#dev 2021-07-07
2021-07-07 UTC
alex11 and [fluffy] joined the channel
# 
[fluffy] looks like there’s also an open debate about the whole ‘resource’ thing, like whether a token should be valid for the whole site or just for the page it was requested against. IMO it should be up to the ticket granter to make that decision, since like… in my case when someone’s logging into my site, I’m giving them a ticket for the whole site.
moose3338, alex11 and [jacky] joined the channel
# 
Zegnat I agree with aaronpk, and was planning to use scope just as indieauth has it. For my current tickets I never set scopes because I am not really authorising the user for anything. All the tokens are basically authentication only tokens. I just want to know who is visiting, my website can use that to figure out what you get to do.
capjamesg joined the channel
# 
@rowanmanning I finally wrote about my new fav technology, explaining how to send and receive webmentions on your static site. I'm late to the party but really excited about this! https://rowanmanning.com/posts/webmentions-for-your-static-site/ (twitter.com/_/status/1412687742543273988)
jamietanna and [Rose] joined the channel
# 
jamietanna I'm sure aaronpk wrote a gist for a self-contained endpoint, fluffy, but I can't seem to find it offhand
[fluffy] joined the channel
# [fluffy] for that matter, when you sign into Publ, it only requests a ‘profile’ scope as a matter of having *something* in the scope (since the spec requires it) and even if something were to actually provide the profile with the authorization response, Publ doens’t use it; it just parses the h-card from the ‘me’ URL.
GoldenEye joined the channel
# jamietanna So I've got a ticket receiver up - I've gone for requiring the `issuer` parameter to tell me who's issued the token, so I can then look up their profile information. I've put it as a Ruby POC on Heroku so will share the code + add details to the Wiki shortly
# jamietanna Been able to get a token from Zegnat - although as mentioned, I needed to manually add the `issuer` so it didn't work out-of-the-box
# jamietanna Zegnat I do see `"me": "https:\/\/www.staging.jvt.me\/",` - is that the expected format for your `me`s?
# 
@AndreJaenisch The other day, I looked at #WebMention servers.
The #IndieWeb community wrote a dozen or so clients, but I could o… https://twitter.com/i/web/status/1412712879636234243 (twitter.com/_/status/1412712879636234243)
hendursa1 joined the channel
# jamietanna Updated the wiki with my POC's details :)
GoldenEye and shoesNsocks joined the channel
# jamietanna Morning GWG
# jamietanna Ah sorry Zegnat I should've been clearer - are the escapes for the slashes expected?
# jamietanna Right now, lunch :D But may look at starting my work to be able to issue tickets from my IndieAuth server
# jamietanna https://stackoverflow.com/a/10210433/2257038 has a good answer to it - it looks like you can resolve your end as it's not needed to be encoding the slashes (as i.e. Ruby out of the box isn't removing those slashes when I JSON decode)
jamietanna1 joined the channel
# 
jamietanna1 Of the languages I've worked with, I think PHP is the only one that does that by default tho 🤔
[fluffy] joined the channel
[KevinMarks] joined the channel
# @AndreJaenisch ↩️ Which of those is not a CMS?
I want to receive WebMentions by exposing an API endpoint on my domain (with MariaDB and everything), so basically look for a library.
I'm okay with http://WebMention.io, but I can do more if all data are under my control. (twitter.com/_/status/1412783624869584900)
# 
@schnarfed ↩️ Ah, you didn't mention you wanted a standalone library. There are lots of non-CMS webmention receivers there, in the service sections, but you're right, not many libraries, probably because receivers generally need to store mentions somewhere, which is implementation-specific. (twitter.com/_/status/1412785473760546819)
# @AndreJaenisch ↩️ Yepp.
For now, I'll point to http://webmention.io as I move my code towards my own domain.
Then, I'll look into fetching all data there and put it into my own database before I write an endpoint.
I mean, libraries like PonyORM or Knex can handle multiple database backends. (twitter.com/_/status/1412787332130951175)
# jamietanna fluffy there's a bit more thinking under the question "Where does the ticket endpoint go looking for the token endpoint?"
# jamietanna I agree that not using `me` makes sense, and that `issuer` makes more OAuth2-y sense
# 
@aaronpk ↩️ You might be interested in this list, there's a handful of different approaches there: https://indieweb.org/Webmention-developer#Handling (twitter.com/_/status/1412789434886483971)
# jamietanna GWG I think that approach sounds reasonable _but_ instead of complicating things for receivers, why not just require i.e. `issuer` to always be sent?
# jamietanna I like the option though, it's a good way to do it, especially as we're starting to have differing implementations
# jamietanna would be good to hear folks' opinions, other than mine!
KartikPrabhu and capjamesg joined the channel
capjamesg and KartikPrabhu joined the channel
lanodan joined the channel
capjamesg and [Ana_Rodrigues] joined the channel
# [Ana_Rodrigues] capjamesg I’d use an ol yeah
[tw2113_Slack_], rockorager and [snarfed] joined the channel
# 
rockorager No, just a random photo from my phone. I was testing from both quill and Sunlit
# rockorager After you account for base64 encoding, max image size is ~4mb
# rockorager It's just annoying because Netlify gives you nothing when AWS rejects for size limit...you just get no request at all, so you can't even send back a nice error code from inside Netlify
# rockorager Quill ends up showing an immediate error, and Sunlit keeps going and then times out with an 'internal server error' after about 10 seconds
Seirdy joined the channel
# jamietanna ah that's a pain - I remember seeing tha tin the past when doing https://micropub-media-endpoint-proxy.netlify.app/ and why I made it POST directly to the media endpoint from the browser, rather than via Netlify Functions
# jamietanna tis a pain!
# [snarfed] jamietanna, unrelated, just fyi your site is doing its wm sending loop again for current posts, eg https://www.jvt.me/mf2/2021/07/o26sj/ and https://www.jvt.me/mf2/2021/07/e2wvz/
# rockorager jamietanna: Checking out your code! Doesn't a file >6mb get kicked back since it's showing up in AWS as file.content?
jamietanna joined the channel
# jamietanna aargh sorry about that snarfed - I know what that'll be and will sort it shortly :)
# jamietanna rockorager apologies, I misremembered what my stuff actually did! Yes this will hit the same issue :(
# rockorager No worries...you clued me in to the lambda-multipart-parser which I wish I had seen a week ago!
angelo and sknebel joined the channel
# @rowanmanning ↩️ Yeah definitely some similarities, the indieweb wiki has a page on trackback which talks about the issues with it (some of which webmention solves) https://indieweb.org/Trackback (twitter.com/_/status/1412905560228388864)
[KevinMarks] and [fluffy] joined the channel
# [fluffy] Okay I finally got around to reading the discussion of issuer vs. resource on the wiki. I think people might be working cross-purposes on those things… it seems like some folks are using TicketAuth as a means of providing notification about a specific resource becoming available, and some folks are using it as a means of granting the ability to follow a feed or the like.