2018-09-26 UTC
# 00:06 tantek__ has so many things he'd like to hack on before getting on a plane to IWC NYC but has so many other things to do before getting on that plane :/ banym1, xPaw11, iasai, teatime0727, TheWolf25, [dave], [Khurt], tonyt17, zonum5, g0722, bjorn`8, chainsol21 and renem joined the channel
Kralle16, axxis27, snarfed, raktajino25, Brend14, wamaral17 and miz-21 joined the channel
tantek, jgriffith16, mlt-, the_merlin, Reception12323, Loetmichel17, Alvaros, migmeneses21 and snarfed joined the channel
snarfed joined the channel
# 03:00 aaronpk I typed "@OAuth2" which is my preferred nickname, my website links that to oauth.net, and when it tweets it converts it to "@oauth_2" which is the twitter username WebDawgII joined the channel
# 03:02 aaronpk now to add the preparty bar to my nicknames cache so i can do the same for that # 03:06 tantek__ jacky lol I didn't realize how big my contact card was over there haha # 03:10 aaronpk now i want my event posts to be able to link to a contact from my nicknames cache # 03:11 tantek__ I have a small venue cache that converts venue URL <-> twitter profile URL lorenzh12 and KidReese777 joined the channel
# 03:28 aaronpk hmm i should try out cleverdevil's indie buffer thing brewster1 joined the channel
[jgmac1106] joined the channel
snickers and tantek joined the channel
# 03:49 aaronpk hm futurepub isn't working with the test i'm giving it snarfed, tantek and wt0f joined the channel
xand18, beardo5, lkwan-, tantek, avieks25, nahamu5 and [dave] joined the channel
bengt__, [Rose], cweiske, BOKALDO, deanforbes__, jamesd27, Chex22, minion2, da2ce74, systemdP-, mlg900016, swentel, surrealpie16, jeremych_, fatalis22, [kevinmarks], up2late, Blossy20, modster9, wolkihermione_, mikeplus6420, NoobsE, ricus16, teto1, c0ncealed2, Guest65038, eGetin17, OS-29271, jrl3, Tw|tch12, daviddias10, xniega15, JACTRFR26, calbers10, n3glv27, sarnold28, altendky15, nirved, lerc7, opqdonut13, Maescool5, Guest65473, marahin15 and [eddie] joined the channel
# 09:39 [eddie] I love working copy. My only issue is I feel like I don’t often have the other tools I need to really make use of the git client. 😆 dustinm joined the channel
Drajwer17 joined the channel
# 10:03 [eddie] Working Copy is an iOS for client. Source Tree is pretty good for computers, I’ve used that in the past # 10:04 [eddie] I hope Wavelength supports generic Micropub in the not too distant future because I’d love to use FuturePub to pre-publish Microcast episodes! Guest43994 joined the channel
# 10:04 [eddie] Instead I prepped everything last night and have a reminder that will pop up on my phone later today to remind me to post my Microcast xkr4728, barpthewire, vincian1, sparty_22, darkmage11, salasrod6, demure16, bitonic5, nyloc21 and [kevinmarks] joined the channel
Chon_Lee28, maugha, Axman623 and karalaine17 joined the channel
# 10:58 sknebel jacky: shouldn't it be application/json if it's JSON, not text/plain? or did that not work for some reason? # 11:00 sknebel although it is weird, quill should work according to spec... # 11:00 jacky going to add passwordless login tomorrow evening # 11:00 cweiske which part of the setup didn't like the mime type? # 11:01 cweiske so it's something you can fix in your server software? [jgmac1106] joined the channel
# 11:03 sknebel huh, but JSON based should have worked too. or am I misunderstanding what the problem was? # 11:04 jacky I'm going to write some tests over the weekend # 11:04 cweiske maybe put_resp_content_type forces the output to be converted to JSON automatically # 11:06 cweiske "Now guess what happens? People use the HTML templating engine to generate JSON that breaks at the first character that needs to be escaped." # 11:07 cweiske and I guess that quill defaults to parsing content as form-encoded # 11:08 cweiske my strong guess is that your json output simply was broken, double encoded akfarrell25 joined the channel
# 11:10 cweiske sknebel, I guess that this "put_format(json)" means that it automatically sends json # 11:10 sknebel which supports cweiske's theory that the JSON was defective # 11:10 cweiske (note that I don't know anything about the language used there, nor the libraries) compnerd, MaryHadalittle23, squeakytoy2, jd_27, muffindrake11, fikka, paccer22, fnordbar28, the_rat7, MajObviousman20, maiki15, potatoworld29, Gnarfoz27, JWU420, [tantek], [jgmac1106], jungkees, Guest76620, jotton, ObsidianX and ar|elo23 joined the channel
xinming_, meldron12, pandzilla, esrax, [kevinmarks], rwp1, norg13, lays14710, jotton, htols6, hexchain17, snarfed, asm8920, Guest13627, mhache25, Kagee20, immediateVeto16, plutes, Guest68288, aya8, fuchstronaut28, jmac, KidReese777, pmbauer_, StarlitGhost2, utaal12, [jgmac1106], Soqaris, marcus_27, creatoon2, vandemar19, stephank18 and barpthewire joined the channel
iasai joined the channel
# 15:04 aaronpk i don't think i'm ready to open source the whole thing, but maybe... let me check # 15:05 aaronpk oh wait, no the one that does replies definitely not # 15:06 swentel i'm interested in how the object looks like, tested so many variations now and nothing comes through [manton] joined the channel
# 15:06 aaronpk the "to" property includes both "https://www.w3.org/ns/activitystreams#Public" as well as the URL of the person i'm replying to # 15:09 aaronpk there is also a Mention in the tags array of the object # 15:10 aaronpk attributedTo in the Object is my URL, and actor of the Create is my URL # 15:10 aaronpk the other thing i wasn't sure about was which URL I use for inReplyTo and such, let me check # 15:11 Loqi [swentel] Testing federation via Bridgy-fed! # 15:13 aaronpk ok i'm using the "https://mastodon.social/users/{username}" version of the actor URL # 15:14 aaronpk which is the "url" rather than "id" when you query the post permalink # 15:15 aaronpk now that i think about it, that doesn't actually make sense, but it seems to work # 15:16 aaronpk oh i would drop the "name" property from your json too # 15:18 aaronpk i thought bridgy fed already supported sending replies? # 15:18 aaronpk i did get follow/accept stuff working in a thing that i can open source # 15:21 aaronpk but if you click the post in mastodon it should show up in the replies even if the user doesn't follow you IIRC # 15:25 aaronpk part of me wants to finish up this proxy i am using and make it available to people, another part of me doesn't want to have to deal with support :) bobdobbs joined the channel
# 15:27 aaronpk so what i have working right now is a little proxy app that has a micropub endpoint, and if you send a post to it it will deliver that post to all your activitypub followers. it will auto-accept any follow requests and send back the reply. it is also designed to let you use your own domain as the identity of the actor as well as permalinks and just use this for transport jackjamieson, zbenjamin15 and luisjose4 joined the channel
# 15:43 Loqi [swentel] Testing federation via Bridgy-fed! # 15:43 aaronpk i think i log all the outgoing json, let me check # 15:47 aaronpk my mastodon.social account isn't following you either, but i do see the reply when i click on my profile in the mastodon UI Jmabsd joined the channel
StephenS3 joined the channel
# 15:51 aaronpk like reply to my test post the way you'd reply to any AP post # 15:52 aaronpk it should end up sending to my inbox on aaronparecki.com Guest55352 joined the channel
# 16:01 aaronpk oh i meant reply from bridgy fed, that's just a mastodon reply ljhms joined the channel
snarfed joined the channel
# 16:15 swentel snarfed, mastodon verifies the id of the object with the actor # 16:16 snarfed swentel: hrm. wait, it checks the host of the...HTTP client? via reverse DNS or something?! # 16:17 aaronpk no host of the actor has to match host of the post's id # 16:17 aaronpk yes if you can serve your post objects from your domain # 16:18 snarfed but no, ideally bridgy fed shouldn't have to proxy content pages # 16:18 snarfed oh sure, but it should still generate ids with users' domains, not its own # 16:18 snarfed swentel: does bridgy fed really generate any AS2 ids anywhere based on fed.brid.gy? hopefully not # 16:18 aaronpk but that post ID has to actually resolve to the AP object SotK2 joined the channel
# 16:19 snarfed right and hopefully if all the redirects are working, it can? # 16:19 snarfed most of this is swapped out of my head, i'd have to go dive back in to fully remember and understand NV28 and DeMiNe0_ joined the channel
# 16:22 aaronpk it would have to redirect only for html accept headers # 16:22 aaronpk since mastodon will go fetch that URL and expects json # 16:23 snarfed ugh AP federation via proxy like this is so complicated # 16:23 aaronpk so either that, or you do it the other way and tell people to set up a redirect URL pattern from their AP IDs to bridgy fed # 16:23 snarfed almost as complicated as silo wm proxying i guess :P # 16:24 snarfed aaronpk: which may actually be reasonable, since it bridgy fed mints AP ids, it could use a single redirect url, even inside .well-known/ and just vary query params, which should be easy for most people to redirect # 16:24 aaronpk haha you could totally have the post ID be under .well-known # 16:24 aaronpk i made my actor URL under .well-known so that i could combine the actor URL and webfinger response into the same file # 16:24 snarfed anyway i only remember/understand maybe 1/2 of this right now, but swentel if you want to file an issue or even send a rough draft PR with a proposal, i'd be eternally grateful! # 16:25 snarfed man now i wonder when this changed in mastodon. since bridgy fed used to be able to federate replies etc into it, via both salmon and then AP, without this id munging # 16:26 aaronpk it may have been taking advantage of a security loophole... jemarch10 joined the channel
# 16:27 aaronpk cause you could spoof replies from other people otherwise # 16:28 aaronpk it's the same thing that lets bridgy report twitter replies with a url on twitter.com when the webmention is actualy from bridgy's domain # 16:28 aaronpk just that nobody actually rejects those right now # 16:28 aaronpk which is going to be a problem as soon as someone figures out they can spoof replies via webmention... # 16:34 sknebel aaronpk: wouldn't the signature stuff prevent spoofing in the AP case? # 16:36 sknebel swentel: you have the location where mastodon makes that check at hand? ramses26, jgmac1106, braack23, cox_douglas28 and iasai joined the channel
tantek__ joined the channel
# 17:00 Loqi [Gargron] #6219 Fix bad URL schemes being accepted [jgmac1106] joined the channel
# 17:09 snarfed agreed. plus, for federation, fetching webfinger and /.well-known/ * on the users' (and posts') domain demonstrates ownership of the domain, which means bridgy fed is a proxy and not "spoofing" [dougbeal] joined the channel
# 17:10 snarfed (although that starts to get into semantics, that way lie dragons, etc) # 17:15 Loqi swentel has 8 karma in this channel over the last year (17 in all channels) # 17:15 GWG snarfed, I am taking your adage bridge all the things as a philosophy. kremlin20 joined the channel
snarfed joined the channel
# 17:17 GWG I realized that what you do and what I believe are aligned feyo5 joined the channel
# 17:20 GWG You created Bridgy, Granary etc to convert different data formats into a common one # 17:20 Loqi swentel has 9 karma in this channel over the last year (18 in all channels) # 17:20 snarfed GWG: right, i'm familiar. :P what do *you* want to bridge? eq_826 joined the channel
# 17:21 GWG I just turned my ogp to mf2 code into a more portable form # 17:22 GWG I toyed with json-ld, but not sure if it is worth my time # 17:23 GWG I use it to generate link previews and jackjamieson is using it for his Microsub project, so worth fixing up demonbane8 joined the channel
# 17:25 GWG Although it does have an endpoint for sending in a url and getting back jf2 # 17:28 GWG snarfed, just telling you that you inspired me. # 17:29 snarfed lots of people use granary via its REST API from all different languages # 17:29 Loqi GWG has 38 karma in this channel over the last year (158 in all channels) # 17:29 GWG snarfed, I am basically writing something parallel to Granary but built into my site. # 17:30 snarfed right...and my point is, you can go to all that effort to duplicate the work in granary, or you could reuse it with HTTP requests and a lot less effort (but a bit more latency) # 17:31 GWG I am not doing exactly the same formats. # 17:31 snarfed that can be a good reason to write code, in fun personal projects at least # 17:32 GWG I have a lot of dreams this is driving streptokok joined the channel
# 17:33 GWG I see after 4 years a convergence of everything I wanted when I joined up # 17:33 snarfed i definitely expect to update bridgy fed to incorporate this. i'd very happily accept PR(s) if you're interested! especially since you're very familiar with it now # 17:40 snarfed swentel: heh understood. you mean switching from Authorization header to Signature header? or generating it at all? Moriarty-22 joined the channel
lroe5 joined the channel
# 17:42 snarfed yes! mastodon AP always required signatures. i think bridgy fed just sends them in the Authorization header right now havok88 joined the channel
jgmac1106 and Lacriatch10 joined the channel
# 17:43 swentel hmm, because I remember when trying locally I could never authenticate # 17:43 Loqi [snarfed] #9 support 'Signature' HTTP header? # 17:44 snarfed right, if mastodon switched to expecting it in the HTTP Signature header instead of Authorization, we'd need to make that switch. details in the issue above ^ # 17:46 sknebel might be worth taking that domain comparison up with them or the socialCG then, and get the check removed if people agree that it isn't really a security issue? M5M4008, hakril12, precise|pedant, inovas24, renem, kbarton3, [kevinmarks], swentel, Bodenhaltung10, tantek, Pierrick_B20, styles8, mrwooster22 and varshitbhat joined the channel
# 18:38 aaronpk swentel: yes when I post a new note i loop through all my followers and deliver to their inboxes jesyspa9 joined the channel
# 18:39 tantek__ aaronpk do you have data on that delivery loop you can share? how many servers you're up to, how long it takes? etc. Jeruvy26 joined the channel
# 18:39 aaronpk Which I know because my background script timeout is a minute and it started throwing errors # 18:40 tantek__ aaronpk: you're currently the only one there so it's kinda up to your opinion # 18:40 aaronpk Some servers inboxes like mastodon.social are really slow, but the small instances respond pretty quick # 18:41 tantek__ might be worth adding notes about that to your IndieWeb Example entry there # 18:41 aaronpk Mastodon IndieWeb examples would be people running a mastodon instance on their own domain i guess # 18:41 tantek__ we should add Bridgy Fed there - at least in a "Service Examples" section n3ob17 joined the channel
# 18:42 tantek__ aaronpk - yeah! We could add indieweb.me there - xtof's server 😂 bleepy11 joined the channel
# 18:42 [jgmac1106] I don't even really know what [jgmac1106]@jgregorymcverry.com is or what happens when people follow that account or reply to that account tbh dfee, Kiruwa_ and snarfed joined the channel
# 18:58 snarfed heh. if we go that way, we'd need to document heavily, and be ready to change our code again when they inevitably break the trick # 18:58 sknebel try talking to them? the AP stuff is in flux enough that should have a chance # 18:58 jgmac1106 what did Firefox do that broke so many of my bookmarklets? # 18:59 jgmac1106 I have been able to figure out the Press This but I find myself toggiling back to Chrome all the time now to use bookmarklets I rely on verax_work_ joined the channel
ackk6 and kiltzman13 joined the channel
# 19:03 Zegnat bookmarklets come and go depending on what the most recent sandboxing implementation of a browser does Acrisor, EvilWerezombie4 and odify28 joined the channel
[tantek], barpthewire, unixman18, dh9, zyk14, KartikPrabhu, tris6, snarfed, davean29 and Guest99409 joined the channel
sash_14 joined the channel
[kevinmarks], rha10, Santhosh_m9022, neferty16 and jgmac1106 joined the channel
her01 joined the channel
# 20:20 tantek__ [jgmac1106]: hey now, some of us over 35 and have very little clue about Ruby # 20:20 tantek__ swentel: best bet is checking the /Ruby page, and latest commits to the Ruby microformats parser plasmid joined the channel
[schmarty] joined the channel
# 20:29 sknebel swentel: this about the code links you posted in the bridgy fed issue? rigid5 joined the channel
# 20:33 rigid5 any time before booting # 20:38 [jgmac1106] @swentel lemme guess you ran into cert issues when trying to connect to rubygems.org? # 20:40 [jgmac1106] cool, took me forever to resolve cert issues when getting Ruby running locally Getafix7421 joined the channel
# 21:00 Getafix7421 you want maximum return on investment # 21:00 Getafix7421 apart from that, it's a toy # 21:00 Getafix7421 or some more examples Benzi-Junior12 joined the channel
# 21:06 Benzi-Junior12 visually select? # 21:06 Benzi-Junior12 laptop mode uwu clintpatty joined the channel
# 21:20 [jgmac1106] sad part is somebody's child had to decide I will find my purpose spamming the eight people still left on IRC dewbieZ, [dave], snarfed and [eddie] joined the channel
# 22:20 Loqi Ok, I'll tell them that when I see them next [tantek], [jgmac1106], [eddie], [dougbeal] and tantek__ joined the channel
loqi.me created /event_calendar (+19) "prompted by tantek__ and redirect added by tantek__" (view diff)
Loqi scheduling in the context of the indieweb, refers to the feature of setting a specific time for a post to be published in the future https://indieweb.org/scheduled
gRegorLove Hiya [dave] o/
[kevinmarks] Keynote is trying to open my ssl key files
@vincentlistens Watching the PESOS and backfeed working in harmony on my website makes me happy. Once I’ve implemented webmention replies I’ll nearly be done ☺️ #indieweb (twitter.com/_/status/1044929312091230209)
aaronpk cause mastodon has the web URLs like @username/id but also the /users/username/id version
swentel hmm yeah, I'm testing with https://mastodon.social/users/swentel/statuses/100776214865184909 now for instance
snarfed agreed. plus, for federation, fetching webfinger and /.well-known/* on the users' (and posts') domain demonstrates ownership of the domain, which means bridgy fed is a proxy and not "spoofing"
[jgmac1106] I don't even really know what [jgmac1106]@jgregorymcverry.com is or what happens when people follow that account or reply to that account tbh
tantek__ !tell jacky hey add yourself to /chat-names so your icon shows up in logs!
tantek.com edited /Falcon (+287) "re-prioritize better post creation UI, document undo-enabled publishing user flow before implementing" (view diff)