uniquerockrz joined the channel; GWG_ left the channel
#mblaneyaaronpk I have a use-case that the resource identifier you mentioned earlier might help with, though it might not be what the change was intended for.
#mblaneyI currently use unicyclic.com as my microsub server, and mblaney.xyz is my microsub client. the server identifies my requests via the bearer token.
#mblaneynow if I log in to monocle, it finds my microsub endpoint, but it gets a different token.
#mblaneyso when it tries to connect it doesn't find my account.
#mblaneyI was thinking if I gave monocle the same token, it would "just work"
#mblaneyso I log in to monocle from mblaney.xyz, which starts a new auth process.
GWG joined the channel
#mblaneynothing is failing, it's just that there's nothing to identify me with my microsub server. I guess this is why you provide unique urls with aperture?
#mblaney...and actually I use the fact that it's a Micropub client to let me know when there's new reader content so I don't have to poll. I added a new Micropub action called notify so I only fetch new reader items when I get a notification. yes it got complicated real quick :-)
#mblaneythat's what I get for splitting my reader in half :-D
uniquerockrz joined the channel
#aaronpkit's funny cause last week I kept hearing all these complicated enterprisey use cases around OAuth and then as I was thinking them through I would realize that there's an exact analogy in the indieweb world too since we tend to split up components so much
#mblaneygives Loqi a complicated enterprisey use case
#aaronpkcaches the verification result specifically
uniquerockrz joined the channel
#mblaneyah ok. I get that servers shouldn't hold tokens but I don't have a clear definition of a server anymore.... it's just two computers doing different things.
#aaronpkit's too vague for the reasons you're noticing
#aaronpkthis is why the specific language in OAuth is there
#aaronpk"client" is the computer making a request on behalf of the user. "resource server" is the computer that has resources the client is trying to access.
[jgmac1106] joined the channel
#mblaneyyeah it's just that the two computers I'm using play both those roles at different times. I guess I'm wondering if sharing a token to perform those roles is a good idea or not.
[KevinMarks], uniquerockrz, KartikPrabhu, [tantek], chrisaldrich, gxt, wagle, mblaney, cweiske and krychu joined the channel
[davidmead], uniquerockrz, [xavierroy] and [KevinMarks] joined the channel
#GWG[snarfed]: Saw your message, will try not to leave you behind... but will not put the same level of features into the non hosted version unless I can just copy the same code
#GWGOther than an Authorization header, is there any alternative method of passing tokens? I know that IndieAuth allows it being passed as a parameter, but not everyone supports that. Wondering current school of thought
#aaronpkOAuth only ever specified three: Authorization header, post body parameter, query string parameter. the query string parameter was always discouraged
#aaronpkand the form post method always said "SHOULD NOT be used except where browsers don't have access to the header"
#aaronpknow that we have better browser APIs, there is basically no need for the form post method any more
asymptotically joined the channel
#GWGaaronpk: I want to add to that WordPress repo I prompted you into
#GWGI wish I could have talked them into IndieAuth
#aaronpkmy goal now is to talk them into only the most strict version of OAuth
#aaronpkand then within that framework, encourage them to use the site url as the user ID reported to apps
#aaronpkwhich then looks an awful lot like indieauth
#GWGaaronpk: I am breaking down the problems I experienced in development
[Rose] joined the channel
#[Rose]Aaron do you need the response body or just the header? Or are you just talking about OAuth?
#[Rose]If we need the body and the headers then we can’t do a auth flow in Shortcuts on iOS. Though if we can ensure there’s another way to get a token it can be considered unnecessary
#aaronpk[Rose]: i'm just talking about *sending* the access token
#[Rose]Gotcha, sorry - I’m running on 4 hours of sleep 🙂
#jacky[contact091]: off the top of my head, it's prob the whole stack in JavaScript sell
[schmarty] joined the channel
#[schmarty]my understanding is that it is also one of the more flexible generators. jekyll and hugo are very opinionated about how content should be organized, what data can be used to generate pages, etc.
#[schmarty]been meaning to try it out for that reason, though tbh after going through the pain of learning how to work with jekyll and then hugo i am wary of starting over again, despite it sounding so good. 😅
#Loqidavidmead has 2 karma in this channel over the last year (6 in all channels)
#beko[m]jamietanna: about Hugo this one here https://jlelse.blog/ uses hugo iirc and he is coding a lot IndieWeb related stuff for it. Mayhap this helps.
[snarfed] and uniquerockrz joined the channel
#[fluffy]I wish I could convince some of y’all to try out Publ 😉
#[fluffy]I really need to get around to building a proper demo site for it. That’s on the list along with a dozen other important projects I haven’t gotten to. The struggle is real.
#LoqiEleventy is a JavaScript based static site generator that allows the user to select their own preferred template engine and theme, which in practice can and does enable use of microformats2 https://indieweb.org/Eleventy
#Loqiloqi has 2 karma in this channel over the last year (29 in all channels)
#[Rose]Loqi also has many features, such as the karma scores, countdowns, and more! Extremely useful across all chats
#jamietanna[m]Beko thanks! I'm using Hugo on www.jvt.me and have really enjoyed it, especially for its speed against something like Jekyll for a smallish site at the time. I dread to think what my site builds would take now, with thousands of more pages of content in my site now