#LoqiHey @manton I am trying to get my micro.blog working with Monocle. I can sign into Aperture fine but when I try to log into Monocle I get this error message. I think it might be caused by something I added to the CSS but I am not sure. Can you help.
#[manton]The site is using Micro.blog for authorization_endpoint, token_endpoint, and micropub.
#[manton]I think that's supposed to work, but haven't tried it myself.
#aaronpkalso a few hours ago I updated the error message there which will include more details where it says "error: forbidden" in that screenshot
[eddie] joined the channel
#[eddie]I think the other issue is her token endpoint has changed from IndieAuth.com to micro.blog. Do you think she might need to log in to Aperture so it’s pinging the right endpoint with the right token?
#aaronpkah yeah aperture will save the new token endpoint every time you log in, otherwise it uses the last token endpoint it knows about
#[manton]Thanks y'all. I thought I saw it discussed a little here before but wasn't following it closely.
#[eddie]aaronpk: In other strange things, following up on earlier, from everything I can tell, my server isn’t receiving any post data. I’m logging the body to the console and it’s completely empty, and my endpoint works with normal token based logins so it’s not the Node.js libraries.
#aaronpkmost higher level web frameworks will convert all the multipart params to the same way that form-encoded params are handled, so that's why this hasn't come up before
#KartikPrabhuphp requests with all the array stuff is weird
#aaronpkyeah there's a little settings icon that appears if you hover over the domain
#aaronpkapparently I need to make that not hidden cause you're not the first person to miss that
#[eddie]“Hover over the domain” especially if one is using iOS 😁 sometimes Hover actions work with taps and sometimes they don’t. I’m guess this is one of those times it doesn’t, because I tried tapping everywhere and no dice
#[eddie]I’ll try when I get to my computer in a bit lol
#aaronpkoh what the heck, I just removed the hover effect.
#aaronpkso if you can get the css to reload you should see it now
#[eddie]Thanks! ... I think the css doesn’t want to reload (despite my tricks), but also.... what page should I be looking at? The Dashboard? The user menu in the top right? 🙂
#aaronpkif you can see the domain name in the header the gear is right next to it
#mblaneygrantcodes when I try to log in I get a JSON object with code: 401 and message: "Could not parse all required endpoints from your site"
#Loqimblaney: [grantcodes] left you a message 7 hours, 40 minutes ago: I think I finally may have fixed your together issue, it may have had issues with quoted rel link headers
eli_oat joined the channel
#dougbealaaronpk: How do you tell if you have a valid access token for 804: Rejects unauthorized access tokens ?
#dougbealIf I grab the code from indielogin, it passes, but if I randomly modify, it still passes
#dougbealI did verify that the Quill token fails the test
renem, jgmac1106, [matpacker], tantek, [chrisaldrich], benwerd and [miklb] joined the channel
iasai, chrisaldrich, [chrisaldrich], KartikPrabhu, [jgmac1106], [davross], barpthewire, benwerd, [tantek], deathrow1 and deathrow1|absnt joined the channel; mblaney left the channel
leg, [xavierroy], jgmac1106, [jgmac1106], joeld and [kim_landwehr] joined the channel
#[kim_landwehr]Sorry for disappearing I was getting frustrated because I think I removed everything I feel safe removing and I am still getting the same error in Monocle.p3k.io When I log into Together I get error finding Token [manton] [aaronpk]
#aaronpk[kim_landwehr]: can you share a new screenshot of the error in Monocle?
#aaronpkAh shoot it got cut off. Can you copy and paste the whole line that begins with "body"
#[kim_landwehr] "body": "{\"error\":\"forbidden\",\"error_description\":\"The token endpoint could not verify this access token\",\"token_endpoint\":{\"url\":\"https:\\/\\/micro.blog\\/indieauth\\/token\",\"code\":500,\"response\":\"<html>\\n<style>\\nbody {\\n\\tfont-family: \\\"Avenir Next\\\", \\\"Segoe UI\\\", \\\"Verdana\\\";\\n\\tfont-size: 16px;\\n\\tline-height: 25px;\\n}\\n\\np {\\n\\tpadding-top: 4px;\\n}\\n<\\/style>\\n<body>\\n\\n<p>Error wh
#[kim_landwehr]the request. Please try again or email <a href=\\\"mailto:help@micro.blog\\\">help@micro.blog<\\/a>.<\\/p>\\n\\n<\\/body>\\n<\\/html>\"}}",
#[kim_landwehr] "error": "", is that what you were looking for?
#[kim_landwehr]processing the request. Please try again or email <a href=\\\"mailto:help@micro.blog\\\">help@micro.blog<\\/a>.<\\/p>\\n\\n<\\/body>\\n<\\/html>\"}}",
#[manton][kim_landwehr] I may need to wait until [aaronpk] is back to understand what is happening here. I don't see any errors on the Micro.blog side. Maybe you have to sign back in for it to try again?
[dougbeal] and [chrisaldrich] joined the channel
#schmartyjgmac1106_: if people can tolerate the long build times, hosting a site on GH Pages, with Glitch running the various Micropub / Webmention services needed to handle easy posting and interactivity, should be possible by kludging some existing projects together.
#[jgmac1106]I know Anil is very interested in people using Glitch to learn how to support IndieWeb
#[jgmac1106]... Hurm maybe we need a strategic IWC-Chicago
benwerd and [kevinmarks] joined the channel
#[kevinmarks]Glitch could host an indieweb blog, but they don't offer custom urls yet
[kim_landwehr] joined the channel
#schmartykevinmarks: fly.io can be used to point custom domains at glitch.com projects, though currently it doesn't seem to work with "apex" domains, so you have to use a subdomain.
#schmarty🕸💍 is hosted on glitch.com, but with the apex domain issue i ended up setting up an nginx proxy on one of my own machines so i could use the bare domain.
#sknebelI wonder for how many people "free, but with 4 different services to configure and set up" is preferable to "works on cheap all-in-one hosting"
#schmartyi *think* there's something possible in the middle by setting up a static site github repo, hosting the actual domain with netlify, and using netlify's functions to handle Micropub / Webmention / IndieAuth / etc.
#schmartyi haven't had a chance to poke around in it, yet.
#sknebelcause maybe a PHP based, less complex than WP solution is the better entry point
#[jgmac1106]No custom domain is always part free IndieWeb IMO
#sknebelsure, entirely free isn't happening. but you could do all the non-domain parts by puzzling free services
[xavierroy] joined the channel
#dougbealcan heroku whatevers spin up when requests come in?
#dougbealneed a registrar/domain reseller with github signin!
#[jgmac1106]Played with JSHipster yesterday that was a fun way to api up apps
#[manton]Heroku's free plan will spin up the app when a request comes in, but it's pretty slow for the first request. Probably not great for a normal web site.
snarfed joined the channel
#dougbealSo it might be an alternative to continuous integration for a static site
#[kevinmarks]Though I need to do some more work on svgshare.com and unmung.com as apparently they are being used as proxies
benwerd and tantek__ joined the channel
#dougbealI wonder about the value of an apex domain for Gen 4, vs a free subdomain (which has the advantage of a shared namespace)
#schmartydougbeal: sorry if i muddied the vocab waters earlier. by "apex domain" i meant, e.g. "dougbeal.com", versus a subdomain like "www.dougbeal.com". since most DNS providers only allow apex domain records to point to real IP addresses, and most free hosting only allows CNAME alias records, these two things often don't line up.
#schmartyso for example you could still own your own domain with fly.io pointing at a site on glitch.com, but that domain would need to be something like "www.yourdomain.com" rather than just "yourdomain.com".
#schmartyall of that is Rather Confusing even when i feel like i understand the underlying tech pretty well!
#sknebelits surprising the apex domain thing hasn't been solved for so long
KartikPrabhu joined the channel
#sknebelI think now a solution is being standardized
#[cleverdevil]Its another good alternative, and there are frameworks out there to prevent "cold starts"
#dougbealI wonder about the value of an TLD domain for Gen 4, vs a free SLD (which has the advantage of a shared namespace)
#[cleverdevil]Eventually, I'd love to host my personal website on Lambda, and I was actually pretty close the other day to having Known running on Lambda 🙂
#LoqiA subdomain typically refers to a domain with one more "name(dot)" component than that which someone actually has registered which is often seen indieweb sites with a family name domain like joel(dot)franusic(dot)com, or often on silos like matt(dot)wordpress(dot)com https://indieweb.org/subdomain
#[manton]I usually call "example.com" a root domain vs. a sub-domain. Not sure where I picked up that terminology. (Pretty much everything about DNS confuses regular users... Just trying to come up with the most friendly way to talk about it.)
benwerd joined the channel
#tantek__manton++ yes current language / documentation about domains, buying, setting up is too confusing
#Loqimanton has 12 karma in this channel (72 overall)
#tantek__it needs to be as simple as talking about phone numbers
#[ryan339]Bit late to the discussion on free indieweb hosting but I just moved everything over to netlify. build times aren’t great but it does everything i want including server side redirects, apex domains, git lfs, hugo, etc… all for free. i wish they had a $10/month “please stay in business” plan…
#[ryan339](i’m currently building out my micropub/webmention backend that i’ll run on a personal server)
#[jgmac1106]I used to let code dojo clubs and Mozilla Clubs piggyback on mine domain and give each a subdomain. Something like that wouldn't be hard to do
#aaronpkat this point we’re gettign far enough that monocle has a token from micro.blog. Monocle makes a request to Aperture with that token, and Aperture checks the token at the token endpoint
[jgmac1106] and renem joined the channel
#snarfedhey KartikPrabhu. what command line are you using to upgrade things with pip?
#snarfedif pip install -U, that's overly aggressive at upgrading other related packages. and if you install mf2py in a fresh virtualenv, it will pull the latest versions of deps
#snarfedthe key test is an existing virtualenv with bs4 etc where you do something like `pip install mf2py==1.1.1`
#sknebel(I still have an idea for a replacement for the code that broke, but that's now under "small cleanup", not "critical bugfix")
#LoqiIt looks like we don't have a page for "RFC 6648" yet. Would you like to create it? (Or just say "RFC 6648 is ____", a sentence describing the term)
#aaronpkLoqi: read all the RFCs and add them to your database
#gRegorLoveI guess as long as I continue to maintain the mp request variants and give users the option to switch, it's not an issue.
#gRegorLoveBut that makes me wonder, if a server supports x-read-status and ibc continues to support that, what reason is there for the server to update to the later-standardized property?
#aaronpkThat's kinda why I don't like the x prefixes ether
#aaronpkAlso there was an mf2 property around comments I think
#KartikPrabhuno not the property value but porperty name
#KartikPrabhuhmmm but non-standard? or in the spec say for h-entry
#gRegorLoveI could use ibc-. I thought someone recommended against that.
chrisaldrich and benwerd joined the channel
#@nilshaukIndieAuth, WebMentions, Websub and Social readers are all nifty building blocks for a better web. And then there’s Vouch which will be integral as well, currently an unfinished idea for anti-spam mechanics in a decentralized #IndieWeb future. (twitter.com/_/status/1019708828206731264)
[ryan339], benwerd, [cleverdevil], [matpacker], [Chris_Lott] and tantek joined the channel
#dougbealaaronpk: ooh, was I getting that when it was returing php notices?
snarfed joined the channel
#[cleverdevil]Sigh... Apple has replied to my ticket about Indiepaper TestFlight issues for the iOS version, and basically said "please send us a video proving something is wrong."
#tantek__aaronpk, re: X-Forwarded-For and the whole mnot RFC about disliking x-, all the examples that drove that conclusion were x- that hung around "too long", or rather, with too slow a process for actually assessing x- experiments and then either rejecting or accepting
#tantek__roughly speaking - a lot of them were around for years before action was taken
#tantek__while they really should not last more than a year
#tantek__just got a weird "Confirm your account recovery settings" interstitial from GitHub - has anyone else seen that?