#dev 2018-08-19

2018-08-19 UTC
fluter, [tantek] and dp323 joined the channel
#
@kevinmarks
↩️ So, these are both solved in the underlying protocols. Migration of followers is there in websub, with tests and everything https://github.com/w3c/websub/issues/98 The separation of fetching of feeds and display ui is addressed in microsub: https://indieweb.org/Microsub
(twitter.com/_/status/1030979397719941120)
#
@dshanske
↩️ People continued working on it. Everything you need using W3C standards like Webmention, Microformats2…give it a try? https://IndieWeb.org/WordPress/Plugins (https://david.shanske.com/2018/08/18/2048/)
(twitter.com/_/status/1030980083446673411)
nstr18, [kevinmarks] and eli_oat joined the channel
#
[tantek]
Kevinmarks++
#
Loqi
Kevinmarks has 6 karma in this channel over the last year (29 in all channels)
renem, yaymuffins15, snarfed, tantek__, [tantek], thekingofbandit1, tantek and [jgarber] joined the channel
#
[jgarber]
Zegnat: Thanks for bringing up the <base> issue. I don’t remember that getting much traction earlier in the week.
#
[jgarber]
Looking forward to that test making its way to webmention.rocks. I’ll have some code changes to make, but the Ruby lib will be better off for the extra tests. 👏
[chrisaldrich] joined the channel
#
loqi.me
created /DiSo (+25) "prompted by [chrisaldrich] and redirect added by tantek__"
(view diff)
#
loqi.me
created /DiSo_Project (+146) "prompted by tantek__ and dfn added by tantek__"
(view diff)
#
loqi.me
edited /DiSo_Project (+45) "tantek__ added "https://diso-project.org/" to "See Also""
(view diff)
#
tantek.com
edited /timeline (+80) "Diso to be added to timeline"
(view diff)
edong2318, Guest72310 and [eddie] joined the channel
#
[eddie]
I looked at /Twitter and didn’t see anything. Anyone know of any Twitter archive -> Micropub projects?
#
[eddie]
Micro.blog will import tweets but that’s a backend thing, not a public Micropub feature like Instagram’s import.
#
[eddie]
[cleverdevil] I know you’ve done a lot of importing stuff but I don’t think I’ve ever seen anything about Twitter
#
[eddie]
I’m thinking about trying to build one out if one doesn’t exist.
boars joined the channel
#
snarfed
[eddie]: afaik twitter archive JSON is API objects, so you should be able to use https://github.com/cleverdevil/ditchbook almost exactly as is
#
Loqi
[cleverdevil] ditchbook: Move your Facebook data over to your own website using Micropub
#
snarfed
(uses granary to convert silo API JSON objects to micropub)
[cleverdevil] joined the channel
#
[cleverdevil]
I’ve never bothered with Twitter.
#
[cleverdevil]
For some reason haven’t been inspired to link all of my old content. I’d like to get to it eventually.
#
[cleverdevil]
But yeah, ditchbook may be able to do it with some tweaking.
#
Loqi
[dshanske] #156 If there is a token then do not pass control back to WordPress
#
GWG
Yes?
#
GWG
I tried to write tests
#
snarfed
thank you! much appreciated
#
snarfed
you say it still falls back to cookie auth if there's no token...but i don't see that in determine_current_user
#
snarfed
it seems like it requires a token,
#
GWG
It's the way core is designed
#
GWG
I wrote it not to
#
snarfed
ahhh right since this is a filter
#
snarfed
except...it returns 0 and sets static::$error both if the token is bad *and* if there's no token
#
GWG
I commented on this as part of the move to work on auth in Core
#
snarfed
oh wait no, i see earlier. nm.
#
GWG
snarfed, it passes control back if there is no token
#
snarfed
right, i see that now
#
snarfed
ok. mind explaining in the method docstring? something like, "this method checks the token if provided, but if not, it passes through $user_id as is, since it's a filter." or whatever language you want
#
GWG
Okay.
#
GWG
How is the rest of it looking? Do the tests help?
#
snarfed
yes! tests always help! :P
#
[eddie]
snarfed [cleverdevil] very cool! I may have to look into that!
#
GWG
snarfed: Done, merging now, then bed
#
snarfed
GWG++ thx
#
Loqi
GWG has 36 karma in this channel over the last year (150 in all channels)
snarfed, musician_pro, [chrisaldrich], zmachine, zhongfu24, rud0lf23, jpX, Stummi14, jem5, dystopia_, Sitri, moondoggy11, Comstock_7, Skaag15, yar2 and mlhess joined the channel
averell29 joined the channel
dindon28 joined the channel
#
Zegnat
!tell snarfed No, my endpoint discovery code does not have integrated caching. That'll be up to the lib user.
#
Loqi
Ok, I'll tell them that when I see them next
aphex`, [kevinmarks] and [pfefferle] joined the channel
#
[pfefferle]
GWG aaronpk shouldn‘t we implement a simple class to parse h-App? I think it is a very simple and uncomplicated format so it would be a bit too much to include the mf2 parser!?!
#
GWG
[pfefferle]: That was the other alternative
#
GWG
I'm going to try a PR at some point
#
sknebel
there is no "simple format" vs "complex format" from a parsing perspective
#
sknebel
the only "complex" thing you can maybe ignore is microformats1
#
aaronpk
Yeah you'll end up creating lots of fun new edge case errors if you try to parse a microformat with anything other than a real microformats parser
#
Zegnat
Much like trying to parse HTML with a non-HTML parser
#
GWG
I was going to start with finding icon and title without microformats
#
aaronpk
If you're taking about parsing the html and looking for just those classes you might as well do the whole microformats parsing step
#
aaronpk
if you're talking about trying to parse it without an html parser... well that is pretty well understood to be a bad idea
#
Zegnat
You could have a smaller mf2 parser by assuming the objects you are parsing will not make use of certain things. E.g. h-app authors will never use vcp, and will only use p- and u- properties. But that breaks as soon as someone does uses anything outside of your limitations.
#
GWG
I just submitted a PR for logging every Micropub error to the error_log if debugging is on. Going to do the same in IndieAuth when I return from work.
#
GWG
Hopefully will be able to track down my problems
#
aaronpk
I don't love the idea, but the other option here is to use meta tags like the Twitter/FB tags. If too many people building this stuff end up getting turned off of the idea that their authorization server needs to parse microformats then it's worth considering tho
#
Zegnat
rel-icon exists if it is just about the logo.
#
[pfefferle]
But I would prefer the simple direct parser way and change to the mf2 parser if it gets more complicated, instead of the other way around
#
aaronpk
You'll just end up getting confused support requests if you don't do it right from the beginning
#
[pfefferle]
Because there are some plugins that use the mf2 parser atm. And the version might differ, so we really can get some strange side effects if the indieauth plugin includes the wrong lib version
#
Zegnat
Right, I guess there isn’t some sort of dependency management for WP to make sure all the plugins only ever grab one specific version of the mf2 parser
#
aaronpk
Zegnat: want to document what it would look like to use existing html tags to get the same information as h-app?
#
[pfefferle]
Gegner exactly
#
sknebel
one could embed the parser directly into the plugins, with customzied name etc so it doesn't get loaded accross plugins
#
sknebel
although I'd be curious about the weird side-effects, the parser API should(TM) be stable
#
sknebel
mh, lang-parsing etc might change and/or would need a strict feature-flag policy to be fully compatible I guess
#
Zegnat
aaronpk, it only requires name/logo/url, right? Name is tricky, could be <title> if we are only talking about HTML. logo and url could be rel-icon and rel-self, probably. Which means they would work in HTML <link> elements, in any XML flavour that does link (atom:link), as well as HTTP Link headers.
#
[pfefferle]
And this seems wrong
#
[pfefferle]
Perhaps we can easily change the namespace for the class to make it more plugin dependent
#
[pfefferle]
Will have a look if this is easily doable
#
aaronpk
Zegnat: we do only care about HTML since this is always on a human readable page
#
aaronpk
<title> might work but sometimes people put a lot of stuff in the title like a small description or tag line, so that could look weird on the authorization screen
#
Zegnat
Do browsers still do XML with XLST? TXT is also human readable. Though I guess the spec does ask for an HTML page so it is not really a concern.
#
aaronpk
Firefox dropped XSLT at some point I think? Or was that safari
#
Zegnat
Does ogp have a type for app?
#
[pfefferle]
OGP is extensible
#
GWG
I think a fallback to icon and meta might work if h-app isn't available or parseable
#
Zegnat
Officially only with namespaces, right, [pfefferle]? So we would have to introduce a new app namespace for OGP? I am not sure what kind of upkeep that requires and might be a bit much to tack onto the IndieAuth spec.
#
Zegnat
Oh. Brilliant. Facebook put the namespace pages behind their API. Can’t access it without a proper token *facepalm*
#
[pfefferle]
It is no longer called namespace in RDFa, but prefix/profile, but yes
#
Zegnat
[pfefferle], OGP calls them namespaces ;)
#
Zegnat
“Each vertical has its own namespace. The og:type values for a namespace are always prefixed with the namespace and then a period.”
#
aaronpk
Yet another example of how OGP doesn't claim to be RDF even tho the RDF fans like to claim that it is
#
GWG
I just want an icon and a proper title.
#
Zegnat
GWG, sorry, you have unleashed the beast now :P
#
Loqi
[Marcos Caceres] Web App Manifest
#
Zegnat
The manifest is an interesting idea
#
aaronpk
That requires another http request which seems unnecessary for this
#
Zegnat
If you want embedded structured data inside of HTML, that is relatively easy to parse with minimal code, OGP or JSON-LD sound like the ways to go
#
Zegnat
Well, not JSON-LD perse, but JSON islands
#
aaronpk
Can someone go through a handful of Micropub apps web pages and document all the places that they currently advertise the name/logo?
#
aaronpk
Then we can see if the apps all already agree on some html meta tags or something
#
Zegnat
Would it be worth opening an issue for this against the indieauth spec? To track this? I’ll be happy to do a little discovery after lunch
acegiak, connection and koddsson joined the channel
#
ludovicchabant
Cool, looking at the chat log I learned about cleverdevil’s ditchbook! Might try it with Twitter (I don’t want to bring Facebook stuff to my website since those were semi-private while my website is public)
#
ludovicchabant
Cool, looking at the chat log I learned about cleverdevil’s ditchbook! Might try it with Twitter (I don’t want to bring Facebook stuff to my website since those were semi-private while my website is public)
ChasedSpade joined the channel
#
ludovicchabant
Wtf, did my message get posted several times?
Quokka2 joined the channel
#
aaronpk
Zegnat: sure that’d be great
#
Zegnat
I’ll document the issue and start on some discovery then
suim4, martijnvdven, bray90820_, barpthewire, LooCfur5 and snarfed joined the channel
#
Loqi
[Zegnat] #23 Client Information Discovery without relying on microformats parsers.
#
Zegnat
I think I captured the problem with a boiled down parser for h-app, the problem with requiring mf2 parsers, and the list of possible alternatives mentioned in the chat
#
aaronpk
Zegnat++
#
Loqi
Zegnat has 53 karma in this channel over the last year (140 in all channels)
#
Zegnat
I ran into <meta name="application-name"> as a much better alternative to <title> for app name. And now I am kinda loving the standard-HTML alternative
#
aaronpk
yeah that option seems to be the lightest weight, fewest new things approach
#
Zegnat
It likely introduces hidden meta data, which is something we try to counter with microformats usually.
#
Zegnat
E.g. you can’t slep a rel="icon" (or similar) on an <img> for your logo
#
Zegnat
s/slep/slap/
[pfefferle] joined the channel
#
Loqi
Zegnat has 54 karma in this channel over the last year (141 in all channels)
#
Zegnat
is all up in those IndieAuth issues! :P
#
[pfefferle]
Seems a bit hacky...
#
Zegnat
Wow, that looks like an ugly system for metadata :o
#
Zegnat
What do you call that ... comma separated named values?
#
Zegnat
"this=is, a=mistake, for=an, extendable=format"
#
Zegnat
(ping [kevinmarks] have you seen that format? Seems like something you would, uuh, love! ;) )
#
[pfefferle]
After some googling, the Webapp Manifest seems to be the way to go, because it defines web apps...
#
aaronpk
these aren't the same kind of web apps tho
#
[pfefferle]
What is the difference?
#
[pfefferle]
> This specification defines a JSON-based manifest file that provides developers with a centralized place to put metadata associated with a web application.
#
Loqi
It looks like we don't have a page for "difference" yet. Would you like to create it? (Or just say "difference is ____", a sentence describing the term)
#
aaronpk
webapp manifest is for PWAs, but the apps we're talking about are not necessarily PWAs
#
aaronpk
e.g. it would be kind of weird for indigenous to publish a webapp manifest since it is a native ios and android app
#
Zegnat
Urg, I just read the HTML spec also limited the use of <meta title="application-name"> to “Web application”. Though it doesn’t define what it means by that.
#
[pfefferle]
aaronpk sure, but it does not have to be a pwa, at least is the spec not saying it, but I understand the point with the extra request... still seems to be the „cleanest“ way for me (does that make sense in English?)
#
aaronpk
yeah, except you already have to parse the html both to find the link to the app manifest plus also to get the redirect_uri
#
aaronpk
so it seems easier to at that point just look for a few extra meta tags
#
Zegnat
I would just wish we didn’t need to invent the meta tags
#
[pfefferle]
Me too, but searching for an alternative ends always on the web apps manifest page ;)
#
Zegnat
JSON-LD would let us use an existing vocabulary (schema.org/SoftwareApplication), but I don’t think anyone really wants to exchange the mf2 parser with a JSON-LD parser
#
sknebel
yeah no
#
[pfefferle]
Please no!
#
[pfefferle]
For me this is uglier than a side file!
#
Zegnat
Hahahaha
#
Loqi
hahahaha
#
Zegnat
Loqi: script islands or sidefiles?
#
Loqi
says script islands
#
Zegnat
I am going through possible <meta> names (https://wiki.whatwg.org/wiki/MetaExtensions) and spotted this one for the category of things I did not know about: <meta name="pinterest" content="nopin"/>
[kevinmarks] joined the channel
#
[kevinmarks]
I'm going to be indieweb clippy here: it looks like you're trying to invent a microformat. Would you like me to point you at microformats.org/wiki/process ?
#
aaronpk
didn't i say something about please document all existing examples of markup that micropub apps are publishing
#
Zegnat
Yeah, and I am looking into that too
#
[kevinmarks]
You seem to be doing the research, but wikify it please, that helps a lot in converging
#
Zegnat
I am just not sure how this collection is going to show us anything, apart from which tools include h-app (like Quill) and which do not (like Telegraph and shpub)
#
aaronpk
i meant also documenting their use of <title> and other meta tags
#
aaronpk
including ogp and twitter tags
#
Zegnat
So far not seen a lot of ogp/twitter/meta-data at all. But I’ll have another pass over that. And put my work somewhere public.
#
Zegnat
Lots of early implementations coming out of IndieWeb people, who may have a bit of a bias against those extra meta data elements, is probably not going to help ;)
#
tantek.com
edited /Plerd (+200) "dfn, articles, see also"
(view diff)
#
tantek.com
created /rdf (+17) "create due to linking from a tweet (a URL that must have been typed in haste since it wasn't checked)"
(view diff)
#
tantek.com
edited /RDF (+528) "criticisms subsections, subheads for each, note emotional rant as result of a problem, not problem itself"
(view diff)
snarfed joined the channel
#
loqi.me
created /Tweetbot (+221) "prompted by tantek__ and dfn added by tantek__"
(view diff)
#
kaja.sknebel.net
edited /Tweetbot (+1) "linkify ('x is y. <url>.' pattern)"
(view diff)
#
loqi.me
edited /Tweetbot (+167) "tantek__ added "https://twitter.com/Akimdanial6/status/1029907666452152321" to "See Also""
(view diff)
kline0 joined the channel
#
tantek__
Twitter << Tweetbot
[pfefferle], stephen873 and liste25 joined the channel
#
jmac.org
edited /Tweetbot (-1) "not dead yet"
(view diff)
MEPB joined the channel
#
Zegnat
Alright. Looks like h-x-app outnumbers h-app easily, and there are way less explicit redirect_uri values than I expected.
#
Zegnat
Now that I have a list of client_id’s, I can see what other metadata they have in common. I have seen multiple rel-icon and also a couple of apple touch icons. Few rel-manifest too.
[jgmac1106] and eido1on joined the channel
#
tantek__
aaronpk: I think you need to drive formalizing h-app
#
tantek__
otherwise as Zegnat points out, h-x-app is going to continue polluting
KobrAs13 joined the channel
#
tantek__
(maybe this is an example of where we don't want to use -x- in microformats, for top-level objects in particular)
#
aaronpk
This is a great example of why I’m not a fan of the -x- approach
#
Zegnat
tantek__, note that this discovery was started for https://github.com/indieweb/indieauth/issues/23 which is about WordPress possibly opting to not parse h-app (or h-x-app) at all in the future.
#
Loqi
[Zegnat] #23 Client Information Discovery without relying on microformats parsers.
#
Zegnat
is also not a fan of -x-
#
Zegnat
Now dinner time :)
#
aaronpk
Dropping h-app would not be the worst thing
#
tantek__
aaronpk - yes if it is done halfway it fails, that's the point
#
tantek__
the point about using -x- is to allow more rapid active experimentation and following up with formalizing if it works
#
GWG
I will implement icon searching soon, as most pages have an icon for other reasons
#
aaronpk
my next goal with IndieAuth is to get just the client ID part written up as an i-d and proposed to the OAuth WG
#
aaronpk
and I’m a bit apprehensive of including microformats parsing in that proposal
#
tantek__
aaronpk yeah it makes sense to keep it minimal
#
aaronpk
somehow I suspect most of my target audience for this is not going to go for that, as demonstrated by this first occurrence in the Wordpress plugin
#
tantek__
aaronpk, or rather it demonstrates a good place for a modularity boundary
#
aaronpk
it’s enoguh of a mental leap to go from “you must register for an api key” to “you don’t need to register because everything is a url” and I don’t want to also throw in microformats into the mix
#
tantek__
so the "most of my target audience" can deal with just the one piece, and the folks that want the additional functionality can do so on top
#
Zegnat
GWG, if you could document how you plan to do the icon searching in the indieauth issue, I can include it in the table on the wiki
#
aaronpk
the trick is that client registration also provides a place to include the app name and icon
#
aaronpk
so I need to be able to replace that functionality
#
[kevinmarks]
reading the h-app it seems like fallbacks make sense for all 3 parts on a given url that is a web app
#
[kevinmarks]
url: fall back to url
#
tantek__
aaronp, web app manifest has this same problem / solution
#
[kevinmarks]
logo: fall back to icons
#
tantek__
ugh fall back to icons is very poorly defined
#
tantek__
that's even worse than asking someone to parse a microformat
#
[kevinmarks]
name: fall back to <title> or other metadata
#
tantek__
which icon? favicon? rel=icon? rel=appletouchblahresolutionxresolutiony
#
tantek__
kevinmarks, <title> doesn't work because it's already polluted with SEO site-specific stuff
#
tantek__
"New App: The best app for tootering"
#
aaronpk
That was my worry with title
#
[kevinmarks]
this is sounding like Dave justifying ogp
#
tantek__
yes kevinmarks, the existing metamess is what drove a lot of OGP
#
tantek__
which of course just added to XKCD 927
#
Zegnat
We considered OGP for app meta data too. It should all be captured in the spec issue I linked above :)
#
tantek__
There are n ways of doing meta tags for stuff. Let's add one more that makes it simpler. There are now n+1 ways.
#
Zegnat
If you would like to add your idea for fallback to html there, [kevinmarks], that would be much appreciated
#
tantek__
perhaps another reason to specify metaformats
#
[kevinmarks]
mf2 default is name/url/photo
#
tantek__
it would make it clear that "just use the meta tags" is not simpler than "parse microformats"
#
tantek__
aaronpk: your target audience also won't accept (will think it's ugly and bad) to reference rando meta tags, OGP, etc.
#
aaronpk
Yeah their first preference will be to have the client ID be a json document
#
tantek__
ironically they'd likely be ok with some made-up webfinger .well-known XRD XRDS hoohaa
#
aaronpk
with the openid connect metadata response
#
Zegnat
Parsing link elements may not be too big a leap for them yet though. So rel-icon might be easy to grok
#
tantek__
zegnat, name is a problem
#
Zegnat
I agree, name is a problem.
#
tantek__
title was a bad name itself because it was much more presentationally focused
#
Zegnat
I also shouldn't be eating soup while IRCing. Be back in a bit!
#
tantek__
wow that's a lot of unnecessary crap
#
aaronpk
Sure is
#
GWG
Likely looking for the icon properties in /icon
#
aaronpk
this is what I will be up against in October
#
tantek__
aaronpk, that's an i-d draft that's 4 years old
#
tantek__
so not a spec
#
aaronpk
It’s linked from openid.net tho lol
#
tantek__
not something IETF folks will take seriously tho
#
tantek__
unsubmitted i-d is frowned upon
#
[kevinmarks]
so see which fields actual implementations publish; thats a wishlist not a spec
#
tantek__
the ability to specify localized name of app is likely important
#
tantek__
kevinmarks, indeed, it's aspirational
#
aaronpk
I think openid connect officially publishes under their own org, not ietf
#
tantek__
but you're going to an IETF meeting right?
#
aaronpk
No, IIW
#
aaronpk
but all the OAuth IETF people will be there
#
tantek__
IETF people take IETF i-d more seriously than rando domain with proposals
#
[kevinmarks]
IIW is a good place to socialize specs certainly
#
aaronpk
I wonder how much of this I can write in the next 2 hours
#
aaronpk
need a name tho
#
[kevinmarks]
OpenAppID
#
[kevinmarks]
I was being facetious
#
tantek__
[kevinmarks]: based on what evidence of successful specs to come out of IIW socialization?
#
tantek__
kevinmarks++
#
Loqi
kevinmarks has 7 karma in this channel over the last year (30 in all channels)
#
tantek__
OpenAppID++
#
Loqi
OpenAppID has 1 karma over the last year
#
aaronpk
OAuth came out of IIW
#
[kevinmarks]
OAuth 1.0 had a lot of groundwork done at IIW
#
tantek__
no that's a myth. OAuth came out of a mailing list started by Blaine at Twitter
#
aaronpk
A lot of it was done at IIW regardless of where it started exactly
#
tantek__
the actual work was done by a small set of folks on a limited-write, public-readable mailing list
#
[kevinmarks]
yes, but getting the yahoo and Google people in the room with him at IIW really helped
#
tantek__
it was an interesting model of standards development by email
#
tantek__
OAuth did not "come out of" IIW
#
tantek__
that's the myth
#
[kevinmarks]
that helped get the mutual trust necessary to contribute to the mailing list
#
tantek__
it came out of a limited-write, publicly readable mailing list started by Blaine
#
[kevinmarks]
I didn't say that, I said "a good place to socialize specs"
#
tantek__
aaronpk said that
#
aaronpk
What I meant was OAuth would not have succeeded if it had not been discussed at IIW
#
[kevinmarks]
I dragged several google auth people across the street to IIW, then they joined the mailing list
#
[kevinmarks]
the real bonding experience was them hotpatching the spec and mitigating the replay attack at that foo camp
iDanoo0 joined the channel
#
tantek__
yes the Open Web Foo hotpatching of OAuth 1 to fix the security problems was key
#
aaronpk
I need a name that gets across that client registration is replaced by DNS
#
aaronpk
I would use “implicit client registration” if “implicit” didn’t already have existing meaning in OAuth
#
tantek__
"URL client registration" ?
#
[kevinmarks]
Zero Registration per ZeroConf
#
tantek__
or NoReg per NoSQL
#
tantek__
shortened to "NR"
#
tantek__
how do you handle client registration? we use NR for that
#
tantek__
"ZR" works just as well
#
sknebel
client lookup?
#
aaronpk
PKCE is a great name because it’s easily googleable and also pronounceable (pixie)
#
tantek__
aaronpk: Zero Registration shortened to: ZoRg
#
tantek__
all the Fifth Element fans will love it
#
aaronpk
zorg omg
[cleverdevil] joined the channel
[eddie] joined the channel
#
[eddie]
Just reading about the h-app, h-x-app stuff. I do have to say, while I’ve found Microformats to be extremely helpful in many cases, mf2 in the IndieAuth process is the biggest friction I’ve ever found. I wouldn’t be opposed to there being a different way to find client info from a url
#
[cleverdevil]
I put h-app on indiepaper, and it was pretty easy.
#
[eddie]
I mean parsing
#
[eddie]
Easy to add mf2 to an app’s page. But when writing IndieAuth client code, you either have to add an mf2 library just for that one step or roll your own just for the h-app stage which typically ends up buggy
#
[eddie]
It’s a good solution, I just mean that if there were a better solution, I would be all for it
#
tantek__
eddie, this is good feedback
#
tantek__
aaronpk, do you think you could make use of web app manifest instead?
#
aaronpk
the downside to web app manifest is it requires two http requests
#
tantek__
or rather, eddie, what would you think of IndieAuth client code having to consume a web app manifest instead?
#
aaronpk
one to the client ID page to find the link to the manifest, then fetch the manifest
#
tantek__
yeah, even if the rel was in the http header
#
[eddie]
hmm that’s a good question. I’ve never dealt with web app manifests, so I don’t know if that would be easier or more complicated.
#
tantek__
aaronpk: same problem with any separate JSON file though right?
#
tantek__
eddie, it's a w3c spec that's getting some uptake, so it's worth exploring as an alternative to h-app
#
aaronpk
tho 2 http requests might be easier to swallow than bringing in an mf2 parser
#
tantek__
especially for the dev-crowd that "just wants JSON"
#
[eddie]
ohhhh web app manifest is JSON? (just googled it)
#
[eddie]
That would be MUCH easier in my experience
#
tantek__
also using a w3c spec is way more legit than rando 4 year old oidc proposal
#
tantek__
eddie - good to know!
#
[eddie]
This is what we’re talking about, right? https://developer.mozilla.org/en-US/docs/Web/Manifest
#
aaronpk
it's not the indieauth client that consumes it, it's the authorization server
#
[eddie]
Yeah, that’s what I meant
#
tantek__
yes eddie that
#
tantek__
point being, re-using web manifest likely better than trying to reinvent that wheel, also a good defense against others reinventing that wheel
#
[eddie]
I do think that would be easier from my experience of working on my Auth Server
#
sknebel
as discussed above, kind of weird to use for non-web-apps though
#
tantek__
then we could backport that to an "h-manifest" if we wanted to provide a way to put it all on a page
#
tantek__
sknebel works fine for icon + name though right?
#
tantek__
what's weird about that?
#
tantek__
you can have a very minimal web manifest
#
aaronpk
would anything bad happen if the indigenous web page published a web manifest even though that web page itself is not an app?
#
aaronpk
that's what i'm concerned about
#
tantek__
"is not an app" [for now]
#
tantek__
remember when the instagram web page itself was not an app?
#
sknebel
the PWA installation process is likely only triggerable with further conditions met, even tho those aren't specced: https://www.w3.org/TR/appmanifest/#installability-signals
#
[eddie]
“related_applications” seems helpful
#
[kevinmarks]
You can publish a manifest whether you install a service worker or not, but it will be used for add to homescreen
#
tantek__
aaronpk, this is more than fine, this is a good thing. it likely encourages native apps to have web versions
#
aaronpk
the point is this *should not* trigger an add to home screen prompt because the web page is just a placeholder
#
tantek__
sknebel: lots about "PWA" is not specc'd. PWA is not a spec, it's a marketing term.
#
cleverdevil.io
edited /short-domains (+225) "/* io */"
(view diff)
#
[eddie]
I think I need to add a minimal manifest to Indigenous to test out 🤔
#
cleverdevil.io
edited /short-domains (+0) "/* io */"
(view diff)
#
[kevinmarks]
I don't think it will trigger a prompt without a service worker, but it will be used if you add it manually
#
[kevinmarks]
Which is a natural extension of "Tantek on my homescreen"
#
tantek__
kevinmarks "trigger a prompt" is very implementation specific
#
Zegnat
[eddie]: thanks for the update to the table. I thought I pulled the client IDs correctly straight from the GitHub repos... Don't actually have any of the clients installed to test.
#
tantek__
aaronpk, so.. ZoRg?
#
tantek__
what is Zero Registration?
#
Loqi
It looks like we don't have a page for "Zero Registration" yet. Would you like to create it? (Or just say "Zero Registration is ____", a sentence describing the term)
#
tantek__
aaronpk++
#
Loqi
aaronpk has 106 karma in this channel over the last year (312 in all channels)
#
aaronpk
i'm not totally sure it's gonna stay this way tho :)
#
tantek__
there's too much nerd appeal for it not to
#
tantek__
still, go head and define the wiki stub ^^^
#
tantek__
what is ZoRg
#
Loqi
It looks like we don't have a page for "ZoRg" yet. Would you like to create it? (Or just say "ZoRg is ____", a sentence describing the term)
#
loqi.me
created /ZoRg (+30) "prompted by tantek__ and redirect added by tantek__"
(view diff)
#
[eddie]
Zegnat: the client ids started as the root before I realized that ios and android needed different client ids, so I might not have the correct info everywhere
#
vilhalmer
I can't get over how good this bot is
#
[eddie]
If anyone has android and wants to see if Indigenous website with a basic webmanifest creates any strange prompts for “installing the web app”, I’ve added a manifest to the homepage: https://indigenous.abode.pub/ios/
#
[kevinmarks]
Loqi has learned a lot
#
Loqi
Indigenous for iOS
#
[kevinmarks]
gives loqi a pat on the head
#
Loqi
loves the pat on the head
#
[eddie]
No strange prompts on macOS Chrome and Safari, and iOS Chrome and Safari
#
sknebel
doesn't do anything on android either, neither prompts nor menu options
#
[eddie]
Sweet!
#
[eddie]
I put in name, icons, prefer_related_applications and related_applications. The last two aren’t required obviously, but helpful if browsers decide to use that to prompt for App Store links.
#
[eddie]
So tentatively seems like a viable consideration, tantek and aaronpk
#
[eddie]
[manton] Out of curiosity, if I remember correctly Micro.blog did not add the Client Information Discovery step into it’s IndieAuth (https://indieauth.spec.indieweb.org/#client-information-discovery) was that because of the complexity or just for lack of time? If the Client Information Discovery was a JSON file you could grab the url and parse, would you have been more likely to add it or would you still have delayed that implementation?
cottongin14 and [jgmac1106] joined the channel
#
tantek__
eddie, if we can get some adoption of indieauth+webmanifest working, then aaronpk can add it to ZoRg
#
tantek__
(just going to keep saying ZoRg like it's already a thing until it is)
#
tantek__
aaronpk, just practice saying it with straight face and you'll be good
#
[eddie]
Yeah, I figure before working on getting it working, it would be helpful to get feedback from someone like Manton that seems interested in IndieAuth but that didn’t implement the mf2 discovery
#
tantek__
eddie, good point. a quick impression from Manton woudl be helpful
#
Zegnat
goes to add rel-manifest info to the client information table
#
Zegnat
FWIW, I can totally see me implementing manifest data in Selfauth, but not bringing in an mf2 parser
#
aaronpk
that is worth something for sure
#
tantek__
might be worth some rapid iteration then
#
tantek__
if there's critical mass among folks in the indieauth ecosystem
#
tantek__
then relegate both h-x-app and h-app to optional backcompat (maybe even droppable once all those who publish also publish a webmanifest)
#
tantek__
thus concluding the experiment
#
Zegnat
uuh. aaronpk. indielogin.com already has a manifest, but it is a 404 xD https://indieweb.org/User:Vanderven.se_martijn/IndieAuth_Client_Information
#
tantek__
also if y'all have opinions about webmanifest please do share - I'm tangentially involved with that stuff at w3c and would appreciate improving it
#
tantek__
(i.e. while you're implementing webmanifest if thing seem difficult or weird)
#
Zegnat
tantek__, do you know what the official discovery process is for finding the manifest? I only recall some non-normative section about <link> elements.
#
tantek__
LMMDNTFY
#
aaronpk
Zegnat: weird! i wonder where that came from
#
aaronpk
ohh i think i copied some boilerplate icon stuff and forgot to finish
#
tantek__
aaronpk: also ^^^ that documenta some meta tag fallbacks in case you care - no need to make that up either
#
tantek__
documents*
#
Zegnat
Yeah, that’s the only part I saw in the spec. And was a little surprised that discovery was only covered by a single non-normative example in a non-normative “Usage Examples” chapter
#
Zegnat
Oh, its called obtaining?!
#
Zegnat
I totally missed that
#
Zegnat
sknebel++
#
Loqi
sknebel has 26 karma in this channel over the last year (79 in all channels)
#
tantek__
Zegnat it's pretty funny given how much detail e.g. Webmention has for link rel discovery, testing etc.
#
Zegnat
Yes. Because if you can’t figure out how to get at the thing, how will you ever use the thing?
#
Zegnat
Ooh. Got another hit for a manifest file on a micropub client! :D
renem joined the channel
#
loqi.me
created /pleroma (+150) "prompted by [kevinmarks] and dfn added by [kevinmarks]"
(view diff)
#
kaja.sknebel.net
edited /pleroma (+2) "linkify ('… is <url>' pattern)"
(view diff)
#
Zegnat
7/21 client pages have h-x-app. 7/21 also advertise a manifest file...
[manton] joined the channel
#
[manton]
[eddie] Just haven’t gotten to it yet, and no apps I tested with needed it.
#
Zegnat
So in the popularity contest, both are equal. Wow
#
Zegnat
Although not all manifest files might be correct. I haven’t checked the contents on all of them.
tantek__ joined the channel
#
[eddie]
Gotcha. Thanks for the response [manton] :thumbsup:
#
[eddie]
That is interesting, isn’t it, Zegnat! Like you said, they might not all be valid but its telling that there are already that many manifests available.
#
aaronpk
[manton]: which version of this sounds better for you to implement? Parsing for h-app microformats or making another http request to the app manifest and parsing that JSON?
#
Zegnat
[eddie], yeah, and some of them would totally work for our use! E.g. https://photo.postrchild.com/manifest.json
#
Zegnat
I don’t remember in which channel we had the multilingual-names discussion, but it is interesting that the HTML standard explicitly support multi-lingual application names: https://html.spec.whatwg.org/multipage/semantics.html#meta-application-name / cc. tantek__
#
tantek__
eddie, good point about not all might be valid. good opportunity to validate/lint h-app vs manifest?
#
tantek__
Zegnat yes that HTML spec for meta application-name predates webmanifest AFAIK, and note that web manifest uses it as fallback
#
Zegnat
5 of the manifest pages do not have h-app, so comparing is out, I’m afraid. But from what I have seen, h-app is usually correct, because the people who added it followed aaronpk’s examples to the tee
#
tantek__
zegnat so what of the two that have both? do they match?
#
Zegnat
Lets see!
#
tantek__
I'd be interested in figuring out if we should either keep h-app or make an h-manifest that just uses the same property names as webmanifest, and either way, create a generator so publishers could auto-generate their webmanifest JSON from the h-app / h-manifest
#
tantek__
if we can reduce side-file maintenance, we remove a source of errors
#
Zegnat
The Monocle manifest does not match, doesn’t include a name.
#
Zegnat
But this may be another accidental manifest added by aaronpk without meaning to
#
tantek__
but on the consuming side, if devs prefer to do the 2nd http request to get the JSON, then it makes sense to standardize on that as the interface
#
aaronpk
i will admit, i had no idea i was adding a web manifest to my apps
#
tantek__
so publishers can follow aaronpk's instructions and do the simple h-app / h-manifest thing, and consuming code can get their JSON
#
Zegnat
The other was Indigenous, and there the name and logo match between h-x-app and manifest
#
tantek__
you added a rel= link from copy paste or something?
#
aaronpk
it generates all the right sizes and tags and stuff that all the platforms need
#
aaronpk
i didn't realize it was adding a manifest file too
#
Zegnat
https://indieweb.org/User:Vanderven.se_martijn/IndieAuth_Client_Information - all the manifest checkmarks are links to the manifest files
#
aaronpk
Zegnat++
#
Loqi
Zegnat has 55 karma in this channel over the last year (143 in all channels)
#
Zegnat
[eddie], could you fix the content type on the manifest file to be application/manifest+json instead of application/octet-stream?
#
Zegnat
I want to see if Firefox then displays the JSON, instead of triggering an (annoying) download
#
Zegnat
I’ll document these manifest findings and IRC discussion on the GitHub issue as soon as I a fresh and cold cider at hand :)
#
GWG
Zegnat++
#
Loqi
Zegnat has 56 karma in this channel over the last year (144 in all channels)
#
Zegnat
GWG, any first thoughts on implementing getting the web manifest file and pulling the logo from there?
#
GWG
Not yet. I will see what I can do to start pulling something
ludovicchabant and renem_ joined the channel; ludovicchabant left the channel
#
[eddie]
Zegnat: Good question. Right now it’s just a static .webmanifest file. I guess I need to tell my nginx that .webmanifest files are application/manifest+json
#
[eddie]
Wow, that was incredibly easy
#
[eddie]
Alright, should be fixed now
#
Zegnat
Yes, awesome, now they just open in Firefox as perusable JSON rather than triggering a download! :D
[kevinmarks] joined the channel
#
Zegnat
Finished my cider, and finished updating the GitHub issue with basic minutes of this evening’s WAM discussion: https://github.com/indieweb/indieauth/issues/23#issuecomment-414152219
#
Loqi
[Zegnat] The table above has been updated with new statistics. This shows that `rel="manifest"` are equally as likely to be found on client pages as `h-x-app`. This Web App Manifests may be a more logical alternative than previously realised. Further devel...
#
Zegnat
Mostly because I myself find it easier to look at the github issue than go back and search through who said what on IRC
#
aaronpk
Zegnat++ amazing
TripFandango joined the channel
#
Zegnat
Now I have more pronoun stuff to document ... but am out of cider. This is a problem.
#
aaronpk
seems like there is an easy solution to that problem though
#
Zegnat
Not really, very few civil servants working at 22:00 to keep the liquor stores open :P
[jgmac1106], Guest43602, renem, sebsel, [pfefferle] and James_T0 joined the channel
#
Zegnat
Added a few more data points to the table. If anyone knows more places that will let you login with IndieAuth (to do anything!) please add them to the wiki table. Even if you don’t have time to document the rest, someone else can do that. Just collecting all the different client_id values is valuable!
#
Zegnat
Now I am calling it a night. Thanks for all the discussion everyone
#
@wp2static
With static sites allowing free and diverse hosting options and #webmentions as cross ecosystem pingbacks, it’s time to dust-off your old blog/personal site, comment out the #dancingbabies and own your own home on the net again. Web 1.0 Hyper Edition!
(twitter.com/_/status/1031289316608172032)
[stefp], snarfed, Lildirt and bradenslen joined the channel
#
sknebel
has anyone gone through the new twitter developer registration process?
#
sknebel
(mostly: do they approve random personal use cases?)
#
snarfed
sknebel: i've had app review(s) pending for...months now i think
#
Loqi
snarfed: Zegnat left you a message 12 hours, 31 minutes ago: No, my endpoint discovery code does not have integrated caching. That'll be up to the lib user.
#
sknebel
sigh. not surprised
#
snarfed
only one data point. and i haven't followed up
[grantcodes] joined the channel
#
[grantcodes]
Zegnat: Would be interesting to see the authors of those clients you have listed. It seems like the majority of people have more than one
pierte, ExeciN25, Freejack18 and KartikPrabhu joined the channel
#
GWG
Just finished the discussion on icons.
#
GWG
I seem to have started something new again
dimi34ka18 and mort6 joined the channel
#
loqi.me
created /Oath (+215) "prompted by tantek__ and dfn added by tantek__"
(view diff)
#
loqi.me
edited /Oath (+274) "tantek__ added "is also a chain of pizzerias in Boston (and likely surrounding areas) frequented by IndieWeb community members: https://twitter.com/benwerd/status/1031278121012678656" to "See Also""
(view diff)
#
loqi.me
created /application-name (+351) "prompted by tantek__ and dfn added by tantek__"
(view diff)
#
loqi.me
created /Web_App_Manifest (+216) "prompted by tantek__ and dfn added by tantek__"
(view diff)
#
kaja.sknebel.net
edited /Web_App_Manifest (+2) "linkify ('… is <url>' pattern)"
(view diff)
#
loqi.me
created /webmanifest (+29) "prompted by tantek__ and redirect added by tantek__"
(view diff)
#
loqi.me
created /WAM (+29) "prompted by tantek__ and redirect added by tantek__"
(view diff)