#dev 2019-05-02

2019-05-02 UTC
voxpelli, willnorris and KartikPrabhu joined the channel
#
@MeritzPress Where a flower blooms tonight, Devout and purple, With a rift for a hollow power, That shivers it springs from a root - from Pluck At The Offering, Barbarity. Free excerpts. Order at http://amzn.to/2CF8fts or kindle http://amzn.to/2CV3tw4 #literature #kindle #indieauth (twitter.com/_/status/1123779652185657346)
KartikPrabhu, snarfed, ichoquo0Aigh9ie, gRegorLove_, tbbrown, [Rose], [kevinmarks786], cweiske, swentel, [kevinmarks], [tantek], [jgmac1106], voss[m]1, jeremych-, strugee and Jeremycherfas joined the channel
#
GWG I have my aaronpk book in my suitcase for the trip
#
GWG Going to look for more Oauth2 stuff I could add to my IndieAuth code
#
Zegnat Did you add PKCE?
#
GWG Yup
#
Zegnat That is a nice one that has been on my list for forever.
#
GWG It was a few months ago, I think
#
GWG I had aaronpk check my work
#
GWG Found a minor bug in his code as a result.
#
GWG I forget the details, but my error somehow crashed his script
#
GWG I wonder if anyone needs the device flow
#
GWG I'll wait till someone does
#
GWG I am still experimenting with how to limit token permissions
#
Zegnat Sounds like you are ready to start rocking that OAuth badge, GWG
#
GWG Zegnat, there's a badge?
#
GWG I thought I was just gunning for the aaronpk seal of approval
#
Zegnat Physical one, yes. It is one of the 6 badges I was rocking last time in Berlin ;)
#
GWG I have my own badge
#
GWG I really want to build expiring tokens though, because I have 40 Quill tokens
#
GWG I store last accessed date so I could run a function to expire any token not used in X days
#
GWG I could also add to the authorize screen options to set longer lived tokens
#
Zegnat Ooh, I like the idea of expiring unused tokens
#
Zegnat Now I want to add that to Mintoken
#
GWG Glad to help
#
GWG In inspiring
#
Zegnat What is Mintoken?
#
Loqi Mintoken is minimal and self-hostable IndieAuth compatible Token Endpoint in PHP https://indieweb.org/Mintoken
#
Zegnat Mintoken << Todo: https://chat.indieweb.org/dev/2019-05-02/1556799454009900
#
Loqi ok, I added "Todo: https://chat.indieweb.org/dev/2019-05-02/1556799454009900" to a brand new "See Also" section of /Mintoken https://indieweb.org/wiki/index.php?diff=60392&oldid=47610
#
Loqi [GWG] I store last accessed date so I could run a function to expire any token not used in X days
#
GWG I would continue with my scope work at IWC, although not sure how you demo that
#
GWG So I need something that I can show people, even if it is only part of the day
#
Zegnat GWG: I am guessing sknebel will want to do some AutoAuth (name pending) work. Maybe you can find some inspiration there
[Rose], [jgmac1106], KartikPrabhu, snarfed, calumryan, calumryan_, [tantek], [calumryan], jackjamieson, tbbrown and chrisaldrich joined the channel
#
GWG Zegnat, perhaps. I have issues with WWW-Authenticate in WordPress I would need to address
gRegorLove_ joined the channel
#
GWG Do I adjust the password protected status, the private (hidden) status, or add a custom status?
#
GWG And if it is custom, what do I call it?
#
sknebel WP doesn't really have a notion of user accounts that are limited to reading some posts, right?
#
GWG No, but it supports that as an enhancement
#
GWG You can add the feature by adding a function
#
GWG sknebel, not as many multiuser Indieweb WordPress installs though
#
sknebel I don't know enough about how much that means.
#
GWG Most sites only have one user when it is being used for Indieweb
#
sknebel sure. question if it makes sense to model people with access to som protected pages as actual WP users, or as a different thing
#
sknebel sounds like the latter
#
GWG You can
#
GWG I have an idea of using the user table as a contacts list by creating users with no privileges
#
sknebel on the other hand, if actual users already gives you features like feeds comtaining their stuff etc
#
sknebel I should probably write out some possible features somewhere
#
GWG So, I could add a, for example, aaronpk user to my site, and when he authenticates with his site, it would let him into said account credentials to view the private post
#
GWG But nothing else
#
Loqi yea
#
sknebel sounds like a good avenue
#
sknebel if Wordpress allows restricting a user like that its good
[tantek], tglobe, tglobe_ and leg joined the channel
#
GWG It does, sknebel. Just has to be set up
eli_oat, gxt and [tantek] joined the channel
#
[tantek] figuring dev is the right place to talk cloud services
#
[tantek] what is aws
#
Loqi Amazon Web Services (commonly abbreviated to AWS) is a collection of remote computing services that together make up a cloud computing platform, offered over the Internet by Amazon https://indieweb.org/AWS
#
[tantek] AWS << Criticism: 2019-04-08 Gizmodo: [https://gizmodo.com/amazon-is-aggressively-pursuing-big-oil-as-it-stalls-ou-1833875828 Amazon Is Aggressively Pursuing Big Oil as It Stalls Out on Clean Energy] <blockquote>Google officially hit its target of powering its operations with 100 percent clean energy in early 2018. So did Apple. Facebook says it will get there by 2020. Microsoft’s progress has been slower, but in 2018, it signed what was hera
#
[tantek] corporate solar agreement in the U.S. Amazon appears to be the only major tech company so dramatically stalling out in its pursuit of renewables.</blockquote>
#
Loqi ok, I added "Criticism: 2019-04-08 Gizmodo: [https://gizmodo.com/amazon-is-aggressively-pursuing-big-oil-as-it-stalls-ou-1833875828 Amazon Is Aggressively Pursuing Big Oil as It Stalls Out on Clean Energy] <blockquote>Google officially hit its target of powering its operations with 100 percent clean energy in early 2018. So did Apple. Facebook says it will get there by 2020. Microsoft’s progress has been slower, but in 2018, it signed what was hera" to the "See Also" section of /Amazon_Web_Services https://indieweb.org/wiki/index.php?diff=60413&oldid=48831
neoaboriginal1 joined the channel
#
[tantek] likes << 2019-05-01 Washington Post: [https://www.washingtonpost.com/technology/2019/05/01/heres-why-instagram-is-going-hide-your-likes/ Here’s why Instagram is going to hide your ‘likes’] <blockquote>Instagram will test hiding the number of likes and views that photos and videos receive — a central aspect of its platform — to rein in competitive tendencies and make the experience a little “less pressurized.”</blockquote>
#
Loqi ok, I added "2019-05-01 Washington Post: [https://www.washingtonpost.com/technology/2019/05/01/heres-why-instagram-is-going-hide-your-likes/ Here’s why Instagram is going to hide your ‘likes’] <blockquote>Instagram will test hiding the number of likes and views that photos and videos receive — a central aspect of its platform — to rein in competitive tendencies and make the experience a little “less pressurized.”</blockquote>" to the "See Also" section of /likes https://indieweb.org/wiki/index.php?diff=60415&oldid=56030
[Rose] joined the channel
#
gRegorLove [tantek], I just tried the IG bookmarklet. Got JS error `Uncaught TypeError: Cannot read property 'innerText' of undefined`
#
gRegorLove The "for plain text" version
#
[tantek] sigh
#
[tantek] well let's deprecate it (noting that error) for now then until we've had a chance to fix it
#
[tantek] which browser btw?
#
gRegorLove Chrome 74
[cleverdevil] joined the channel
#
gRegorLove Looks like no more <h1> on the permalink
#
[tantek] ah yes that kind of breakage
[calumryan] joined the channel
#
GWG Why don't IndieAuth clients refuse to connect to sites not using TLS?
[JuJu] and gxt joined the channel
#
sknebel GWG: I'd assume something along the lines of "IndieAuth is older than really widespread availability of HTTPS", and think it makes sense for it to be a choice for individual use cases. E.g. with a micropub client, the user is the one making the choice to run it despite not having TLS - an attacker gains little from tricking a micropub client into believing they're someone else. For a service signup, that's different
#
GWG It's in the Oauth2 recommendation that you reject non TLS connection
[schmarty] joined the channel
#
sknebel makes total sense
#
GWG Wondering if I should do it
snarfed, chrisaldrich, [manton], BenLubar and KartikPrabhu joined the channel