[jgarber]!tell aaronpk Just confirmed the indieauth.com TLS certificate expired tonight: “Not Valid After Saturday, June 30, 2018 at 7:59:59 PM Eastern Daylight Time”
[jgarber]I’m running my website locally (it’s a Rails thing running on `localhost:3000`). With IndieAuth, the redirection flow works (through IndieAuth then GitHub) and I can successfully log in on `localhost`.
[jgarber]I’m working on some features on my personal website (sixtwothree.org). It’s a Rails app and before deploying anything, I work on it locally. Rails apps run in development mode on `http://localhost:3000`.
[jgarber]On `localhost:3000`, I can step through the exact same auth flow (via IndieAuth) as I would on the live version of the website and I end up authenticated and back on `localhost:3000`.
aaronpki'm skeptical of allowing this sort of use of indielogin.com, since that wasn't really the intent of it. it sounds to me like this might be something better suited to the other half of what indieauth.com provides
aaronpkmy plan is to write an "IndieAuth server as a service" and launch it at myindieauth.com, and that is what you'll be able to use for building a micropub server
aaronpktell you what, if you're willing to be a guinea pig for a few months, i'll enable your domain and localhost:3000 on indielogin.com, as long as you are willing to eventually change that to myindieauth.com if I decide that ends up beign a better place for the part where you want to log in to your own site
aaronpkwhat I end up doing is running my own local copy of IndieLogin where I have a different set of whitelisted client IDs, but that isn't really sustainable if I'm running this as a service for others :)
aaronpkit's so that your auth code verification bit doesn't get tricked into sending the auth code somewhere else, since you should first check that the state matches what you expect before verifying the auth code
[jgarber]There are some differences in the Webmention and Micropub endpoint discovery specs that we might consider bringing into alignment. I think there’s an issue on the w3c/Micropub repo… I was looking at that earlier today.
[jgarber]aaronpk Thanks for merging that webmention-client-ruby PR! I’ve got a few more queued up. I’ll get to that tomorrow, though. It’s getting late here on the East Coast.
[jgarber]aaronpk Also think I got IndieLogin mainly working. I’m not properly using `state` yet, but was able to (with a few changes on my side) get to where I can log in locally.
gRegorLoveAdded some consuming of read-of to indiebookclub: query parameter read-of will take a URL and parse it for h-entry.read-of and populate the form. If that's not found, it falls back to checking for h-cite.
Loqi[[eddie]] Well, I didn’t get the final couple of features done that I wanted to for Indigenous, but I didn’t change the pre-order date either, so for better or worse... it’s live! 😱
[manton]Oh, sorry to hear it. No rush of course. (We've waited 15 years for the return of web rings, so a few more days, weeks, or months will be fine.)
[barryf]Hey [jgarber]! Sorry to have missed your pings. I’ve been tied up with a new baby and switching jobs for the last few months. I may be able to help with some Ruby in between things though.
Loqi[barryf]: [jgarber] left you a message 11 hours, 6 minutes ago: Hey, buddy! Drop me a line when you see this. I’d like to pair up on some of the IndieWeb Ruby things if you’re interested.
[jgarber][barryf] Thinking about a workflow for alerting folks to review requests without being annoying. Would you be okay if I requested reviews on PRs on GitHub?
[barryf][jgarber] Thanks very much! Sure, I’d be happy to help as long as you don’t mind slowish responses. I had a few ideas back when I last hacked on it.
[jgarber]I’m hoping there’s a small handful of folks interested in Ruby-things and we can keep things moving forward without any one person having to be the gatekeeper/blocker/etc.
[jgarber]Done! [barryf] [gerwitz] [jgmac1106] and anyone else interested in Ruby, please add yourself to the “Support” section on /Ruby if you’d like to be tagged in on code reviews, etc.
[jgarber]I listed my skills (such as they are), GitHub username, and what I’d be interested in helping with, but don’t consider that a template for your own addition.
JeenaHm I can't log in to https://xn--sr8hvo.ws/ I'm getting "ReferenceError: Micropub is not defined" and because there is no link to the author on the page I have no idea who to talk to about it.
aaronpksomehow I still get a few spam pingbacks leaking through, and if you look at my referer logs those are just a total mess of spam, so i'm not convinced that's much of a useful signal
aaronpkpstuifzand: your photo of your like isn't showing up on my post because it's running through your media proxy and that blocks it unless it's got a referer header of your own site
ZegnatI'd say definitely query webmentions you have received. I think that's a pretty good sources for vouches, and one you already have available in WP, I assume?
ZegnatYou would need to able to query your webmentions for the domain they came from. Then when you are sending a webmention to a page, you query on the domain, and send the last webmention you received from it as vouch
aaronpki'm not saying Vouch is actually the best solution, it just sounds like there is some misunderstanding of the specific problem it was created to solve
[schmarty]woohoo! 🕸.ws now uses indieauth for authentication only, using a questionable fork i made of grantcodes' micropub-helper that drops all the tokens and scopes and whatnot.
aaronpkthe problem that will happen tho is if all people have to do is log in, then you might end up with a bunch of people logging in to try but then never actually adding the link
[grantcodes][schmarty] actually might make sense to separate out the auth part of micropub helper into another module for this use case. But also include it in micropub helper by default
[grantcodes]Would be good to work with you on other indieweb express middleware, as I think my micropub endpoint is going to end up including token and auth endpoints too in the future
[schmarty]grantcodes: that'd be great! i am pretty far behind on best practices for this stuff, so i'd love some extra eyes and hands as i'm stumbling through.
Zegnataaronpk, I do like that it should enable the use of wildcard with any domain no matter where the dns is from. But it still looks like a lot of overhead. I think I’ll stick to non-wildcard certs for now
ZegnatI start different subdomains on zegnat.net for all experiments. But sometimes I don’t feel like doing all the steps again and end up dumping it on an already existing domain. Having a wildcard cert on that domain would get rid of one step, and would just make that easier for me.
Zegnatfor subdomains on different servers you should have separate certs. For security reasons you don’t want the same cert (the private key part, really) on multiple servers.
gRegorLoveI should write up a post with some Vouch thoughts and what I've implemented. I think I've only written on the wiki very briefly, then IWS discussion.
aaronpkMaybe I'll try analyzing the referers again and just filter out all google URLs. The last time I looked the vast majority of my data was ugly google URLs
LoqiIt looks like we don't have a page for "goaccess" yet. Would you like to create it? (Or just say "goaccess is ____", a sentence describing the term)
LoqiIt looks like we don't have a page for "GoAccess" yet. Would you like to create it? (Or just say "GoAccess is ____", a sentence describing the term)
KartikPrabhu [jgarber]: yeah me too
[jgarber] In the interim, I was looking at IndieLogin and it seems `client_id` wasn’t too happy with a `http://localhost:3000` URL.
aaronpk tell you what, if you're willing to be a guinea pig for a few months, i'll enable your domain and localhost:3000 on indielogin.com, as long as you are willing to eventually change that to myindieauth.com if I decide that ends up beign a better place for the part where you want to log in to your own site
gRegorLove Added some consuming of read-of to indiebookclub: query parameter read-of will take a URL and parse it for h-entry.read-of and populate the form. If that's not found, it falls back to checking for h-cite.
@kartik_prabhu liked https://aaronparecki.com/2018/06/30/11/your-first-webmention
Nice short guide to sending webmentions. (twitter.com/_/status/1013266795417960448)
[eddie] Oh! Haha, aaronpk! Yep it’s live.... didn’t get everything I wanted in: https://chat.indieweb.org/2018-06-30#t1530337998780300
[jgmac1106] Agree. Awesome post [aaronpk]
@_am1t In reply to https://aaronparecki.com/2018/06/30/11/your-first-webmention
I always wanted to sort out my webmentions and the respective microformats in reply posts. Aaron’s post could not have arrived at a better time. Here’s hoping it comes out the way I want it to. (twitter.com/_/status/1013373431490981888)
@adactioLinks Sending your First Webmention from Scratch • Aaron Parecki https://aaronparecki.com/2018/06/30/11/your-first-webmention (twitter.com/_/status/1013378518326136833)
www.svenknebel.de edited /Vouch (+478) "list of ideas for pages to trust, partially from IWS 2018 session" (view diff)
Jeena Hm I can't log in to https://xn--sr8hvo.ws/ I'm getting "ReferenceError: Micropub is not defined" and because there is no link to the author on the page I have no idea who to talk to about it.
Loqi Refback is a linkback method that works using the standard HTTP Referer header https://indieweb.org/refback
@kevinmarks Aaron put together a nice clear guide to creating and sending your first webmention https://aaronparecki.com/2018/06/30/11/your-first-webmention #Indieweb (twitter.com/_/status/1013457673109434368)
@ShaneHudson ↩️ @kevinmarks I need to rewrite the webmention plugin I was using, upgraded to Craft 3 and no longer compatible. (twitter.com/_/status/1013458338091290624)
[schmarty] woohoo! 🕸.ws now uses indieauth for authentication only, using a questionable fork i made of grantcodes' micropub-helper that drops all the tokens and scopes and whatnot.
[grantcodes] My bad on the dead ends 😅
Zegnat aaronpk, did you end up setting up https://github.com/joohoi/acme-dns for LetsEncrypt wildcard?
@miklb ↩️ @allafarce Keep an eye on microsub https://indieweb.org/Microsub (twitter.com/_/status/1013500277507395584)
GWG I just noticed this article in the wiki. https://gkbrk.com/2016/08/why-refback-still-matters/
[miklb] GoAccess is a self-hosted tool to view server logs https://goaccess.io