#dev 2018-06-10

2018-06-10 UTC
AngeloGladding, KartikPrabhu, eli_oat, renem, iasai, leg and [grantcodes] joined the channel
#
[grantcodes]
Very alpha version of my inline micropub browser extension is online now 🙂
#
[grantcodes]
The chrome version isn't verified yet but hopefully it will be online by the time I wake up
jeremycherfas, jeremych- and jeremycherfas_ joined the channel; jeremycherfas left the channel
#
gRegorLove
micro.blog appears to not be accepting /read micropub posts because it doesn't have a 'content' property. The mp JSON has properties: summary, read-of, and read-status
#
gRegorLove
Should I be sending a constructed 'content' property too? It would just be the other properties put into HTML.
#
gRegorLove
Not DRY, so doesn't seem right
#
gRegorLove
I'll check the github issues if there's anything about supporting 'summary' as the fallback. I think that makes more sense.
#
gRegorLove
Heh, haven't checked my micro.blog in a while. I need to update my jsonfeed that gets pulled in there so it doesn't include Twitter @-replies.
#
Loqi
[gRegorLove] #92 Using micropub summary property as fallback
#
Zegnat
Wasn't there some documentation about using content as a fallback for posts like these? Hmm. Will need to search the wiki.
[kevinmarks] joined the channel
#
[kevinmarks]
Summary is a legitimate thing to have in a feed, atom can have summary without content. It's RSS that fails to make the distinction, using description for both. So micro.blog should support summary
#
Zegnat
Sure, but we are talking about creating entire entries via a Micropub request. So the question is: should a platform (e.g. Micro.blog) support entries (h-entry objects) that have no content.
#
sknebel
curious, why summary and not content in the MP request?
#
Zegnat
I can’t find any wikified discussion on using content for fallback :(
#
Zegnat
Maybe I dreamt that up
#
[kevinmarks]
Ah, I thought you meant reading from a feed.
#
[kevinmarks]
Then that is more down to the platform to decide.
iasai and eli_oat joined the channel
#
dgold
today is making reviews work on my site day. Huzzah.
[kevinmarks] and barpthewire joined the channel
#
aaronpk
summary is intended to be used for fallback
#
aaronpk
content is content, and posts without content are totally fine, e.g. photo posts
#
aaronpk
also remember this is not a micropub question, it's a microformats vocabulary question, so that's where to look
#
Zegnat
Do you know where summary-is-fallback is described, aaronpk? I couldn’t find it.
#
GWG
aaronpk: Speaking of summary, I couldn't convince you to address https://github.com/aaronpk/Quill/issues/93
#
Loqi
[dshanske] #93 Itinerary Type Does Not Offer Summary
#
aaronpk
GWG: oh i'm convinced to do it, I just haven't gotten around to it yet ;-)
#
aaronpk
Zegnat: good question!
#
GWG
aaronpk: I just think of it every time someone talks about summaries. My Micropub endpoint fails if there is no content, summary, or it doesn't know how to render that type of post
#
Zegnat
aaronpk, I went looking, because I seemed to recall discussions about using content as sort of a plain-text-fallback for micropub’ed posts. But I didn’t find any fallback discussion at all on the wiki. Maybe my search-foo is just weak today though
#
aaronpk
GWG: sounds like I need to do a pass on all of Quill's posts and make sure it's sending summary
#
GWG
aaronpk: Or we could come up with a protocol to generate a summary when you don't understand the type of post being sent.
#
GWG
That sounds harder
#
aaronpk
Zegnat: I would expect to find it on http://microformats.org/wiki/h-entry but I don't see anything there either!
#
Loqi
[Tantek Çelik] h-entry is a simple, open format for episodic or datestamped content on the web. h-entry is often used with content intended to be syndicated, e.g. blog posts. h-entry is one of several open microformat standards suitable for embedding data in HTML. ...
#
Zegnat
You’d have to do that almost on a per-post-type basis to make any sense, I think, GWG. Because the properties could be so different. And once you are doing summary-creation-per-post-type implementations, you might as well implement the post type...
#
aaronpk
yeah the point of fallback is that it shouldn't require any extra work to use it ;-)
raretrack joined the channel
#
GWG
Zegnat: I agree. It's a bad solution.
#
Zegnat
Some chat search seems to show that, most of the time, both content and summary were mentioned for fallback. (E.g. https://chat.indieweb.org/dev/2016-08-10/1470859728768000)
#
Loqi
[aaronpk] yeah the only reason to include a p-name and/or p-content or p-summary is as a fallback for consumers that don't understand likes
#
Zegnat
Also interesting, gRegorLove’s previous iteration of /read posts used a content[html] fallback: https://gregorlove.com/2017/11/martijn-asked-if-i-had/
#
Loqi
[gRegor Morrill] Martijn asked if I had documented the micropub request I make for read posts. I had not yet, so decided to make some quick notes while it's fresh in my mind. Currently, it sends an h-cite object with properties: status, url, name, author, and isbn. ...
#
GWG
I need to do some testing with read posts from his new spinoff site.
#
GWG
But want to finish the three things I'm in the middle of first.
#
aaronpk
yea indieauth first!
#
Zegnat
If you check both content and summary properties for fallbacks, GWG, that means at least your fallback stuff is already compatible with the read posts project. Shouldn’t worry too much about that.
#
GWG
Zegnat: The testing is whether I can support rendering the extra properties
#
Zegnat
aaronpk, I wonder where we can best document this fallback stuff. Also, just reading your reply on GitHub “fallback for when the server doesn't recognize the other properties”. Is that any property? What if I don’t understand photo posts and I get summary/photo/content sent by a client, should I then only take summary? Even though I understand `content`, but don’t know what it means in context because of the added `photo`
#
Zegnat
property?
#
aaronpk
Zegnat: again ,the answer should be led from the microformats side of things
#
aaronpk
what would you do when displaying a comment or showing a post in a reader like that?
#
Zegnat
I’m not sure if that is the right side. I don’t think the mf side of things cares about fallbacks?
#
aaronpk
it definitely does for those reasons
#
Zegnat
mf only says “these properties were marked up by the author”. So I don’t know if fallbacks for consuming belongs in there. Especially with mf2 parsing being vocab-agnostic.
#
aaronpk
Zegnat: microformats *vocabulary* not parsing
#
aaronpk
microformats defines several vocabularies like h-entry, which have specific property names
#
Zegnat
True. But it doesn’t prescribe how those should be consumed. But maybe you are right, and “fallback” belongs there somehow.
#
aaronpk
no it does, it defines specific meanings for each property
#
aaronpk
and value types
#
Zegnat
So you’d say something like, Core Properties: “p-summary - short entry summary that may be used to express the entire entry when other properties aren’t recognised”?
#
aaronpk
something like that yea
#
Zegnat
I’m writing up an issue against the h-entry spec right now :)
#
Zegnat
Will be finished in a minute, or 10. Depending on how fast my tea water is done.
#
aaronpk
i've been thinking, we really need a guide to these things that is not the spec
#
aaronpk
specs are useful to have, but they are not really implementer's guides
#
aaronpk
which is the whole reason I wrote this oauth book, cause the spec is not written as a how-to guide
#
GWG
aaronpk, I will buy a copy
#
aaronpk
haha slow down I have to write it first
#
Zegnat
That’s what the IndieWeb wiki is supposed to be like, I’d say. Kinda why we want “how to publish” section high on the different post-type pages.
#
aaronpk
I realized the other day that I used to be really good at writing API docs, and I think we need something more like API docs for this than the wiki is
#
aaronpk
that's how people who are not involved in creating specs and vocabularies expect to be able to find reference docs
[manton] joined the channel
#
[manton]
I thought there was a discussion a while back about how Micropub clients should send "content" as a kind of ready-to-go fallback. I'd be fine with supporting "summary" too, but it seems like there's an increasing number of different situations to support for servers. Content, summary, photo, bookmark-of, JSON vs. form params, etc.
#
Zegnat
[manton], yeah, I was recalling content for fallback too, but I can’t actually find it anywhere for citing
#
aaronpk
[manton]: you should see the list of properties my site supports ;-)
#
aaronpk
tho actually my micropub endpoint only recognizes a few specific properties, and stores the rest it gets without looking. it's the rendering part of my site that knows about the rest of them.
#
Zegnat
I do see aaronpk’s point though that content is a pretty bad fallback. E.g. for a photo post content is more of a note-about-the-photo. It should not be used as a fallback as it probably makes no sense without the photo from u-photo present.
#
[manton]
I can imagine. 🙂 But it's a lot if someone wants to build a bare bones server. My Micropub endpoint is much more complicated than the XML-RPC support, which seems backwards.
#
aaronpk
[manton]: isn't that because the xml-rpc one only supports a very limited set of posts?
#
aaronpk
if you only supported photos and blog posts and notes in micropub it's very simple
#
[manton]
I essentially do only support those in Micropub. Except for bookmarks (which is experimental still) Micro.blog pretty much just thinks everything is a blog post.
#
aaronpk
not sure how you implemented the form-vs-json bit, but on my end I have a step that converts the form-encoded request to a JSON request so I process everything as JSON really
#
[manton]
My code could certainly use a refactor with that.
#
Zegnat
I do that too. The form-encoded to JSON is really straight forward
#
[manton]
Anyway, I'm just concerned that the minimum requirements to have a functional Micropub server keep growing. I don't really see the practical difference between summary and content.
#
[manton]
For the book example, I can see how a indiebookclub-aware server wouldn't want to display "content" unless the user actually typed it in, though.
#
[manton]
It's not really obvious in some cases. For example, OwnYourGram sends the location as "content", not summary.
#
[manton]
(Sorry, OwnYourSwarm.)
sketchess joined the channel
#
Zegnat
[manton], I believe it is completely fine for a Micropub server to not accept posts with properties it does not support.
#
[manton]
Hmm. Okay, that's another way to look at it.
#
[manton]
To be clear, I'm going to add support for "summary" so this works better, but this issue highlighted something that I've wanted to bring up for a while, that I think the core requirements to get a working Micropub client/server could be even simpler. Don't want anyone to be scared off by all the different potential parameters.
#
aaronpk
ownyourswarm has two modes, one meant for servers that are "not smart" where the location is sent in content so that it "just works" in most cases. the other mode sends a JSON payload with a much more accurate representation of the checkin
#
Zegnat
Turns out, `summary` was specced as a fallback (of sorts)! https://www.w3.org/TR/micropub/#unrecognized-properties
#
Zegnat
“Servers that don't recognize the weight property will simply ignore it, and will create the post as a plaintext post with the summary instead.”
#
Zegnat
(Although that’s just an example for dropping all unrecognised properties)
#
aaronpk
the functional difference between summary and content is demonstrated by a photo post that has no caption. it would be misleading to have the client generate a summary of the photo and include that in content, since then the server would have no way of knowing whether the content was something the user entered or not
jgmac1106 joined the channel
#
[manton]
All servers should support photo, in my opinion. Not sure what the spec says about this, but there's no suitable fallback for a photo. 🙂
#
aaronpk
this is why summary is useful tho. photo seems like an "obvious" one for everyone to support right now, but it wasn't obvious at the start. like remember when twitter had no way to upload photos?
#
Zegnat
The micropub spec just says servers must support h-entry type objects for post creation. It doesn’t say which part of the vocab are a must.
#
aaronpk
and again this is demonstrating why the spec by itself is not enough for someone who's actually building stuff ;-)
#
aaronpk
the micropub spec offloads all the vocab stuff to microformats to avoid duplicating that work in the spec and so that it can evolve separately. but that means you can't read only the micropub spec and know what to do.
#
Zegnat
But I also think it is fine this way, and people implementing Micropub shouldn’t feel pressured to support the entire mf2 h-entry vocab
#
aaronpk
yes that is also the intent
#
aaronpk
tho it would be nice if somewhere something listed the most common properties that clients and servers support so people have a baseline to go off of
#
Zegnat
That may be what “Core Properties” is aiming to do. Note that properties need to have some sort of implementation support out there before going from draft to core.
#
aaronpk
yep true
#
Zegnat
But even then, depending on how fast the IndieWeb community is itterating on stuff, that could grow fast
#
aaronpk
side note: this is why manton's book will be very useful :)
#
[manton]
I don't think a "core properties" section needs to grow much at all. There could be a very limited number of things that all servers should accept: name, content, summary, photo, date, etc. Bringing all of MF2 into the discussion really complicates things. Then if a server wanted to (for example) support book reading, it could add that on as needed.
#
aaronpk
don't forget location ;-)
#
[manton]
Micro.blog doesn't support location!
#
aaronpk
also note that this book reading post is super experimental because it wasn't even proposed as a microformats vocab before
#
aaronpk
same with some of the Quill vocabularies
#
[manton]
It's a slippery slope, obviously, but I think there are basic fields that make up a traditional blog post. That is what you want most of the time.
#
aaronpk
"location" has been a core property across a bunch of different sites for a long time now tho. twitter, facebook and instagram all let you say where you were when you posted the thing
#
aaronpk
(and checkins are something different)
#
Zegnat
I think it is fine to iterate those possible new properties outside of the mf wiki though, aaronpk, and then propose them for inclusion on the page when you have real-world usage. That is one of the point for being included in the vocab anyway.
#
Zegnat
So I wouldn’t be surprised if we’re going to see several properties being extensively tested and used by servers prior to hitting the mf wiki
#
aaronpk
yep, which is why "summary" is a good idea all around
#
Zegnat
Yes. Still writing the issue. Have been digging through IRC archives to find matching discussions
#
Zegnat
Will link as soon as I hit post :)
#
Zegnat
What is indiebookclub?
#
Loqi
indiebookclub is an app for posting books you are reading to your website using Micropub https://indieweb.org/indiebookclub
#
[manton]
A related issue with summary/content in indiebookclub: so let's say I use summary if content isn't present. No problem. But what if indiebookclub later adds support for the user typing in some text about the book, and that goes in content. If I just display content, wouldn't it lose the book information in summary? Or would summary need to be both a summary and the content the user typed in?
#
aaronpk
even tho ownyourswarm uses "content" for the fallback (only in form-encoded mode), it always include the venue in the content even if the user types content in the checkin
#
[manton]
Okay. So in that case I wonder if we really need summary at all, if content can sometimes contain what would be in summary. 🙂
#
aaronpk
well I don't include the venue in the JSON content
#
aaronpk
and I should probably add the summary property to OwnYourSwarm's JSON mode, in which case I think I would include both the venue as well as the user's content
#
skippy
anyone working on adding Micropub to Miniflux v2? Or, is anyone working on making a Microsub client that speaks Fever API?
#
[manton]
If you don't include venue in the JSON content, then I don't think there would be any fallback text used by something like Micro.blog for the venue, right?
#
[manton]
I need to run, so I'll catch up later. But I do think these inconsistencies between form-encoded and JSON are worth thinking through and/or documenting.
#
skippy
or, are there any Fever API clients (Reeder, Unread, etc) that provide Micropub?\
#
aaronpk
wait which inconsistencies?
#
Zegnat
I think it is hard to figure out exactly when to fall back to summary. In the photo/content/summary case, you want to ignore content and use summary if you do not support photo. But in the photo/content/summary/location case, if you do support photo but not location, you probably only want to ignore location rather than fallback to only summary :(
#
Zegnat
skippy, afaik, nobody has been bridging that, no
#
skippy
okay, i guess this is the motivation i needed to start learing Go...
leg joined the channel
#
Loqi
[Zegnat] #9 Standardise a fallback mechanism (summary property?) for unrecognised entries?
jgmac1106 joined the channel
#
ancarda
Quick question about user agents: Do you set one when you make requests to people's websites? e.g. to check if a WebMention's source links to your website
#
Zegnat
I usually send along either the curl user agent (curl/$version) or use the Firefox user agent in case people are blocking non-browsers.
#
ancarda
For example, I have `ancarda-hcard-discovery/1.0 (bot; +https://markdain.net/bots.html#hcard)` for the nightly cron that updates my hovercard cache
#
Zegnat
That’s a really nice and transparent UA!
#
ancarda
Thanks, I think it's probably fine to not fake Firefox's UA. If you block that bot, all that will happen is your h-card won't be fetched. The other bots might cause, e.g. likes/replies to not show up on my website
#
ancarda
Oh, Zegnat, if you do look through your server logs, you may find quite a few hits from that particular one on one day. I sort of used your website as a test bed while I ironed out some bugs. Sorry about that; your website is the only link on my website that contains an h-card (and what a glorious h-card it is!)
#
ancarda
Recent traffic should be only once a day
#
Zegnat
I don’t really do any statistics or monitoring on that side. So I am not likely to look at my logs before they rotate again and all traces of your bot are removed ;)
#
ancarda
I was thinking the other day, should we even keep access logs?
#
ancarda
I mean, it's standard on every major web server, but then again so is "Invalid Username/Password" but that's a bit of an anti-pattern everyone does because everyone else is doing it
#
aaronpk
I keep access logs for debugging, but they get rotated out after a while
#
ancarda
What sort of debugging? I ask as I have never opened access logs except for curiosity, like how much traffic am I getting from IE 6
#
aaronpk
like to see if my webmention sender is actually making a discovery request
#
dgold
ancarda: see my privacy policy for my thoughts on the issue: https://ascraeus.org/page/privacy/
#
Loqi
Privacy Policy
jgmac1106 joined the channel
#
ancarda
dgold: This looks like a really great page
#
ancarda
>In addition, this site uses the LetsEncrypt Certificate Authority, which is itself DNT-compliant and does not log your browser checking the validity of this site’s HTTPS certificate.
#
ancarda
Do you do OCSP Stapling?
#
ancarda
Yeah, that looks great. I had no idea you could redact IP addresses in nginx like that
#
ancarda
I'm not yet rotating logs, partly as I'm thinking about just not logging at all
[manton] joined the channel
#
[manton]
[aaronpk] By "inconsistencies" I was thinking how the behavior of clients like OwnYourSwarm might be different depending on whether something was form-encoded or JSON. Just wondering if there is an opportunity to simplify any of this in recommendations for new client/server developers.
#
[manton]
Maybe this is a larger discussion that could happen at IndieWeb Summit. There's a certain amount of extra complexity because Micropub has 2 flavors, so anything to simplify the "basics" that a client/server needs to support would help.
#
leg
--
#
aaronpk
that does sound like a good session idea
#
GWG
aaronpk: Pick the color post it now so [manton] can have it ready
#
aaronpk
want to add something to the "ideas" section here? https://indieweb.org/2018/Schedule
[grantcodes] joined the channel
#
[grantcodes]
Some of these issues I don't see as an issue with the actual micropub spec, but agreed it is an issue
#
aaronpk
yeah I don't necessarily think this is a spec issue, but like I was saying earlier, we do need some better guides and tutorials around this to make some of the more concrete recommendations
#
[grantcodes]
For sure. More standardization of something that is currently fairly vague
jgmac1106 joined the channel
#
aaronpk
in spec writing it's tough to balance being extremely specific, where there is no ambiguity about anything, with being flexible enough to evolve over time to avoid having to toss out the current spec and make a v2
#
Zegnat
Yeah. And I think the Micropub spec especially has done a great job balancing this.
#
[grantcodes]
Well what I was thinking of was more recommendations / examples of the correct way to create certain post types, rather than spec changes
eli_oat joined the channel
#
[grantcodes]
They exist, but not in any standardised way at the moment
#
Zegnat
As far as the "2 flavors" of Micropub. An implementation guide regarding converting formencoded to JSON-object might go a long way.
#
[grantcodes]
Zegnat: Yes, I that would be useful.
swentel and jgmac1106 joined the channel
#
Zegnat
I might have a go documenting that in the wiki.
#
aaronpk
!tell gregorlove feature request: can you add the micropub json docs to indiebookclub.biz visible when you're logged out?
#
Loqi
Ok, I'll tell them that when I see them next
#
Zegnat
I've done the code already anyway, should be able to make it a guide.
KartikPrabhu joined the channel
eli_oat, leg and gRegorLove joined the channel
#
gRegorLove
Good micropub conversation. Yeah, I'll add that to a public page.
#
Loqi
gRegorLove: aaronpk left you a message 32 minutes ago: feature request: can you add the micropub json docs to indiebookclub.biz visible when you're logged out?
#
gRegorLove
I considered adding a text field for comments / notes, which would be sent as `content`. If I do add that, I'll definitely include it in the summary.
#
gRegorLove
My earlier micropub work was getting ahead of itself, so the h-cite e-content it sent is a bad example. My mp endpoint didn't parse h-cite at the time so it was a workaround to post the exact HTML I wanted.
#
Zegnat
Yes, but that is literally the example of fallback-for-otherwise-not-understood-objects, right? ;)
#
gRegorLove
Not quite. It's "you didn't really understand that micropub requests shouldn't construct HTML for you" :)
#
gRegorLove
"you" being me, hah
#
gRegorLove
I didn't think about summary property at the time or I might have avoided that.
eli_oat joined the channel
#
Zegnat
Feel free to add that to the github issue then :)
gRegorLove and AngeloGladding joined the channel
#
aaronpk
gRegorLove++
#
Loqi
gregorlove has 44 karma in this channel (246 overall)
iasai and [pfefferle] joined the channel
#
swentel
alright
#
swentel
finally multiple accounts on android
#
swentel
damn I hate account manager
yoroy joined the channel
#
GWG
swentel, when can I try that?
#
swentel
GWG, cleaning up some code now, I will release tonight, that gives me 2 weeks to fix bugs before I'm off on vacation :)
#
swentel
the release should also fix that q=config call for getting the syndication targets
#
GWG
swentel, I will try it
#
swentel
I need a privacy policy now
#
swentel
dear god
#
GWG
swentel: "I know nothing about you. I don't want to."
#
GWG
There, use that
#
swentel
yeah, it needs to be on a url
#
swentel
will have to talk to eddie
#
Zegnat
A privacy policy? What data goes through your server?
#
swentel
it's because of the GET_ACCOUNTS permission
#
swentel
which theoretically would allow me to access other accounts
#
swentel
other than the ones that are now created for the Indigenous app
KartikPrabhu joined the channel
#
swentel
ok rolling out
#
swentel
hope it turns out ok .. :)
#
Zegnat
Oh, interesting. You’d think you could use such an API for only accounts specific to your app.
#
gRegorLove
aaronpk: Thinking security with mp access tokens, do you flush them periodically from Quill/Teacup? I was wondering about that for indiebookclub
#
aaronpk
I don't, but I probably should delete them if the user hasn't logged in after a while
#
gRegorLove
I know the mp server should be able to invalidate them, but wonder how many support that currently
#
aaronpk
actually, since Teacup is entirely an interactive app, it should never store the token in the database in the first place. It should use some sort of temporary session storage tied to the user's browser session
#
aaronpk
OYG/OYS are different since those post to your website without you in front of the computer, so it makes sense that those are storing the tokens
#
swentel
Zegnat, well, it makes sense for some apps, e.g. google mail / calendar / chrome - they simply use one account
#
swentel
would be weird that every app would create a new account
#
swentel
there are security measures of course for creating etc
#
gRegorLove
Good point. I'll probably work on that.
#
Zegnat
aaronpk: also, when someone presses “logout”, you could send a revokation request to the token endpoint. Does any mp client do that currently?
#
gRegorLove
I would feel safter that way
#
Zegnat
swentel: gotcha!
#
aaronpk
Zegnat: not that I know of
#
gRegorLove
Teacup and indiebookclub have a "reset login" under settings, which resets them in the db, but not a revocation request
#
aaronpk
that'd be good to add there as well
#
swentel
oh, is that possible with tokens.indieauth.com?
#
gRegorLove
What is token revocation?
#
Loqi
It looks like we don't have a page for "token revocation" yet. Would you like to create it? (Or just say "token revocation is ____", a sentence describing the term)
#
Zegnat
Not sure about the WordPress plugin. I don’t think Known did revokation either... Mintoken might be the only one to do it?
#
aaronpk
I implemented tokens.indieauth.com as a stateless service, the downside being there's no way to revoke a token
#
GWG
The WordPress plugin does support revokation
#
GWG
But no client does
#
GWG
That I know of
#
aaronpk
i'd have to add some sort of persistent storage, either to store the nonce of the revoked token, or storing tokens in a database in the first place
#
GWG
aaronpk: How do you advertise that you support revokation though, so a client could do it if they want?
#
gRegorLove
token revocation is the process of revoking an [[OAUth]] token https://tools.ietf.org/html/rfc7009
#
loqi.me
created /token_revocation (+126) "prompted by gRegorLove and dfn added by gRegorLove"
(view diff)
#
aaronpk
you don't. it doesn't hurt anything for a client to send the revocation request if the endpoint doesn't support it
#
GWG
Does anyone support it?
#
aaronpk
clients?
#
GWG
Yes
#
Zegnat
token revocation << [https://indieauth.spec.indieweb.org/#token-revocation Token revocation] is also part of the [[IndieAuth]] specification
#
Loqi
ok, I added "[https://indieauth.spec.indieweb.org/#token-revocation Token revocation] is also part of the [[IndieAuth]] specification" to a brand new "See Also" section of /token_revocation https://indieweb.org/wiki/index.php?diff=48640&oldid=48639
#
loqi.me
edited /token_revocation (+140) "Zegnat added "[https://indieauth.spec.indieweb.org/#token-revocation Token revocation] is also part of the [[IndieAuth]] specification" to "See Also""
(view diff)
#
aaronpk
not sure, let's add to that page
#
Zegnat
My token endpoint supports it. But I don’t have a client implementation that makes use of it right now
#
GWG
Zegnat: I put it in the WordPress one
#
aaronparecki.com
edited /token_revocation (+156) "list implementations"
(view diff)
#
Zegnat
So we have at least 2 server implementations, just waiting for client implementations?
#
Zegnat
That’s still pretty good. With server implementations, I think clients are more likely to add it.
#
gRegorLove
challenge accepted
#
GWG
I want expiring tokens
#
GWG
I also need to put in a 'revoke all tokens' button in my admin
#
gRegorLove
Loqi, I want expiring tokens
#
GWG
I have 20 Quill tokens alone
KartikPrabhu joined the channel
#
swentel
yeah, expire and refresh would be nice
#
GWG
I was thinking of putting in an optional expiration option on the endpoint, but that would break things
jgmac1106_ joined the channel
#
gRegorLove
GWG: Is the WordPress micropub for read posts probably the same issue as micro.blog, doesn't support 'summary'?
#
gRegorLove
s/probably/problem/
leg joined the channel
#
GWG
gRegorLove: We support summary
#
GWG
Unauthorized is an IndieAuth plugin response. So, I assume it's related to that work
#
Zegnat
I also want to implement expiring tokens. But that’s a low priority, as I tend to not use clients hosted by others, so tokens rarely leave my control in the first place
#
aaronpk
oh hey, my site supports revocation, I forgot
#
GWG
aaronpk: Which part of your site?
#
aaronpk
my token endpoint
#
GWG
You have so many
#
Zegnat
You mean you aren’t selfdogfooding tokens.indieauth.com aaronpk? ;)
#
aaronpk
not anymore!
#
aaronpk
when I rebuilt my site in 2016 I added a local auth/token endpoint
#
aaronparecki.com
edited /token_revocation (+282) "Quill now supports revocation"
(view diff)
#
aaronpk
first!
#
GWG
Do I have to refresh to get that button?
#
aaronpk
in quill? it's always been there
#
aaronpk
well, for many months anyway
#
GWG
I'll go test it
#
GWG
I have too many tokens from Quill to know which it was. Darn
#
aaronpk
it shows you a few characters from the token it currently has
#
GWG
I really have to enhance that interface
#
GWG
I got the new Indigenous
#
swentel
*crossing fingers*
#
GWG
swentel: This is strange.
#
GWG
It is saying on my test site that it got back an invalid authorization code.
#
GWG
Quill, with the same site likes it
#
GWG
And my main site likes the app, and has the old version of the code
#
GWG
So, something in my enhancements broke Indigenous, but not Quill
#
swentel
GWG, so you can login, but posting doesn't work?
#
GWG
swentel: It fails when verifying the auth code
#
GWG
Odd.
#
swentel
so it's probably going to be indigenous then, as the authentication flow goes a bit different now of course
#
GWG
So, how do I troubleshoot that. It says it is returning an invalid code
#
swentel
wordpress says that ?
#
GWG
It's returning that error to the app
#
swentel
hmmm, can I see the source code of the wordpress endpoint, might give me clue
#
aaronpk
GWG: this is the wordpress local code validation thing I think
eli_oat joined the channel
#
swentel
hmm wondering whether maybe it's an encoding thing, that's as far as I can see what changed in terms of validating the code
#
swentel
when it comes back from the endpoint, it currently redirects to my site
#
swentel
the php script looks for code and state
#
swentel
and then triggers a meta refresh to indigenous-android://oauthcallback
#
swentel
with code and state appended
yoroy joined the channel
#
swentel
worked fine though for all the tests I've done for two sites (and I did a lot heh)
#
swentel
looking at get_indieauth_user_token()
#
swentel
seems that could be the problem
#
swentel
(but not sure why yet)
#
GWG
swentel: The new version I'm testing doesn't have that anymore
#
GWG
That version works
#
swentel
interesting :)
#
swentel
hmm I should setup a wordpress
#
swentel
now that I can have multiple accounts
[grantcodes], eli_oat and iasai joined the channel
#
swentel
soo, on wordpress.com, can I create a site for free and install plugins ?
#
swentel
hmm doesn't look like it
AngeloGladding, tantek, iasai and KartikPrabhu joined the channel
#
tantek.com
edited /vHWC (-10) "update redir to its own page"
(view diff)
tantek__ joined the channel
#
tantek__
what is Gitaly
#
Loqi
It looks like we don't have a page for "Gitaly" yet. Would you like to create it? (Or just say "Gitaly is ____", a sentence describing the term)
#
Loqi
[Eugen] Generally big yikes on some of the stuff here, like the docs straight out say "the process will leak memory so we periodically kill it" like what
#
tantek
I can't tell from the thread which GitHub alternative he is referring to - Gitaly, GitLab, something else?
#
tantek
Anyone know?
#
aaronpk
gitaly appears to be a caching thing for gitlab? https://gitlab.com/gitlab-org/gitaly
#
tantek
Gitaly is apparently a caching thing for [[Gitlab]]. https://gitlab.com/gitlab-org/gitaly
#
loqi.me
created /Gitaly (+117) "prompted by tantek__ and dfn added by tantek"
(view diff)
#
kaja.sknebel.net
edited /Gitaly (+1) "linkify ('x is y. <url>.' pattern)"
(view diff)
#
tantek
that helps. though I wonder which of those has a process that leaks memory so they "periodically kill it"
#
tantek
Gitaly << Gitlab
#
loqi.me
edited /Gitaly (+30) "tantek added "[[GitLab]]" to "See Also""
(view diff)
#
Loqi
ok, I added "[[GitLab]]" to a brand new "See Also" section of /Gitaly https://indieweb.org/wiki/index.php?diff=48651&oldid=48650
#
tantek
GitLab << Gitaly
#
Loqi
ok, I added "[[Gitaly]]" to a new "See Also" section of /GitLab https://indieweb.org/wiki/index.php?diff=48652&oldid=34036
#
loqi.me
edited /GitLab (+30) "tantek added "[[Gitaly]]" to "See Also""
(view diff)
snarfed joined the channel