#dev 2018-07-07
2018-07-07 UTC
[kim_landwehr], TripFandango and [cleverdevil] joined the channel
# 
[cleverdevil] Sweet. Got basic IndieAuth working in indiepaper.io, but it needs a lot of work to glue it all together.
# [cleverdevil] And I am getting ready to leave for Dubai for a week, so it may take a little while to get it out.
# [cleverdevil] In the meantime, the updated macOS app is released that includes the ability to auto-configure with a URL.
[chrisaldrich], eli_oat and renem joined the channel
# 
Loqi An invitation is an optional feature of an event post (an event with invitations), or a reply to an event post that also notifies a list of invitees that they've been invited to the event, or a special case of that, an RSVP to an event that also invites additional people to it https://indieweb.org/invite
[eddie], TripFandango, kicks, snarfed, tantek and barpthewire joined the channel
# 
tantek.com edited /code-of-conduct (+17) "Restore 🌈 as emojicon, undo https://indieweb.org/wiki/index.php?title=code-of-conduct&type=revision&diff=49019&oldid=49018" (view diff)
iasai joined the channel
# tantek.com edited /code-of-conduct (-13) "/* See Also */ link examples and move examples there" (view diff)
iasai, trip_ and iasai_ joined the channel
eli_oat, trip_, TripFandango and [kevinmarks] joined the channel; trip_ left the channel
# 
pstuifzand Does anyone use the bookmarklet for Indiepaper?
# pstuifzand I get an error in Chrome "Failed to load https://indiepaper.io/: Response for preflight is invalid (redirect)"
[jgmac1106], trip_, [kim_landwehr], TripFandango and snarfed joined the channel; trip_ left the channel
# 
@ton_zylstra Wrapping my head around #webmention and #microformats part 2 https://www.zylstra.org/blog/2018/07/wrapping-my-head-around-webmentions-pt-2/ #indieweb @sebsel @frankmeeuwsen @ruk (twitter.com/_/status/1015607038519529473)
# 
river.cat edited /next-hwc (+20) "Redirected page to [[https://indieweb.org/events/2018-07-08-indieweb-hacking-tbd]]" (view diff)
[eddie] joined the channel
# 
[eddie] !tell [kim_landwehr] so what is happening is Indigenous is trying to send Micropub post to endpoint that is listed on your login url. It looks like that would be “http://www.wrke.online /micropub” oh! Looks like there is a space or a line break in your url that probably needs to be fixed
# 
@jmalonepr How to Turn Brand Monitoring Into Content Assets https://contentmarketinginstitute.com/2018/06/brand-monitoring-content/#.WzEb79EPoEM.twitter via @cmicontent @seosmarty #InfluencerMarketing #WebMentions (twitter.com/_/status/1015630270928769024)
# 
aaronparecki.com edited /Category:IndieAuth (+17) "/* Services and Source Code */ +micro.blog" (view diff)
# aaronparecki.com edited /Category:IndieAuth (-20) "/* Services and Source Code */ remove indiecert.net since the domain expired" (view diff)
ludovicchabant and davidmead joined the channel
# 
@Josh412 ↩️ Wow, really interesting.
Is this plugin on Github? https://wordpress.org/plugins/indieauth/ (twitter.com/_/status/1015638027371237377)
# 
@aaronpk ↩️ Yep! https://github.com/indieweb/wordpress-indieauth
That's annoying that http://wordpress.org doesn't have a link to the GitHub source. (twitter.com/_/status/1015638496306843648)
[kevinmarks] joined the channel
# 
KartikPrabhu [kevinmarks]: could you make a mf2py release from 1.1.1 ?
# KartikPrabhu thanks for reviewing the PR
[snarfed] joined the channel
# KartikPrabhu [snarfed]: oh, maybe now I can do it myself
# KartikPrabhu oh yeah I can! on it!
# KartikPrabhu of course I am not going to accept my own PRs even though I can :P
chrisaldrich and [cleverdevil] joined the channel
# KartikPrabhu [snarfed]: yeah the real stuffs got reviwed. I already cut a release on github. putting on pypi now (if i can find the tutorial I used last time)
[manton] and [dgold] joined the channel
# KartikPrabhu is now waiting the 15 or mins for pypi :P
# KartikPrabhu it did that last time
# KartikPrabhu oh hey shorter this time. maybe last time I sort of "panicked" and uploaded multiple times
tonzyl joined the channel
# KartikPrabhu [snarfed]: done! https://pypi.org/project/mf2py/ come and get it
# KartikPrabhu also has "alt" parsing in the "img" https://github.com/microformats/mf2py#experimental-features
davidmead joined the channel
# [cleverdevil] Hey [manton]
# [cleverdevil] (And any other interested parties)
# [cleverdevil] I haven't linked it from the front page yet.
# [cleverdevil] Want to see how it works for others first.
dougbeal|mb1 joined the channel
# [cleverdevil] [aaronpk] does aperture support indieauth for channels yet?
# [cleverdevil] (Note: this flow I've built uses the "save" scope)
# [cleverdevil] I didn't think so 😉
# [cleverdevil] Well, once it does, I think this flow should work!
# pstuifzand How would indieauth for aperture channels work?
# [cleverdevil] It generates a bookmarklet with the token and also a link for auto-configuring the indiepaper macOS app
# [cleverdevil] You just click and it does the configuration.
# pstuifzand I just used it, it does have "Bearer None" in the Authorization header
# [cleverdevil] Hmm.
# [cleverdevil] In the IndieAuth flow, it isn't returning a token?
# [cleverdevil] I've only tested it with my Known site, and it gets a token back.
# [cleverdevil] But, who knows 🙂
# pstuifzand :)
# [cleverdevil] It also does all of the generation client side in JavaScript.
# [cleverdevil] So, there could be something wonky there.
# pstuifzand I see, there is also a token=None in the url
# [cleverdevil] Ah, weird.
# [cleverdevil] Looks like I have some debugging to do.
# [cleverdevil] But, now I need to go finish packing for Dubai. If you see anything obvious, feel free to leave me a message 😛
# pstuifzand Perhaps your using a client side token based auth flow? aaronpk, does that exist?
snarfed joined the channel
# pstuifzand not mine, it's pretty liberal for scopes
# pstuifzand I see response_type=code in the GET request to the auth endpoint
# pstuifzand And a redirect with a code after I allowed the request
# pstuifzand I also see a POST on the token endpoint with the right code
leg joined the channel
# pstuifzand My guess would be that the params are in the url instead of the form encoded params ($_GET vs. $_POST)
# pstuifzand aaronpk, does your endpoint support both ($_REQUEST)?
# pstuifzand should it be only $_POST?
# Loqi ok, I added "https://blog.joinmastodon.org/2018/07/how-to-make-friends-and-verify-requests/" to the "See Also" section of /ActivityPub https://indieweb.org/wiki/index.php?diff=49713&oldid=49602
# [cleverdevil] So, everything is happening server side, except once the token is received, its passed to the static site as a callback and then the bookmarklet and other link are generated via client side javascript.
# [cleverdevil] Probably not 🙂
# [cleverdevil] This was super quick and dirty.
# [cleverdevil] ```def request_token(me, code):
# [cleverdevil] endpoints = discover_endpoints(me)
# [cleverdevil] raise Exception('No token endpoint discovered.')
# [cleverdevil] if len(endpoints.get('token_endpoint', [])) == 0:
# [cleverdevil] if len(endpoints.get('micropub', [])) == 0:
# [cleverdevil] token_endpoint = endpoints['token_endpoint'].pop().geturl()
# [cleverdevil] raise Exception('No micropub endpoint discovered.')
# [cleverdevil] micropub_endpoint = endpoints['micropub'].pop().geturl()
# [cleverdevil] response = requests.post(token_endpoint, params={
# [cleverdevil] 'grant_type': 'authorization_code',
# [cleverdevil] 'me': me,
# [cleverdevil] 'code': code,
# [cleverdevil] 'redirect_uri': 'https://indiepaper.io/indieauth/callback',
# [cleverdevil] 'client_id': 'https://indiepaper.io'
# [cleverdevil] })
# [cleverdevil] if response.status_code != 200:
# [cleverdevil] return None
# [cleverdevil] return {
# [cleverdevil] 'token': parse_qs(response.text).get('access_token', [None])[0],
# [cleverdevil] 'micropub': micropub_endpoint
# [cleverdevil] }```
# KartikPrabhu aaaah
# KartikPrabhu my eyes... my eyes!
# [cleverdevil] Oops, that was supposed to pass a link to that code
# [cleverdevil] Not the code itself
# [cleverdevil] Sorry 🙂
# [cleverdevil] Anyway, I am guessing that I am getting something other than 200 back from the token endpoint.
# [cleverdevil] And then just returning "None" and not handling it gracefully on the other end.
snarfed joined the channel
# pstuifzand it seems you need to send the variables with data=
{} instead params={} for a POST request# pstuifzand with params they are added to the url instead of the request body
# [cleverdevil] Ah hah!
# [cleverdevil] Fixed and uploading to Lambda...
# [cleverdevil] Okay, its live.
# [cleverdevil] Try now, @pstuifzand?
# [cleverdevil] And you said it worked for you, [aaronpk] and [manton]?
# [cleverdevil] The only thing I don't like about the way I did it is that the token ends up in a query string, which could bleed into browser history.
snarfed joined the channel
# [cleverdevil] The endpoint and server-side stuff is on Lambda, but the website is static and lives on S3/CloudFront.
# [cleverdevil] What status code do you return?
# [cleverdevil] And are you sending back JSON or form encoded response?
# pstuifzand me too json with 200
# [cleverdevil] Ah.
# [cleverdevil] No, its the JSON.
# [cleverdevil] I am assuming form encoded response since I am sending form encoded request data.
# pstuifzand alright it says it right there in the code `parse_qs`...
# [cleverdevil] I can detect a JSON response.
# [cleverdevil] Sec...
# [cleverdevil] I am going to prefer JSON responses, and fall back to form responses.
# [cleverdevil] Uploading fix...
# [cleverdevil] OK, should be there now.
# [cleverdevil] Give it a shot one more time, if you don't mind [manton]?
# pstuifzand I have a token now
# [cleverdevil] \o/
# [cleverdevil] Now I need some actual "save" scope aware endpoints to test it with 🙂
# [cleverdevil] Consider this a formal feature request [aaronpk] and [manton] haha.
# pstuifzand there is still a small problem
# pstuifzand perhaps you have seen the issue on github?
# pstuifzand my guess is that the redirect in "index" breaks the OPTIONS / cors check
# [cleverdevil] I did, but haven't had a chance to look into it.
# [cleverdevil] Ah, gotcha.
# [cleverdevil] Let me look.
# [cleverdevil] Yes! I love JSON support in MySQL [aaronpk]
# [cleverdevil] Best of both worlds: relational databases and NoSQL 🙂
# [cleverdevil] Uploading a potential fix for that right now pstuifzand
# 
aaronpk [eddie]++ this is a fantastic page https://indigenous.abode.pub/ios/help/
# pstuifzand I just added more complete websub support to Ekster (microsub server)
# pstuifzand it now subscribes to feeds (if it can find the huburl)
# [cleverdevil] Okay, feel free to try again @pstuifzand! I've made it so it only does the redirect on GET requests.
# pstuifzand that fixes it
# pstuifzand cleverdevil++
# [cleverdevil] \o/
# [cleverdevil] Looks like IndieAuth support works well 🙂
# [cleverdevil] Once I have at least one use case, I'll update the front site with details.
# pstuifzand At the moment I use it with the microsub server
# pstuifzand I guess the use case would be to have a (perhaps hidden) "archive" channel/tag on the blog and automatically post there
# pstuifzand I know aaronpk has channels on his website, that can be bound to tokens, so with Indieauth and channel selection, you could create your own archive of articles
# 
@cleverdevil I added experimental support for IndieAuth in Indiepaper today. Test it out here – https://www.indiepaper.io/indieauth.html. Once authenticated, you get an automatically generated bookmarklet and a button to click for automatically configuring Indiepaper for macOS. (twitter.com/_/status/1015689745228279811)
# pstuifzand I get a 400 error now on indiepapier.io
# [cleverdevil] Womp womp.
# [cleverdevil] This is with the bookmarklet?
# pstuifzand Yes
# pstuifzand Oh probably it's an error from my website, I see a 401 in the logs for the micropub endpoint
# [cleverdevil] Hmm...
# [cleverdevil] Yeah, I just tested via both bookmarklet and macOS app, and it works for me.
# [cleverdevil] Yay! That's awesome news.
# pstuifzand ok, i'll try again
# [cleverdevil] Once you get something working, we can coordinate to make sure I have good documentation and user experience on the site.
# pstuifzand it seems I do implement scopes
# [cleverdevil] Eventually, I want to add support for having multiple targets in the macOS app, and the ability to add categories.
# [cleverdevil] lols
# pstuifzand With aperture and indieauth I guess you would use an url for a channel, and use indieauth login with that?
# pstuifzand ok, it works with the blog now, it was a scope issue
# pstuifzand i just added it with the bookmarklet
# pstuifzand yeah, I'll delete it. I guess it should be a hidden page or something
# [cleverdevil] So, it does grab the author if it finds it.
# [cleverdevil] But, sometimes the service that I use for parsing can't find the author.
# pstuifzand I'll have to check what the endpoint got, and what is overwritten
# pstuifzand perhaps I reset the author if it can't find it
# [cleverdevil] Yeah, maybe in bug in https://mercury.postlight.com
# [cleverdevil] Or more likely an enhancement request.
# pstuifzand does it support microformats?
# [cleverdevil] Doubt it.
# pstuifzand it does find the publication date
# [cleverdevil] One thing I could do is enhance Indiepaper to look for MF2 first
# [cleverdevil] Hah
# [cleverdevil] Good idea [aaronpk];)
# [cleverdevil] Can you file a ticket for me?
# [cleverdevil] Thanks@
# pstuifzand for the second article that I added it found an author, but it's not an h-card, so the blog doesn't show it
# aaronpk this is pretty cool. my replies are all over the place... replying to github issues, mastodon posts, tweets, indie websites... https://aaronparecki.com/replies
# [cleverdevil] We've come a long way 🙂
# 
@manton2 If you’re familiar with OAuth, this introduction to IndieAuth walks through the process of how auth for the open web works. Really happy that http://Micro.blog supports this now. https://aaronparecki.com/2018/07/07/7/oauth-for-the-open-web (twitter.com/_/status/1015697623792209920)
[snarfed] joined the channel
# 
@smerrill I just posted: Microsub and the new reader evolution
https://skippy.net/microsub-and-the-new-reader-evolution/ (twitter.com/_/status/1015704713503891457)
KartikPrabhu and iasai joined the channel
# 
@RealGophersShip pstuifzand/ekster (0.4.0): microsub server https://mdy.io/gh/pstuifzand/ekster (twitter.com/_/status/1015711568439463936)
[eddie] joined the channel
[manton] and [cleverdevil] joined the channel
# [cleverdevil] So, for https://github.com/cleverdevil/indiepaper/issues/2 do y'all think I should use the hosted version of mf2py or embed it as a dependency?
# KartikPrabhu I don't know of any hosted version acting as an API
[snarfed] joined the channel
# [cleverdevil] Ah, I'll embed as a dependency then 🙂
# [cleverdevil] It should be pretty easy.
# [cleverdevil] Agreed.
# KartikPrabhu lol
# KartikPrabhu you can add it as a footnote/ref
# KartikPrabhu but now it will show up as a reply no?
# KartikPrabhu boom
# [cleverdevil] OK, I have updated Indiepaper to use mf2py to parse submitted articles, and then to fallback to Mercury if nothing is discovered.
# [cleverdevil] Its uploading now.
# [cleverdevil] When I'm done, I'd love to have a few people give it a try 🙂
# [cleverdevil] Use the new target.
# [cleverdevil] I think its set up to redirect under the hood.
# [cleverdevil] Crud, I broke it.
# [cleverdevil] Hehe
# KartikPrabhu [cleverdevil]: let me know if mf2py messes up
# [cleverdevil] It worked great!
# [cleverdevil] Just Indiepapered [aaronpk]'s OAuth article as a test - https://cleverdevil.io/s/J0bOeXSwhi.png
# KartikPrabhu nice
# [cleverdevil] Author picked up nicely 🙂
# [cleverdevil] Then an ESPN article as a test of the fallback, which also worked.
[manton] joined the channel
# 
[manton] Alright, I deployed support for scope=save on Micro.blog. It routes Micropub posts to a special queue and makes the posts available as JSON Feed with a unique feed URL for each user. Fun! Not sure the best way to frame this for regular users, but it's there as a secret feature to play with.
# [cleverdevil] [manton]++ nice! I’ll give it a try soon.
# 
@colemickens https://aaronparecki.com/2018/07/07/7/oauth-for-the-open-web
Why do I need IndieAuth when OpenID Connect is around and already implemented in lots of places? It even has discovery via webfinger too? (twitter.com/_/status/1015738087970779136)
# KartikPrabhu aaronpk: there you go ^
# 
@balloob The IndieAuth extension to OAuth2 is perfect. I will adopt this in @home_assistant to make it easier for people to build apps against local instances. (twitter.com/_/status/1015740688695250946)
# 
gRegorLove manton++
[chrisaldrich] and eli_oat joined the channel