#dev 2019-07-26

2019-07-26 UTC
gRegorLove, [Michael_Beckwit, [Rose], jjuran, [schmarty] and [tantek] joined the channel
#
@grapswiz “Automate your outgoing webmentions” https://htn.to/wuxCVvpJEd (twitter.com/_/status/1154627210583535617)
#
@grapswiz Webmention 楽しそうやな (twitter.com/_/status/1154627516692226048)
[Rose], [Michael_Beckwit, KYZITEMELOS93[m], KartikPrabhu, [Tobias_Ljungstr, [grantcodes], jgmac1106, [jgmac1106], [schmarty] and testin joined the channel
#
sknebel GWG there is the hreflang attribute you can e.g. use on rel="alternate" links to point to other language versions of the same page
#
GWG sknebel: Do we have a list of Indieweb community members who publish alternate language versions for me to test on?
#
GWG That was sort of what I was looking for.
#
GWG Real life examples.
[tantek] and jklepatch[m] joined the channel
#
sknebel Ah
#
sknebel I'm working on it, but not yet
#
GWG sknebel: If you do this...can you drop me a note and add to /languages?
#
GWG I'd like to see how it would work
#
sknebel Sure, will try
#
GWG No rush obviously
#
@TurnWrightHere I'm trying to get Webmentions working on my site. Could I ask some of you to reply to this tweet so I can test something out? https://www.turnwrighthere.com/blog/balloon-race-2018/ (twitter.com/_/status/1154784682900381697)
linarcx[m], gRegorLove and jeremych_ joined the channel
#
@CCSDayton One of today’s projects is a big sound upgrade for this classic ride! The team at our WC store is installing a complete new system in this #Chevrolet #ElCamino, including an @AlpineUSA receiver, Alpine speakers, @JLAudio speakers, a JL Audio amplifier, and a JL Audio Microsub+! (twitter.com/_/status/1154813050492506113)
#
@sl007 ↩️ depending on what you need exactly at least these can save some work https://activitypub.actor https://fed.brid.gy https://brid.gy (twitter.com/_/status/1154814407651856384)
[snarfed] joined the channel
#
[snarfed] ooh interesting ^ https://activitypub.actor/ . evidently only supports twitter, but still
#
[tantek] I should put a microsub in my car too
#
[snarfed] ah not so interesting after all. home page shows inbox/outbox, which implies it's a bridge, but https://twitter.activitypub.actor/schnarfed/json doesn't have inbox/outbox and says "You can't interact with it or follow it." ah well.
#
aaronpk What does it do?
#
Loqi yea
#
[snarfed] guess it just converts the profile to AS2
#
aaronpk Huh, why?
#
[snarfed] maybe it's still in progress? lots of UI polish relative to the actual functionality though. shrug
#
aaronpk It's the only one marked as not in progress tho heh
#
[snarfed] heh it does say beta, but still should mean full ish functionality. meh
#
[snarfed] author is https://mastodon.xyz/@David
[grantcodes] joined the channel
#
[grantcodes] I had an interesting glance into what makes up a node micropub endpoint https://github.com/grantcodes/future-micropub-endpoint/issues/2#issuecomment-515561111
M[AXEL]Julian[m] joined the channel
#
aaronpk Whoa you found 4?
#
[grantcodes] There's more, but the others extend voxpellis library
#
[grantcodes] There are 3 - 5 more mentioned in the inspiration issue
#
aaronpk Nice
leg, [pfefferle], [tantek] and [jgarber] joined the channel
#
[jgarber] 👋 Hello, all!
#
[jgarber] What’s the room’s take on clients registering/advertising redirect URLs regardless of whether the URL is on the same domain or not?
#
[jgarber] See: https://indieauth.spec.indieweb.org/#redirect-url
#
[jgarber] > The client SHOULD publish one or more <link> tags or Link HTTP headers with a rel attribute of redirect_uri at the client_id URL.
#
[jgarber] > Authorization endpoints verifying that a redirect_uri is allowed for use by a client MUST look for an exact match of the given redirect_uri in the request against the list of redirect_uris discovered after resolving any relative URLs.
#
[jgarber] >
#
aaronpk Doesn't need to be same domain which is one way to redirect to native apps
#
aaronpk Just needs to be exact url matching
#
[jgarber] Correct.
#
[jgarber] The question is more in the vein of… Who’s advertising redirect URLs regardless of whether those URLs are on the client domain, a different domain, or are to native apps, etc. ?
#
[jgarber] * advertising/registering via `Link` header or `<link>` element, that is.
#
aaronpk I don't understand the question
#
aaronpk it's on the client id URL
#
[jgarber] More directly then: Do your clients/websites/what-have-you advertise/register valid redirect URLs using either a `Link` HTTP header or `<link>` elements?
#
aaronpk I believe ive only done it via HTML
#
[jgarber] Gathering some data points: indieauth.com does. indielogin.com does not. aperture.p3k.io and monocle.p3k.io do not either.
#
[jgarber] My own website does: sixtwothree.org
#
aaronpk Relatedly, there's some new work in the OAuth group that has the potential to make a lot of this easier
#
[jgarber] I’m listening… 😄
#
[jgarber] FWIW, I really like the redirect URL registration and halfway wish it were a requirement.
#
aaronpk it's likely that the Financial API group's extension for Pushed Request Objects will be adopted by the group
#
aaronpk which is a fancy bunch of words
#
[jgarber] Correct!
#
[jgarber] The :face_with_monocle: -iest of words.
#
aaronpk but what it means is it fundamentally changes how the flow is started and simplifies things for us quite a bit
#
aaronpk short version typed out on my phone...:
#
aaronpk imagine instead of building a URL that you send the user to with the client_id and redirect_uri etc, instead you first post all that data to the auth server and get back a short string that you send the user to
#
[jgarber] > a short string that you send the user to
#
[jgarber] So not a URL?
#
aaronpk Er, a short string that you then append to the auth server URL
#
[jgarber] Oh, hah! Okay, so a timeboxed URL?
#
aaronpk so it's like POST, response contains request_id=1234, then you send the user to authz.example/auth?request_id=1234
#
[jgarber] yep yep yep
#
[jgarber] Approved. Ship it.
#
[jgarber] And the client server is responsible for handling errors from that initial behind-the-scenes POST?
#
[jgarber] Rather than the user getting bounced around?
#
aaronpk Yeah
#
aaronpk I added this to an IndieAuth server last year as a test and it was a really easy change to make to the server code too
#
[jgarber] Is that code reviewable somewhere? Curious to see the diff.
#
aaronpk Hm I don't actually know
#
aaronpk it was just a little throwaway test to see how easy it was
#
[jgarber] Not 100% sure how different this would be for users in a Web browser, but I can envision how it’d be a smoother experience for native apps…
#
[jgarber] Ah, gotcha. No worries!
#
[jgarber] The redirect to a “cleaner” URL is a nice enhancement, but effectively the same work is happening. If I’m understanding everything correctly.
KartikPrabhu joined the channel
#
aaronpk Yeah, it's a small addition to OAuth
#
[jgarber] Though I suppose it’d also clean up some work on the auth server side.
#
aaronpk and already vetted by other groups so it's likely to go thru pretty quick, like 6 months or so
#
aaronpk yeah actually most of the changes were ripping out error handling code from the auth server lol
#
[jgarber] Light speed for standards! 😄
#
[jgarber] I’ve been writing my fair share of that this week.
#
[jgarber] So, _much appreciated_. 😂
#
aaronpk there's a much bigger change to OAuth that's (probably) coming, which would also mean we'd be able to make IndieAuth a subset of OAuth instead of an extension
#
aaronpk but that one is early in the lifecycle and isn't yet officially adopted by the group
#
[jgarber] Def. interested in learning more about that.
#
aaronpk Initial writeup is at https://OAuth.xyz
#
[jgarber] Nice, thanks!
#
[jgarber] I’ll admit to remaining pretty confused by aspects of the OAuth/IndieAuth flow as I work on building an auth/token endpoint for my own use. So anything that cleans up the concepts and makes implementation simpler would be a win.
#
aaronpk Plus my proposal to add user identity https://aaronparecki.com/2019/07/18/17/adding-identity-to-xyz
#
Loqi [Aaron Parecki] Adding Identity to OAuth XYZ
#
[jgarber] Oooh, this is good. :thumbsup::skin-tone-2:
#
[jgarber] aaronpk++
#
Loqi aaronpk has 47 karma in this channel over the last year (224 in all channels)
#
aaronpk Anyway I'm probably gonna try building out an IndieAuth server in the XYZ framework as a prototype, because I want to make sure whatever happens with that spec it's usable for us
#
[jgarber] Looking forward to that. Happy to help test when the time comes.
#
aaronpk Cool, it'd be great to have help testing from a mobile client!
#
[grantcodes] Sounds like an evil plan to infect something much bigger with just a little bit of indieweb
#
[grantcodes] Then wait until it takes over the world!
#
aaronpk hahaha
#
Loqi aaronpk: lol
#
aaronpk I mean you're not entirely wrong :-D
[miklb] joined the channel
#
[miklb] 👋
#
aaronpk 👋
#
[miklb] so my dilemma right now is I’m pretty much ready to switch back to jekyll/static but not sure what to use these days for indieauth/micropub. I’m excited to see the discussion kick back off in [grantcodes] repo so don’t want to paint myself into a corner.
#
[grantcodes] It's a tough dilemma [miklb]
[Michael_Beckwit joined the channel
#
[miklb] indeed
#
[miklb] in the meantime, I’ve managed to lock myself out from .dev domains from my previous use of it locally. dnsmasq is off, all certs removed, nothing in /etc/hosts
#
[miklb] lol
#
jacky lots of scrollback!
#
[grantcodes] [miklb] how would you want to handle your backend part? Use it to create markdown files in your repo or create a db that you can query at build time?
#
[miklb] markdown files
#
[miklb] maybe just because I have a whole bunch of content in a database right now that I won’t easily be able to get back outside of WordPress due to some design decisions.
#
[grantcodes] Then *never* having used anything like that I'd say indiekit looks really well built
#
[miklb] design decisions on the IndieWeb WP side, specifically storing serialized arrays
#
[grantcodes] pretty sure that's just how wp works in generarl
#
[grantcodes] *general
#
[miklb] I can get the rest out as yaml front matter, but one major section of my IW stuff is still serialized. I tried to untangle it, but to no avail. Not a big deal for now, but just why I’m gun shy of another db at this time.
#
[miklb] but IndieKit is where I’m leaning simply because [Paul_Robert Lloyd] is actively working on it and jumping into the new conversation. Should help me get more familiar with the inner workings and help test, etc.
#
[grantcodes] hmm what part is serialized? The meta data that is not default to wordpress?
#
[grantcodes] I am sure it gwg, myself or someone else could make something to export everything from workpress as mf2 json
#
[miklb] I’d have to look again. I’d mentioned it before to GWG but didn’t seem like it was of interest. As I said, I was able to export all of my other post_meta to YAML front matter except a few big pieces of the IW plugins stuff. A little ironic though that there isn’t better data portability for an IndieWeb project.
#
[grantcodes] Selfdogfooding is kind of antithetical to exporting 🤷‍♂️
#
KartikPrabhu not sure that is true