformats-2 parser for PHP. It makes HTML as easy to consume as JSON.
#
ancarda
[kevinmarks]: Yeah, I was always going to fallback to full name if there's no given name
#
ancarda
Much like with pronoun, if I can't find one I recognize on the page, I'd just word the notification differently so it avoids using a pronoun at all
#
Zegnat
I am surprised by the amount of people who have been referring to me by my fullname. I think jeremycherfas did. And in some of jgmac1106’s posts he also refers to me as “Martijn van der Ven”. I find that really odd looking in prose.
#
[kevinmarks]
That's a good approach. Google went badly wrong trying to guess what names are http://epeus.blogspot.com/2011/08/google-plus-must-stop-this-identity.html
#
[kevinmarks]
You could look for nickname too - on the assumption if they mark that up they are expecting people to use it.
#
Zegnat
ancarda, there is also a mf2 parser written in Go, if you are still building your website in that
#
Zegnat
lists 2 nicknames on his h-card
#
ancarda
Oh no, I rewrote my whole website last night ... I went to go modify something, found I had *lost the source code* and only had the binary on my server, so I rewrote my website in PHP
#
ancarda
It's now on GitHub so I won't lose it again
#
Zegnat
The most important property on my h-card is of course `pottermore-hogwards-house`. So you know which house gets my karma points.
#
ancarda
what, you can add that?!
#
Zegnat
Why not?
#
Zegnat
Of course it may not catch on in the community, but maybe it will. I’d like to be a trendsetter ;)
#
ancarda
You got sorted into Slytherin?
#
Zegnat
Yessssss
#
ancarda
Well it's not showing up in mf2, so even that isn't aware of `p-pottermore-hogwards-house` -- although that might want to be `p-pottermore-hogwarts-house`
#
Loqi
Martijn van der Ven
#
Zegnat
I misspelled hogwarts?! How did this happen
#
ancarda
I got sorted into Hufflepuff. My patronus is a Black Stallion Horse, if I remember correctly
#
Zegnat
I got some type of dog. Which means the test is broken, because it is impossible to create a dog out of my happy memories. I am more phobic of dogs than of any other animal I have met.
#
Zegnat
fixed the Hogwarts spelling mistake. Oof, that was embarrassing. Thanks ancarda
[dgold] joined the channel
#
[dgold]
Ravenclaw here (so yay)
#
[dgold]
But my patronus is a flipping hare.
#
Zegnat
I am not sure what the available patronus are on the site. They feel a little underwhelming. Then again, ancarda got a stallion. Haha
#
Zegnat
is divided on urging people to add their hogwarts houses vs their pronouns to their h-cards
#
ancarda
I seriously expected my patronus to be a Bald Eagle, but I also love horses, so I think the test worked ok for me
#
ancarda
Why not urge them to add both, Zegnat?
#
Zegnat
That would probably be the right move, yeah
#
ancarda
So I was thinking of adding this feature where you can hover over URLs on my website, and if they aren't relative or otherwise link to markdain.net, show a small card with information scraped from the `h-card`
#
ancarda
Trying to fight off the temptation to make it show the house shield and color scheme
#
ancarda
So your card would be green, and have like, snakes and stuff around it
#
Zegnat
That would be a really fun little easter egg
#
Zegnat
I feel like [kevinmarks] did some work on (hover) cards?
#
sknebel
that's an interesting use for a nickname cache
#
ancarda
Yeah, I'm not sure what to put on the card
#
Zegnat
You can look at the Github and Facebook cards for inspiration I guess
#
Zegnat
Any other website doing cards?
#
ancarda
Well the GitHub card has "Follow", but I'm not sure that can be done. I thought about displaying some contact information, scraped from the `h-card`
#
[kevinmarks]
I did that with my notes and unmung making the cards, but my hover css isn't great
#
ancarda
Can you show me an example? I tried to find one on your website
#
Loqi
Homebrew Website Club London 2018-01-24
#
[kevinmarks]
Also, unmung can be a bit slow at parsing them all.
#
ancarda
I have a design in Sketch, problem is I'm awful at CSS, so I don't know how to build it :(
#
[kevinmarks]
My example isn't great cos I was trying to be too clever about sizes. If you pick a fixed size for the hovercard, then you can use flex box or grid easily
#
Zegnat
I was playing with CSS grids yesterday, trying to line stuff up nicely for a little experiment. It does work well on an intuitive level once you understand you start thinking in grid lines rather than columns/rows
#
[kevinmarks]
The irony is that my fallback case of displaying their website small often looks better
#
[kevinmarks]
You're blocking 3rd party urls I think
#
Zegnat
Yep. Third party frames at least
#
[kevinmarks]
Also the embedded images
#
Zegnat
Oh, right, and third-party images
#
[kevinmarks]
I should revisit this.
#
Loqi
it is probable
#
Zegnat
Not that turning on images changes a whole lot. They just push the names a little and sit at the top left of the cards
#
Zegnat
You could give the IMG elements a width/height so even if they are blocked (or do not load because of other reasons) the browser still reserves the space.
#
ancarda
I have `X-Frame-Options: DENY` on my website, would that break this?
#
[kevinmarks]
You'd likely have to make an exception
iasai and swentel joined the channel
#
ancarda
Hmm, `Mf2\fetch` is returning NULL for every URL I give it, and returning fast enough I suspect it's not making a network connection. Are there any requirements for `fetch`?
raucao joined the channel
#
ancarda
Huh, `curl_error` is giving me "<url> malformed" o_O
#
ancarda
Oh wait, I'm just an idiot. Ignore me (I am literally setting $url = null a few lines down)
eli_oat joined the channel
#
jgmac1106
What did I do wrong in this post that Twitter is sharing the link to [aaronpk] h-card I included and not the link to the post: https://jgregorymcverry.com/heres-my-forking-flower-tdc2336-flower-maker/
#
aaronpk
Sharing?
#
sknebel
jgmac1106: your small h-card for him doesn't work that way
#
jgmac1106
using bridgy to Twitter. It unfurled the url in the h-card I embedded and did not inlcude link to pust.
#
sknebel
<a class="h-card u-url p-name" href="https://indieweb.org/User:Aaronparecki.com">Aaron Parecki</a> inside a post
#
jgmac1106
wodering if I wrote the h-card wrong when including it for someone else
#
sknebel
tells the parser that the u-url and p-name for *your* post have the value of the h-card
eli_oat joined the channel
#
Loqi
Aaron Parecki
#
aaronpk
Good catch.
#
aaronpk
Yoi can remove the url and name classes entirely
#
sknebel
either do <a class="h-card" href="https://indieweb.org/User:Aaronparecki.com">Aaron Parecki</a> and let the implied value rules work it out
#
sknebel
or do <span class="h-card"><a class="u-url p-name" href="https://indieweb.org/User:Aaronparecki.com">Aaron Parecki</a></span>
#
jgmac1106
okay, thx all. Wwe should include directions on how to include an h-card to somebody else somehere on the h-card wiki page
#
aaronpk
You're probably right, tho there isn't really a difference between someone else's h-card and your own. What matters is whether you want the h-card showing up as a Microformats property of the h-entry, and what property that is
#
jgmac1106
I just figured I wanted to link to your online business card
#
jgmac1106
bad mental model on my part
#
sknebel
did you find an example like <a class="h-card u-url p-name" href="https://indieweb.org/User:Aaronparecki.com">Aaron Parecki</a> anywhere for an h-card?
#
sknebel
because that's a broken example
#
sknebel
properties of an object can not be on the same element as the h-* for the object
#
aaronpk
right. the reason you see class="u-author h-card" is because in that case it's saying that the "author" property of the parent object is the h-card
#
aaronpk
also that's the reason I prefer writing the class names in that order (vs "h-card u-author") even though that's not required.
#
jgmac1106
yeah been doing wrong for awhile thx all, goign back and fixing every bookmark like:https://bookmarks.jgregorymcverry.com/2018/github---pfefferlewordpress-webmention-a-webmention-plugin-for-wordpress
#
Loqi
[Greg McVerry] Matthias Pfefferle
#
jgmac1106
see I messed it up
#
jgmac1106
Would the best recommendation be NOT to include h-card for other people within an -h-entry or to do either do <a class="h-card" href="https://indieweb.org/User:Aaronparecki.com">Aaron Parecki</a> or <span class="h-card"><a class="u-url p-name" href="https://indieweb.org/User:Aaronparecki.com">Aaron Parecki</a></span>?
#
aaronpk
afaik nothing will consume the embedded h-card right now, but there's no harm in including it
#
aaronpk
I would use the minimal version of those two
snarfed joined the channel
#
sknebel
oh, and probably not link to the wiki user page, but his homepage
#
aaronpk
oh yea :) unless you have a specific reason for linking to my wiki page
#
Zegnat
I think adactio has been doing the mini h-cards for links for a while, or am I misremembering?
#
jgregorymcverry.com
edited /h-card (+339) "added info about embedded h-card"
(view diff)
#
jgmac1106
let me know if I wrote anything wrong there
#
sknebel
parsers do recognize it, I just don't know any software that uses it downstream
#
aaronpk
parsers, not consumers
#
aaronpk
I say "consumers" when I talk about tools that consume the result of the parser
#
sknebel
and the example isn't any different for an embedded h-card vs a non-embedded one, so I think a "special" example for that could confuse people searching for a difference
#
aaronparecki.com
edited /Web_sign-in (+102) "/* Implementations */ +indielogin.com"
(view diff)
#
GWG
aaronpk, got to start somewhere
#
jgmac1106
okay will delete it but I think people will want an answer to the question, ”Do I just link to soemone or is better to include their h-card?”
loicm joined the channel
#
sknebel
"If you refer to somebody in an article, you can mark up their name and a link to their homepage with a small h-card like above. See also [[person-tag]] for when you explicitly tag them in a post." or something along those lines?
[kevinmarks] joined the channel
#
[kevinmarks]
If you use p-category h-card that is tagging them in
#
[kevinmarks]
Which is what I do for my notrrlive generated posts
leg joined the channel
#
jgmac1106
[kevinmarks] does notrrlive use the h-card to find a twitter handle? Do I need my Twitter address in mine for it to work?
#
Loqi
[Aaron Parecki] Improving the HTML type="url" Field
#
GWG
aaronpk: Fun
#
GWG
aaronpk: You know people at Mozilla, you could always try to talk them into it.
#
KartikPrabhu
one browser going off spec would generally be a bad thing
#
aaronpk
I wonder what the spec actually says about that
#
aaronpk
"User agents may allow the user to set the value to a string that is not a valid absolute URL"
#
aaronpk
so it seems the strict check was something browsers added outside the spec
#
GWG
So, it might be doable
#
aaronpk
TIL <input list="...">
#
[kevinmarks]
No, other way round, it uses a twitter handle to find a url. I should make the other way work too.
#
aaronpk
apparently I need an HTML refresher
snarfed joined the channel
#
GWG
Don't we all?
[grantcodes] joined the channel
#
[grantcodes]
Data lists are awesome and have been around for a while! Great for basic autocomplete functionality as long as you don't need rest requests
#
[grantcodes]
The other way underused html tag is the details tag
#
jgmac1106
that would be cool [kevinmarks] often I don’t know someone’s twitter handle and have to ask. Though people would need their Twitter url in an hcard )Goes to add add Twitter to h-card)
#
GWG
Has anyone looked at the changes to Google Maps, by the way? It and that post about private map servers made me think about what I am supporting
#
aaronpk
ah datalist has a way to go cross browser https://caniuse.com/datalist
#
[kevinmarks]
If you're using data lists, this great https://leaverou.github.io/awesomplete/
#
[kevinmarks]
I use details there to for cw
#
Zegnat
I use <details> for D&D stuff all the time. When I quote lengthy rule book stuff, I put it in there so it is only on screen when I need the exact rule.
jjuran joined the channel
#
Zegnat
(Or for my DM to read to confirm that some crazy thing is actually per rules.)
#
ancarda
Well, this is where I am so far with my cards adventure: https://markdain.net/img/cards-dev1.png -- this is powered by scraping all websites I link to looking for h-cards (nightly cron job). The one thing I haven't got working is the actual `<div>` positioning and having it show when you hover. I don't know enough CSS and JavaScript to figure that out :(
#
ancarda
I moved that manually in the inspector so I could take that screenshot. Everything else is real though
#
aaronpk
wow nice
#
Zegnat
Fancy!
#
ancarda
Thanks. Shame it doesn't work yet haha
#
ancarda
So, would anyone be able to help me with the last bit (CSS & JavaScript)?
#
[kevinmarks]
You could use details for a hover card, come to think of it.
#
ancarda
The CSS would just be positioning logic. I can't ever wrap my head around how that works
#
aaronpk
I would just go find someone else's library :)
#
ancarda
<details> tag?
#
[kevinmarks]
Semantically, yes. Wouldn't help with positioning
#
Zegnat
Probably set the position of the card to display:none;position:absolute; by default. Then bind a mouseover event on your page. Whenever someones cursor goes over an a-tag for which you have a card take the cursor coordinates (attached in the mouse event) and position the card accordingly.
#
ancarda
I think I can just do `position: absolute` and use JavaScript to figure out the top/left values, but I couldn't get the logic working with mouseover/mouseleave, etc..
#
Zegnat
That wont get it to work in all sorts of edgecases (window borders, scrolling without moving cursor, etc) but would be a good start.
#
ancarda
Yeah, exactly that Zegnat. I might try writing that again
#
ancarda
The tricky bit is I need it to remain visible if you move your cursor away for a second -- you might be moving up to the card to click on links
#
Zegnat
I am happy to have a look if you get stuck on it, ancarda. Though if you want all window border collision checks etc, probably best to do what aaronpk said and look for a lib
#
KartikPrabhu
wikipedia does mouseover summaries for articles. could look at that
#
ancarda
That's a good point, I forgot about that. Thanks KartikPrabhu
#
ancarda
I was going to have a third item "Local Time" which showed up if there was a country (and in some cases state/city) but I don't want to get into that yet
#
ancarda
I can deal with tzdata some other day
#
sknebel
https://codepen.io/aardrian/pen/ENJdjN?editors=1100 this is a css hover example I had bookmarked
#
ancarda
+1 sknebel for it having animations too! I wanted the card to fade and rise up too
#
Zegnat
That would be easy on my card, I have the tz info in my h-card ;)
barpthewire joined the channel
#
ancarda
Does that feature no longer work, or did I do it wrong?
#
Loqi
Kyle Mahan
#
ancarda
Zegnat: I like how you have, literally everything, except a bio in your profile. My cards support that feature (`p-note`), so if you had one, it would show under your name in gray italic text
#
Zegnat
I wouldn’t know what to have as a bio. Or where to fit it on my page.
#
ancarda
Thanks, everyone
#
Zegnat
I welcome suggestions though.
#
ancarda
Right, you can't find a place for a 1 line summary, but you can manage to squeeze in your weight at birth on your website?
#
KartikPrabhu
oh! he also has pottermore info ;)
#
ancarda
Yeah, but to be fair that information is invisible
#
ancarda
Maybe have it under your IPA pronouncation?
#
Zegnat
There can never be too much information in an h-card. I guess I really need a bio. Hmmm...
#
aaronpk
bios are hard because they often only make sense in context
#
Zegnat
Maybe I’ll take submissions for it
#
KartikPrabhu
you can reuse your Twitter one
#
aaronpk
I end up with a different bio every time I send one somewhere
#
ancarda
Also job-title, although I figured that wasn't useful on the card unless we build IndieLinkedIn
#
Zegnat
I have a different bio on Twitter and the IndieWeb wiki, now that I think about it
#
ancarda
Problem with these invisible values is my job-title has been wrong for months. I never updated it when I got my new job as it wasn't visible
#
aaronpk
lol classic!
#
KartikPrabhu
what is invisible data?
#
Loqi
It looks like we don't have a page for "invisible data" yet. Would you like to create it? (Or just say "invisible data is ____", a sentence describing the term)
#
KartikPrabhu
what is hidden data?
#
Loqi
It looks like we don't have a page for "hidden data" yet. Would you like to create it? (Or just say "hidden data is ____", a sentence describing the term)
#
Zegnat
Most of the hidden data on my h-card is immutable data, I think. Can’t really go out of date
#
KartikPrabhu
Zegnat: what if your wand breaks and you have to get a new one ;)
#
Zegnat
I’d buy a similar style wand, right?
#
ancarda
I'm not sure it's an actual term, KartikPrabhu. I just have stuff on my page like `<p class="p-job-title">Software Engineer</p>` in my `h-card`
#
KartikPrabhu
no the wand chooses you
#
[kevinmarks]
There are good examples in /hovercard of what silos do in terms of multiple options
#
ancarda
And that has a hidden attribute
#
Zegnat
ancarda, hidden data is an anti-pattern specifically because out-of-sight-out-of-mind. I think KartikPrabhu was just trying to find out *where* that was documented
#
ancarda
So `<span class="p-honorific-prefix" hidden>Mr.</span>` won't be seen by people, but can be seen by parsers. I am tempted to move it out of my name though, because my card shows up as "Mr. Mark Dain" which just reads weirdly
#
ancarda
Yeah, I probably should remove it
#
[kevinmarks]
It's outside of name in vcard
#
Zegnat
I should decide on a honorific, so I can add it to my card.
#
GWG
I might go back to enhancing my h-card. Every time you all talk about something...
#
ancarda
Zegnat: `Mr.`?
#
GWG
Was it Ben Roberts who put in Master or such as a joke?
#
Zegnat
I had Master at one point too. And Gent. as suffix.
#
Zegnat
What is invisible data?
#
Loqi
It looks like we don't have a page for "invisible data" yet. Would you like to create it? (Or just say "invisible data is ____", a sentence describing the term)
#
loqi.me
created /invisible_data (+44) "prompted by Zegnat and redirect added by Zegnat"
(view diff)
#
ancarda
Hmm.. Ok, I'll either find ways to make my data more visible, or I'll clean it up entirely
#
ancarda
I need to redesign my sidebar to look less ugly. Possibly with some of those icons. Right now Zegnat looks better than I do on my own website
#
aaronpk
telegraph now uses indielogin.com to log in!
#
Zegnat
Didn’t Telegraph do only IndieAuth by itself? Or did it send people to indieauth.com when it didn’t find any authorization endpoints?
#
aaronpk
it sent people to indieauth.com if it didn't find an auth endpoint
#
aaronpk
however, I realized that there was a lot of logic I implemented in indielogin.com around profile URL canonicalization and redirect handling that wasn't in Telegraph's native IndieAuth implementation
#
aaronpk
so indielogin.com is a better implementation of the IndieAuth spec than Telegraph was
#
GWG
aaronpk, how far is indielogin from completion?
#
aaronpk
it supports all the same authentication mechanisms as indieauth.com now
#
aaronpk
next I want to add logging/reporting so I have stats on which apps are using it and which authentication mechanisms are used
#
GWG
I meant for me to add to the Indieauth plugin
#
aaronpk
ah, I need to figure out how best to handle whitelisting your plugin on it
#
sknebel
registration api?
#
aaronpk
GWG: what client_id does your plugin use? is it the site's domain name?
#
GWG
Correct
#
GWG
Wait..let me check
#
GWG
I am almost positive
#
GWG
Yes, confirmed
#
GWG
I am happy to transition to it once we figure out how
#
GWG
We know it needs some UI work to explain the different functions
#
aaronpk
hm yeah this is a trick
#
aaronpk
the main reason I want some sort of registration step is to make it clear to developers using indielogin.com that they are the one that has the relationship with the service, not their end users
#
aaronpk
which means we don't want the wordpress user to see that registration step at all
#
aaronpk
is thinking out loud
#
GWG
But how does that work with WordPress, unless I set an identical client id for everything?
#
aaronpk
that might actually be the solution
#
GWG
Which kind of defeats the purpose of self hosting though
#
aaronpk
not really
#
aaronpk
the client_id is just the identifier of the software
#
aaronpk
I mean using indielogin.com at all defeats the purpose of self-hosting since you're relying on an external service to log in to your own wordpress
#
GWG
aaronpk, I never thought so many people would want that after the endpoint was built
#
aaronpk
I guess people really don't like passwords
#
GWG
But they have one somewhere
#
aaronpk
better one than many
#
GWG
I improved the web sign in form by taking it off the main form to its own page.
#
GWG
Partially to hide it
#
sknebel
one would think that long-running sessions would solve the password issue mostly for wordpress login... but that might be hard to get too?
#
aaronpk
no idea
#
GWG
I had a marathon weekend so far of coding
#
GWG
Maybe I should look at that again
#
GWG
It's a UI issue.
#
aaronpk
also the fact that the indielogin.com API looks like IndieAuth/OAuth is just coincidental, it doesn't actually need to be because it's totally its own service, not trying to be a standard
AngeloGladding joined the channel
#
GWG
Maybe you need to distinguish it somehow?
#
GWG
I meant looking at my web sign in page, by the way
#
aaronpk
maybe we could do a dynamic registration thing, where your plugin is the one that registers at indielogin.com
#
GWG
How would that work?
#
GWG
I need to figure out how to improve https://tiny.n9n.us/wp-login.php?action=websignin
#
aaronpk
when the plugin is activated, it would ping indielogin.com to register itself
#
aaronpk
then I can keep my whitelist going
#
[kevinmarks]
Indielogin redirecting me to indieauth.com because I delegated openid there threw me.
#
aaronpk
only cause you were expecting to see indielogin.com
#
aaronpk
in many cases, you won't even see indielogin.com when you're logging in
#
GWG
aaronpk, if you tell me the workflow for registration I will integrate it
KartikPrabhu joined the channel
#
aaronpk
wow, indielogin.com works with the wiki first try
#
www.boffosocko.com
edited /why (+252) "/* Identity loss */ Link to Motherboard article: Twitter Is Banning Anyone Whose Date of Birth Says They Joined Before They Were 13"
(view diff)
cloud-maingo joined the channel
#
ancarda
It works! https://markdain.net/post/1#honorable-mentions -- near the bottom, hover over "Martijn van der Ven". It might be a little flaky, but it seems to work for now
#
ancarda
I already found a few issues around it sort-of blocking you from selecting & copying text. I might be able to have a negative z-index until you hover, then set to positive when you hover
#
ancarda
Zegnat: If you do add a bio, it should appear on that card within 24 hours
#
ancarda
I haven't really figured out deletions. If I go to scrape a URL that's returning 404 or 410 gone, I might go delete the card and picture I had saved
#
ancarda
I'm not sure how best to handle that situation
#
sknebel
maybe wait for a while, because of temporary outages, but sounds like a plan
#
sknebel
or flag it for review somehow, so you can decide what's best
#
aaronpk
for 410 definitely delete
#
aaronpk
for 404 i'd do some sort of timeout or manual review
[pfefferle] joined the channel
#
dgold
aaronpk: what is the difference between indielogin & indieauth?
#
aaronpk
umm it's a long story
#
sknebel
people keep confusing indieauth.com the service for logging into sites with twitter/Github/... from rel=me with the protocol IndieAuth
#
dgold
uh huh
[miklb] joined the channel
#
jgmac1106
skenbel how would be best to descrbe it. I say add your rel=“me” links because this makes the indieauth function. When you sign on to a hird party client, like an Adroid App, with your domain you will then be able to validate with yoru WordPress credentials or your Microsoft….I mean GitHub credentials
#
Zegnat
jgmac1106, the problem is that the IndieAuth authentication protocol has exactly nothing to do with rel="me" links.
#
Zegnat
what is web sign-in?
#
Loqi
Web sign-in is signing in to websites using your personal web address (without having to use your e-mail address) https://indieweb.org/Web_sign-in
#
Zegnat
That is what you are describing ^^^
#
dgold
is indieauth a full Oauth2 provider?
#
aaronpk
yes, it's an OAuth 2.0 extension
#
jgmac1106
yes but in terms of explaining people how to use the IndieAuth plugin for Wordpress and given the audience doesn’t care about protocols I don’t know a better way to describe it.
#
aaronpk
so it's technically OAuth 2.0, plus a few things
#
dgold
I'm wondering if it would be possible to extend this: https://github.com/nsheridan/cashier/ to use it
#
aaronpk
login stuff is always confusing to describe even without protocol names
#
aaronpk
dgold: not sure I follow. what is that used for?
#
jgmac1106
wny would I add rel=me beyond using IndieAuth?
#
jgmac1106
I would need to answer that question for people first
#
Loqi
[nsheridan] cashier: A self-service CA for OpenSSH
#
aaronpk
dgold: I don't follow. you want to use IndieAuth to SSH to a machine?
#
dgold
I want to use indieauth to verify myself, to get a signed time-limited ssh-key to ssh to a machine
#
aaronpk
so you want to replace whatever mechanism cashier uses to sign in on the web with IndieAuth?
#
dgold
yes- it uses Github & Google Oauth processes - I *think*
#
aaronpk
you should be able to copy the github example and make a few minor changes and swap that out with indielogin.com very easily
#
aaronpk
if you want to support indieauth natively, you'd need to do a little more work because you have to ask the user to enter their website first, before you know where to send them to authenticate
#
Loqi
I agree
#
dgold
ah, yes
#
dgold
I've just become increasingly concerned about having keys to servers lying around on all my machines
#
aaronpk
okay... last step is maybe this dynamic registration thing for GWG
#
GWG
aaronpk: For the 300+ people who actively have the IndieAuth plugin installed
#
aaronpk
should probably put this through a little more testing first then
#
Loqi
[IndieWebCamp WordPress Outreach Club] Description The plugin turns WordPress into an IndieAuth endpoint. This can be used to act as an authentication mechanism for WordPress and its REST API, as well as an identity mechanism for other sites. Alternatively, you can use a third-party Ind...
#
aaronpk
i've tried to do a bunch of tests on it but you never know
#
aaronpk
speaking of which, can I get a few people to try to log in here again? https://pin13.net/login/
#
Zegnat
On my way
#
Zegnat
Success! (After enabling cookies.)
#
aaronpk
heh yeah
#
aaronpk
I *could* do it without cookies if I tried hard enough
#
aaronpk
well, only github, indieauth, email, pgp. not twitter.
#
Zegnat
Session cookies are a thing, so probably people want them enabled when logging in anyway
#
aaronpk
yeah also this cookies you so if you come back you don't have to authenticate again
#
aaronpk
tho in your case since you have an indieauth server it will always send you there
#
Zegnat
Yep. But with cookies disabled, I go back to indielogin.com from my own endpoint and am stuck there. Never get back to pin13
#
aaronpk
ah yeah
#
aaronpk
I *could* stash stuff in the OAuth state parameter instead of using the session for that
#
aaronpk
maybe I should just switch the wiki login over to this right now, to force more people to test it for me ;-)
#
Zegnat
Don’t know if the one session cookie matters outside of privacy purists aaronpk ;)
#
aaronpk
the other benefit of not using sessions is it ends up working better with the back button and multiple tabs
#
Zegnat
The login as other user link feels a bit weird aaronpk
#
Zegnat
I go to pin13 login again, I enter my domain. Because indielogin knows I am already authenticated, it does not send me to my endpoint. But it does give me a link to login as a different user. Clicking that link sends me to the indielogin homepage, rather than back to the pin13 login page
#
Zegnat
That might confuse people
#
aaronpk
that wasn't supposed to do that
#
aaronpk
since you have an indieauth endpoint it should have redirected you
#
aaronpk
and not remembered your session
#
aaronpk
I must have messed something up there
#
aaronpk
ah I found it
#
aaronpk
k should be fixed
#
aaronpk
wiki login is switched over!
#
Zegnat
I'll test again in a bit. Had to stretch legs.
#
Zegnat
Awesome! That is one major indieauth.com user less!
#
sknebel
sorry, had to run to dinner. seems like the question was mostly answered?
#
@royscholten
↩️ Hmm, http://webmention.io works indeed: https://webmention.io/www.yoroy.com/webmention/BsZvgmFlPsfN3rFn7XV9 I *think* I entered webmention endpoint and secret correctly but nothing incoming on my site yet.
(twitter.com/_/status/1003358872868925444)
#
sknebel
aaronpk: so is the plan for the replacement of the authorization_endpoint-as-a-service aspect to use indielogin, or do something else? Or am I misremembering things?
#
aaronpk
I have myindieauth.com for that
#
aaronpk
haven't started building it yet tho
#
aaronpk
it won't interact with indielogin.com at all
#
aaronpk
wow looking at the redirect URLs in the logs of indieauth.com... there are a *lot* of sites I haven't heard of using it
#
dgold
sigh.
#
dgold
my media endpoint has started not acknowledging images, again.
#
Zegnat
aaronpk: retried and can confirm that I no longer get to see indielogin.com with my authorization endpoint now!
Ironbeard and eli_oat joined the channel
#
aaronpk
heh, so if you point your site at indieauth.com right now then you won't actually see anything different when logging in to the wiki
#
Zegnat
Ah, because you could have indieauth.com as authorization endpoint! He. That’s pretty funny.
mercubink, KartikPrabhu, [pfefferle] and [kevinmarks] joined the channel
#
[kevinmarks]
When I try known.kevinmarks.com but I'm logged out, I end up at my homepage rather than the auth page
#
aaronpk
logged out of known.kevinmarks.com?
#
aaronparecki.com
edited /indieauth.com (-454) "updates and ensure using indieauth.com for consistency"
(view diff)
#
aaronpk
the /indieauth and /indieauth.com pages make me want to cry still
#
sknebel
aaronpk: in Zegnat's user pages is still a draft for changed IndieAuth stuff you can borrow material from
#
aaronpk
ohh yeah
#
sknebel
(or maybe even replace a lot, afaik it was pretty good but got lost in the "declaring an authorization_endpoint is to complicated!!11" debate)
#
aaronpk
well that ship has sailed
#
[kevinmarks]
Yes, my cookie there has expired (I usually post using quill on mobile which has a no expiry token)
#
aaronpk
[kevinmarks]: there isn't really anything I can do about that. sounds like Known has a redirect bug
#
aaronpk
Zegnat++ for linking to his new indieauth page from his user page
#
Loqi
zegnat has 68 karma in this channel (222 overall)
#
aaronpk
Zegnat-- for having a complicated user page URL
#
aaronpk
haha Loqi strikes again
#
aaronparecki.com
edited /Why_web_sign-in (+78) "some updates for indieauth.com and openid"
(view diff)
#
sknebel
Loqi++
#
Loqi
loqi has 8 karma in this channel (457 overall)
#
aaronparecki.com
edited /OpenID (+308) "/* Shutdowns */ add stackoverflow and claimid"
(view diff)
KartikPrabhu joined the channel
#
aaronpk
ah I see where the argument is coming from
#
aaronpk
I think I have a solution
#
sknebel
what argument?
#
aaronpk
the "it's too complicated" debate
#
aaronparecki.com
edited /IndieAuth (+1106) "/* How to */ update how-to to clarify this is not rel-me-auth. content ported from Zegnat's wiki page"
(view diff)
#
aaronparecki.com
edited /IndieAuth (+147) "/* How to */ +wordpress"
(view diff)
#
Zegnat
Halfway to bed, seeing all these notifications for the indieauth wiki page. Looking forward to reading it in the morning :)
#
Zegnat
Also: Loqi recognises injustice. You can’t -- me for an ugly URL when you have written the plugin that generated that user page URL in the first place ;)
#
aaronpk
with any luck all your indieauth page content will be ported over when you wake up
#
aaronpk
would you mind if I just start deleting sections from your page after I incorporate them?
#
aaronparecki.com
edited /IndieAuth (+25) "link to indieauth.net"
(view diff)
#
aaronparecki.com
edited /IndieAuth (+114) "/* Details */ rename to Implementations, add headers for each"
(view diff)
#
aaronparecki.com
edited /selfauth (+313) "/* Criticism */ clarify only applies to authentication"
(view diff)
#
aaronparecki.com
edited /IndieAuth (+132) "/* Implementations */ add selfauth, Wordpress, Known"
(view diff)
#
aaronparecki.com
edited /IndieAuth (+1043) "add articles from Zegnat's page"
(view diff)
#
aaronparecki.com
edited /IndieAuth (+939) "/* Issues */ incorporate content from Zegnat's page. hide resolved discussion under a details tag"
(view diff)
#
aaronparecki.com
edited /IndieAuth (+618) "/* how to should include endpoint definition */"
(view diff)
#
aaronparecki.com
edited /IndieAuth (+66) "/* How to */"
(view diff)
#
aaronparecki.com
edited /IndieAuth (+168) "/* Why */"
(view diff)
#
aaronparecki.com
edited /IndieAuth (+98) "/* How it works */ clarifications"
(view diff)
#
aaronparecki.com
edited /IndieAuth (+773) "expand implementations from [[authorization-endpoint]] and Zegnat's page. move micropub to new section"
(view diff)
#
aaronparecki.com
edited /IndieAuth (+278) "/* Supporting Sites */"
(view diff)
[grantcodes] joined the channel
#
aaronparecki.com
edited /IndieAuth (+9) "move services down"
(view diff)
#
aaronparecki.com
edited /IndieAuth (-4) "fix header levels of services"
(view diff)
#
aaronparecki.com
edited /IndieAuth (+3816) "copy protocol description from zegnat's page"
(view diff)
#
aaronparecki.com
edited /IndieAuth (+468) "minor edits to protocol description"
(view diff)
#
aaronpk
okay that's the end
#
aaronpk
everything from Zegnat's page is incorporated
#
aaronparecki.com
edited /RelMeAuth (+38) "add indielogin.com"
(view diff)
#
aaronparecki.com
edited /RelMeAuth (+389) "hiding relmeauth links is not possible"
(view diff)
#
aaronparecki.com
edited /RelMeAuth (+173) "rel=authn is implemented now"
(view diff)
#
www.svenknebel.de
edited /IndieAuth (+104) "/* Implementations */ indieauth-openid"
(view diff)
#
aaronparecki.com
edited /RelMeAuth (+296) "/* Articles */"
(view diff)
#
sknebel
Zegnat++
#
Loqi
zegnat has 69 karma in this channel (223 overall)
#
sknebel
aaronpk++
#
Loqi
aaronpk has 146 karma in this channel (1639 overall)
#
aaronpk
alright what else can I clean up
#
aaronparecki.com
edited /OpenPGP (+41) "/* Authentication */"
(view diff)
#
aaronpk
sknebel++
#
Loqi
sknebel has 36 karma in this channel (100 overall)
#
sknebel
and maybe mention the authorization part more explicitly early on on IndieAuth. it somehow suddenly appears in the protocol description, and only a very vague reference to Micropub before
#
aaronpk
ooh true
#
aaronparecki.com
edited /IndieAuth (+79) "mention micropub relation sooner"
(view diff)
#
aaronpk
okay I think i'm done
KartikPrabhu, snarfed, [kevinmarks], cloud-maingo and [miklb] joined the channel