#dev 2021-07-27

2021-07-27 UTC
angelo joined the channel
#
[jacky] I _think_ so
#
vikanezrimaya oh well
#
vikanezrimaya I partially imported the webmentions. Partially because apparently there are a lot of errors. Broken links on my site due to incorrect database migrations losing links in process (since earlier versions accounted for some even earlier versions' legacy behavior), sometimes due to the source of the webmention erroring out, and sometimes due to an unexplainable error that weirdly occurs with a lot of stuff
#
vikanezrimaya Oh! apparently it simply doesn't follow redirects. Oops, found a spec violation in my code! 😹
#
vikanezrimaya ok I will deal with the errors later, since I have them all logged
#
vikanezrimaya but for now I can rest assured that 305 webmentions out of 467 were processed correctly and now are inside of my site's database where I could later find a way to display them.
#
vikanezrimaya I wonder how many webmentions does everyone else have on their websites
nertzy joined the channel
#
[jacky] it looks like /opensearch needs some updating to archive.org links
#
[jacky] hmm okay to https://github.com/dewitt/opensearch
#
Loqi [dewitt] opensearch: OpenSearch is a collection of simple formats for the sharing of search results.
#
[jacky] fixed
#
[jacky] TIL that it began as a Amazon thing
[James_D] joined the channel
#
[jacky] [James_D] there's a chance that it _needs_ you to have a Micropub endpoint
#
[James_D] Oof. I looked over the spec. Its a lot to write.
#
[jacky] there's some implementations over at https://indieweb.org/Micropub/Servers if you'd rather use one and have your site talk to it to get the contents (or if you're looking for ideas)
#
[James_D] Yeah. I've been looking. I run on netlify. So looking at one that can run as a function there. I was looking through this one. https://github.com/Colelyman/gozette.
#
Loqi [Colelyman] gozette: A Micropub server written in Go, primarily designed for static sites.
#
Ruxton ooo
[aciccarello] joined the channel
#
Ruxton aaronpk: there's a few things that stop that insta extension from working now, Chrome has super strict cross origin policies on extensions :(
capjamesg joined the channel
#
capjamesg I missed the webmention.io meetup earlier this year but I'm curious about what can be done to make webmentions more mainstream.
#
capjamesg Of course, adoption from one major web hosting provider would be beneficial.
#
capjamesg As I have been writing the webmention receiver I realised how technical webmentions can get and that social media is a much quicker way of conveying a message (which to many will matter more than the content ownership benefits awarded by webmentions).
#
capjamesg I believe in webmentions but just wonder what needs to be done to get them adopted more widely.
#
capjamesg This is interesting: https://indieweb.org/2021/Pop-ups/Webmentions_Beyond_Webmention.io (I can't believe I missed this!!)
#
capjamesg Anyone want to help test my webmention receiver?
#
vikanezrimaya I wonder if my webmention sender works
#
vikanezrimaya if it does I can test it
#
capjamesg :D
#
capjamesg I'm building one of those too.
#
capjamesg Okay. My blog now uses https://webmention.jamesg.blog/ as the webmention endpoint.
#
capjamesg It would be greatly appreciated if anyone set me a webmention (my thermal printer is not set up for this endpoint yet!).
#
capjamesg I expect bugs because I have not tested with live data yet.
#
capjamesg Still working on it :D
#
vikanezrimaya ugh. I guess I could fire up a manual webmention
#
vikanezrimaya expect a webmention to one of your posts in the next 10 minutes or so
#
capjamesg Thanks!
#
capjamesg I'll iron out bugs then open source.
#
vikanezrimaya ping! webmention sent!
#
vikanezrimaya It should come from this URL: https://fireburn.ru/posts/_spoY8o
rockorager joined the channel
#
capjamesg Yay!
#
Loqi :D
#
capjamesg Received. There's a bug with validation though. Will fix.
#
vikanezrimaya what kind of bug is it?
#
vikanezrimaya mine is not following redirects when receiving webmentions :3
#
rockorager I sent you one too!
#
vikanezrimaya umm... where
#
vikanezrimaya I don't have a webmention endpoint published yet
#
vikanezrimaya it's down
#
vikanezrimaya please give me the link so I could manually import it because this is what I do for now
#
rockorager I meant to capjamesg
#
vikanezrimaya oh sorry >.<
#
capjamesg Learning a lot from this!
#
vikanezrimaya i'm a Matrix user and i'm too reliant on avatar colors to distinguish people, I should unlearn the habit
#
rockorager I sent through telegraph and got a 201 created
#
rockorager Woops, 201 accepted with a message "Created"
#
capjamesg Yeah. It has been queued for processing.
#
capjamesg Aside from my poor sqlite3 to JSON skills, I have received all of your webmentions.
#
vikanezrimaya yay
#
capjamesg But they show up in the HTML fine so it looks like both webmentions were accepted.
#
capjamesg Amazing!
#
capjamesg Keep 'em coming :D
#
capjamesg vikanezrimaya++
#
Loqi vikanezrimaya has 1 karma over the last year
#
capjamesg rockoranger++
#
Loqi rockoranger has 1 karma over the last year
#
capjamesg rockorager++
#
Loqi rockorager has 2 karma over the last year
#
vikanezrimaya capjamesg: should they show up somewhere on the website or are they only visible to you for the time being?
#
aaronpk Ruxton: how new are these changes? I last used it a week ago or so
[eddie] joined the channel
#
[eddie] [James_D] just saw your Indigenous conversation and the iOS app does require a Micropub endpoint as at the time of its building it was first and foremost a Micropub client that added on Microsub functionality
hendursaga joined the channel
#
[James_D] ↩️ Thanks. I'm working on getting it set up. Hopefully I can finish it tonight after work
[grantcodes], sebbu and jjuran joined the channel
#
GWG [grantcodes]: Did you look at the Microsub pop-up?
#
[grantcodes] No not yet GWG
#
GWG [grantcodes]: There are some interesting conversations and takeaways
#
capjamesg Thanks for the webmention snarfed.
#
capjamesg vikanezrimaya I don't have my webmentions visible on my site.
#
capjamesg I have written a backend to see them though (like webmention.io).
#
capjamesg I use it more as a private inbox than anything.
#
aaronpk Nice
#
capjamesg I'll open source the code for this project soon, hopefully so that it's clearer how to create a webmention recieve.r
#
capjamesg https://github.com/capjamesg/webmention-receiver
shoesNsocks1 and shoesNsocks joined the channel
#
capjamesg aaronpk how safe is basic auth over https?
#
aaronpk https protects the password in transit but HTTP Basic Auth is still not great :-)
jamietanna joined the channel
#
jamietanna !tell [James_D] it's only a Microsub reader you should need for Indigenous for Android, not Micropub - we fixed that a couple of years ago as I had the same issue
#
Loqi Ok, I'll tell them that when I see them next
#
jamietanna Ah sorry missed it was iOS not Android!
#
@vishae I just rewatched the first ten minutes of Pixar’s Up. It’s been years since I’ve watched it and I wanted to know whether it was as sad as I remembered. Yeah it was. _Tissue please._ (https://www.brid.gy/publish/twitter) (twitter.com/_/status/1420059283153203200)
#
KartikPrabhu ^ that is weird!
#
capjamesg aaronpk for a production app is basic auth reliable?
#
@PGabbyPrecious Chris wrote this amazing article https://daily-dev-tips.com/posts/goodbye-comments-welcome-webmentions-%F0%9F%99%8B%F0%9F%8F%BC%E2%80%8D%E2%99%82%EF%B8%8F/ via @DailyDevTips1 (twitter.com/_/status/1420061369639096320)
#
capjamesg webmentions << https://github.com/capjamesg/webmention-receiver
#
Loqi ok, I added "https://github.com/capjamesg/webmention-receiver" to the "See Also" section of /Webmention https://indieweb.org/wiki/index.php?diff=76535&oldid=76205
#
@TheGreenGreek ↩️ "If you have a comment or question on one of my posts, please do not use this form. Instead, reply on Twitter so it will populate the webmentions and other people can also benefit from it! Or, you can contact me in one of the several public Discord and Slack groups I'm in." (twitter.com/_/status/1420064929877536773)
[Blob64] joined the channel
#
[Blob64] Hello, my name's Chris and I write software - at least try to ! :) My company focuses on helping small businesses with light-weight IT tools to automate or bridge gaps in-between their internal processes.
#
[Blob64] Over the course of a few months I put together a tool called Stikqr.com and I humbly present it to this Reddit group (queue image of pilgrim on one knee).
#
[Blob64] Keeping in the software tradition : it's a 95% free tool. Only certain elements have a cost but do not impede on the use of the tool. (note to self : t-shirt concept "I'm 95% free").
#
[Blob64] I'd very much like to get feedback. Be gentle, I'm pretty much on my own doing 'everything' - but I'll endeavour to add new proposed features and will be eternally grateful :)
#
[Blob64] Oh and if you'd like "Stikqr.com Gift pack", DM me !
#
[Blob64] Chris
#
capjamesg Are we no longer archiving chats? https://github.com/indieweb/indieweb-chat-archive
#
Loqi [indieweb] indieweb-chat-archive: Full archive of IndieWeb chat log data files
shoesNsocks joined the channel
#
aaronpk i forgot to re-enable the cron job after the last bit of maintenance. the logs are all there now tho
#
Zegnat capjamesg: define "reliable" in a production context
#
capjamesg Zegnat secure might be a better word.
#
Zegnat HTTP Basic Auth is as secure as any sending-password-over-the-wire. The "problem" is that it sends the login for every single request, potentially making it easier for people to do replay attacks etc.
#
capjamesg I would have implemented IndieLogin but I'm not willing to set up another service to get the receiver running :)
#
capjamesg I might have to look into standard auth with a username and password then.
#
capjamesg That's what I found in my research -- good to know this is an issue.
#
Zegnat I think you can think of HTTP Basic Auth as a never-expiring Bearer token in OAuth speak. As you are basically sending an Authorization header for every request containing a "token". In the case of basic auth the token is the base64 encode of your username and password. So the only way to revoke the token is by changing the username and password on the server end.
#
Zegnat The token might also be easier to guess, depending on what your username and password are like. As for OAuth bearer tokens you could just grab any amount of completely random bytes.
Ramon[d] joined the channel
#
capjamesg Ah, that's a good way of thinking about things.
#
Zegnat So if you can live with a never expiring token and no other session protections against replay attacks and the like, basic auth is fine.
#
Zegnat All of this is of course assuming HTTPS, so atleast the stuff is not going plain text over the wire. But that goes for OAuth too in most cases.
#
capjamesg +1
#
sknebel e.g. you can't nicely log out in browsers afaik
[Suw] joined the channel
#
Zegnat Not nicely, no. The only way I have seen is to give browsers faulty credentials. Example: by linking to https://no:no@example.com/ the browser switches to using those credentials. It will probably get a forbidden response back, and then "lose" older credentials.
#
[James_D] Alright. I'm one step closer with indigenous. I got the micropub server up and running after some minor fixes to gozette. Here is my fork if anyone needs it. Indigeonous said I don't have a reader endpoint. Is that where I should create an endpoint that displays all of my micro? Any tips on that?
#
[James_D] could I just add `<link rel=reader...` and point it to the webmentions feed?
#
[jacky] hey James!
#
[jacky] a reader endpoint, hmm that's interesting. I think it _might_ be actually asking for a Microsub endpoint
#
[jacky] you can sign up for an account for one with something on the list here https://indieweb.org/Microsub#Servers, I currently use Aperture but I'm still tinkering with my own form of one
#
[James_D] so theres a microsub server and a micropub server.
#
[schmarty] [James_D] indeed! and they do very different things. a micro_sub_ server manages the actual fetching and parsing bits of subscribing to feeds. a micro_pub_ server manages adding or updating posts on your site.
#
[James_D] so for microsub theres no need to roll your own like the micropub?
#
[jacky] you don't _have_ to roll your own for Micropub!
#
[jacky] tbh I've been moving to make my personal site a client of a Micropub server to prove that (and encourage it)
#
[schmarty] i'd agree, though, that most microsub servers "do the same thing" and so are more interchangeable and offerable as a service.
#
[jacky] yeah and the spec's surface is quite smaller so it's definitely a bit easier to implement
#
[schmarty] whereas micropub servers can end up very tied in with your choice of CMS, data store, templating language, site design, ...
#
[James_D] sounds good. Back to reading the docs. Thanks again
#
[jacky] an interesting side for people looking around building interfaces and experiences https://growth.design/case-studies/
#
GWG I have been playing with a dark version of my theme. Revealed a lot of interesting problems
Rattroupe and rockorager joined the channel