#[KevinMarks]it's such a bad name for it when "functional" was right there
wagle, [tantek] and [chrisaldrich] joined the channel
#jackyI'm starting to wonder what other kind of things I can show in my consent screen
#jackylike if an app is known to exist on the Wiki, I wonder if I could show info about people that I follow / have in my contacts list that are marked as users
#GWGI just got inspired by some of the conversations
gRegorLove, [tw2113_Slack_], [KevinMarks] and miklb joined the channel
#aaronpkDid bridgy stop sending webmentions for replies to replies? There's defnitely a bunch of replies to things I expected to see that aren't showing up
#ZegnatWhat are people's thoughts on “remember this” options on the consent screen? I have been toying with that. E.g. if I granted the indieweb wiki to authenticate me (that is no scopes) and I store the client and redirect URLs, I want it to skip the consent screen next time this same request is done and just let it through.
#sknebelI've been thinking about indicating if and how the request differs from previous ones
#jamietannaGWG looks good - I'm partial to my solution of only showing PKCE when it's absent, with a warning, but I get why you and others have gone with show it
#jamietannaAny thoughts around showing all the scopes the server supports (or at least `draft`)?
#jamietannaZegnat I'm not sure I want to ever have implicit consent, even for my own tooling, but I get where you're coming from - I'd definitely be interested in having a "you granted this x days ago for `create`..."
#ZegnatI think it may also be different between grants (where scopes and longer lived tokens are involved) or simply authentication (such as logging in to the wiki or Telegraph or similar apps)
#aaronpki'm not quite happy with how my site currently handles it, i need to tweak it a bit. I think I want logging in to bypass the consent screen after the first time i log in to something
#aaronpkright now if an app requests the same scope and all the other things are the same too it will bypass the consent screen the second time, which I think I also like
#jamietannaI wonder if doing it with a "remember for x days" sort of thing is better instead of forever?
#ZegnatRe scopes: I always show the profile and email scopes, but that’s it. Though that is primarily because my IndieAuth endpoint does not know about the existence of any other scopes...
#jamietannathat sounds good - would you do it based on what you allowed it to have, or what was requested? the former, I guess, in case you added `drafts`
#GWGjamietanna: I made a few more revisions after that, need to take a new screenshot.
#GWGI may not approve any scopes I don't know about and instead put a warning
#GWG"Blah - Server does not recognize this permission request and cannot approve it."
#jamietannasounds good - I've added an "unknown" section, but may make it more visible that they're not known about. Wouldn't that make it difficult for experimenting with new scopes though?
#GWGjamietanna, why? It just says the server won't approve the Blah scope..not the other scoped
#GWGHow can you grant a permission you don't know about?
#jamietannaSo up until yesterday, my server didn't understand the `channels` scope because I'd just not added a mapping, but I still allowed myself to approve it so I could use apps
#jamietannaIt's a fair shout though - it's not a great UX to allow a user to allow something that could be super dangerous if you don't know what it is
#aaronpkscope can't really do anything unless your server is enforcing it
#aaronpkin other words, if you ignore scope completely, that's the same as allowing it
#GWGI'm not sure I'd do it. I think right now I only put a description next to scopes I know about, I don't have a default message
#GWGThe middle ground is allow approval, but note the server doesn't recognize this scope
#ZegnatNot sure there are any good WordPress examples, but say you are using an Aperture instance to host your Microsub server. WP does not know anything about Microsub scopes. But if I am using WP IndieAuth to login to my Microsub client I still want to be able to grant that client Microsub scopes to send to Aperture.
#ZegnatMy reason for allowing scopes I do not know about: the server hosting my indieauth endpoint may not know about it, but the token is going to be used when communicating with a different server and that one needs it.
#ZegnatAperture might be a bad example, not sure it supports external indieauth providers, but hopefully you get what I meant :)
#GWGZegnat: It actually does. I added all the scopes for Microsub...it just doesn't reflect anything internally if you are using Aperture
#[Murray](with the caveat that you're also using Netlify; might work on something like Vercel too)
#btremI'm not using Netlify. I have a shared hosting account using control panel.
#btremThe freenode notification that I had been mentioned here actually interrupted me from looking up when that control panel/shared hosting account expires. I'm trying to decide if I should move to Netlify.
#[Murray]well, I can certainly recommend it, particularly if you're using a build tool like 11ty, Gatsby, Next etc.
#[Murray]it's a very simple (and pretty much free) setup and process
#[Murray]the downside of course is limited server-side functionality, so running something like a CMS becomes tricky
#[Murray]really depends on what you're currently using the hosting for 🙂
#btremA static site built with 11ty, then uploaded via sftp. And email.
#btremSo if I ditch the shared hosting account for Netlify, I'd need an email provider.
jamietanna joined the channel
#jamietannabtrem it may be possible to have both? email through shared hosting, but website through Netlify?
#btremYeah, I thought about that. I could just pay for the shared hosting account but only use email, and not the web server.
#btremIf nothing else, I could not wait until the account expires, but rather give Netlify a test drive now.
#jamietannacan you try Netlify for a subdomain maybe? Or even just on netlify.app (i.e. not linked to your identity for now)
#jamietannaI've used Zoho.eu for years for my email hosting, and it's been really great - free hosting for a personal domain too :D
#btremI know next to nothing about Netlify; so I don't know what netlify.app is!
#btremA subdomain is a good idea. Hmm. I wonder how good my dns skills are....
#btremzoho email looks scary. Is that a dedicated email app I see in screenshots on their site?
#jackytook that time when adding in PKCE support for 'decorators' on the auth flow
#jackynow I can 'enhance' what things to look for an app
#jackyI'm thinking about hints for links to a native app and if it's on the Wiki
#btremOn a broad level, when deploying a site to Netlify via GitHub, does one commit finished html files (e.g., the output of an 11ty build) and Netlify copies the files? Or does one commit the templates to GitHub, and Netlify runs 11ty in some fashion and create the files and serve them?
scojjac joined the channel
#[schmarty]Netlify is pretty flexible. i think in general folks commit the templates and content to Github and Netlify runs the build and serves the result.
#[schmarty]i've been tempted to switch over to netlify several times! my website runs in a nearly-identical way. updates to git trigger a notification to a process that pulls down the updates, rebuilds the site, pushes the updated compiled files where they will be served, sends webmentions, ...
#jamietannasorry btrem - netlify.app is the default hosting for Netlify if you don't bring your own domain :)
#[schmarty]all things i could port to work with netlify + functions (or its competitors)
#jamietannazoho email is pretty nice when I've used it - it's hosted email, but they have a tonne of other services (primarily business focussed)
#jamietannaNetlify usually runs the build process for your app, and then uploads the built files to their CDN
#btremI'm leery of an email service that doesn't have normal smtp and imap so that I can use my own email client. Though I don't *love* Thunderbird, it's better than anything else I'm aware of.
#jamietannaI'm trying to keep the descriptions all in-server, but I really like your idea of "which of my friends are using this"
#jackyoh that's a bit more out of the way, I would look for a link to the wiki from the app's homepage and check that it has the same name as the app, then look for #Examples and pull out h-cards
#GWGWe need to update the scope page now that profile is official
#jamietannaAre these things we think that are worth documenting in the spec, instead of just on the wiki?
#jamietannaAlso think I've asked about this before - should we add some official documentation for stable Micropub extensions, as closed issues are a bit harder to grok, especially when looking for expected request/response
#GWGjamietanna: I think the spec mentions the wiki, doesn't it
#jamietannaI'd say spec is more official than wiki tbh, as it then says "you should be supporting this if you say you support IndieAuth of this version"
#jboveAsking because the keyboard key combination to copy - paste without formatting differs between Windows and Mac
#btremMac OS. I've never encountered this problem before. I looked at the source code, and it's in span elements, with (presumably) css to create line breaks. I just copied and pasted it line-by-line. Painstaking!
#jboveInteresting. Which browser are you using to check the source code?
#Loqi[Sia Karamalegos] An In-Depth Tutorial of Webmentions + Eleventy
#jbovebtrem: I just borrowed code from Sia the other week. I found it was easier and more complete to actually have a look at her source code which she graciously shared over on Github.
#jboveReminds me that I should add an unique ID to every heading tag on my site's content too actually. hash anchor links are super handy to quickly get to the right section in a page
[KevinMarks] joined the channel
#btremah, under "additional resources". Still wish I could have just copied and pasted like I've done every other time. :/
[schmarty] and Saphire joined the channel
#jackyI was thinking more about this older mock-up I had on my site about music rendering
#jackyand I realized I could just have the service like 'update' a property on my homepage that'd show what song is currently playing
#[KevinMarks]@jbove you could use fragmentions, then you get the links automatically working