#dev 2021-09-19

2021-09-19 UTC
#
astralbijection[
yesterday and today, i wrote a webmention receiver in rust that commits its received webmentions to a git repo
#
astralbijection[
it's still very much a work in progress (i still need to implement a lot of stuff, like auto-creating a pull request for it, processing the webmentions in parallel, etc)
#
astralbijection[
also the mentions are in the git repo, but i still need to display them too
#
[snarfed]
astralbijection++
#
Loqi
astralbijection has 2 karma over the last year
#
astralbijection[
here is what the folder containing all the webmentions looks like: https://github.com/astralbijection/astrid.tech/tree/main/content/webmentions
#
astralbijection[
it writes as yaml rn but i'm changing it to use json instead
akevinhuang joined the channel
#
astralbijection[
still need to come up with a name for it that's more interesting than `wm-receiver`
Seirdy joined the channel
#
GWG
Do you have a project called the Astrid Orbiter?
#
GWG
Sometimes I have name ideas without something to use them for.
#
GWG
Okay. Refresh Token PR done.
#
GWG
Just a few reviews, and the new WordPress IndieAuth 4.1.0 goes live.
#
astralbijection[
i do have a name idea for a webmention sender, though
#
GWG
Oh?
#
astralbijection[
so i want to make this sender platform-agnostic
#
astralbijection[
the idea is, it's a CLI app that you run on a webpage, or RSS feed
#
astralbijection[
it crawls to find posts
#
astralbijection[
parses those posts for microformats, and sends webmentions to every link inside a microformat
#
astralbijection[
it also hashes the microformat data, and uses that value to determine whether or not you changed your post
#
astralbijection[
so it can send an update
#
GWG
So, what name would you call it?
#
[tantek]
doesn't [KevinMarks] have a webmention tool/service that does that?
#
astralbijection[
then, it stores all the webmentions it sent on a file
#
[tantek]
or is that Telegram I'm thinking of?
#
astralbijection[
it's a crawler, and it sends, it's spidey-send
#
astralbijection[
oh, it exists already?
#
GWG
There is room for similar products on the market
#
[tantek]
yes, there is. worth looking at what's out there already though to see if you can re-use or build upon it!
#
[tantek]
what is Telegram
#
Loqi
Telegram is a cross-platform encrypted messaging app https://indieweb.org/Telegram
#
[tantek]
what is Telegraph
#
Loqi
Telegraph is an open source API and service for sending webmentions, part of the p3k suite https://indieweb.org/Telegraph
#
[tantek]
that's one ^ — from aaronpk
#
[tantek]
now I can't remember the one that [KevinMarks] built, so there's at least two
voxpelli joined the channel
#
astralbijection[
ah, in that case i can do this project later then
#
GWG
[snarfed]: I'm moving on to those Micropub issues, now that I'm done with IndieAuth.
#
GWG
At least for now
#
[snarfed]
GWG where are we on merging the webmention and synd links plugins? :troll:
#
GWG
[snarfed]: We made a lot of progress last year, but then stalled. pfefferle and I have not been able to get restarted. Compare the 4.X to the 5.X branch.
#
GWG
To be honest, would love to close that off...so much is waiting on that code
#
GWG
I'll touch base with him again about it
#
GWG
I last said we should figure out how to restart it and finally get it done on the 8th
#
GWG
Migrating to the new one when people have thousands of webmentions is going to be a challenge
#
[snarfed]
oof, if the underlying data model has to change, yes. ideally it wouldn't, but up to you all
#
GWG
[snarfed]: Correcting the mistakes of the past is hard.
#
[snarfed]
yup. but worth it!
akevinhuang2, hendursa1, Jack, jacklowe[d], Zegnat and [KevinMarks] joined the channel
#
[KevinMarks]
There is a sending part to mention.tech too, but it doesn't crawl all pages, just one.
tetov-irc and Murray[d] joined the channel
#
GWG
Zegnat: How so on the introspection?
#
Zegnat
I am still thinking about the introspection endpoint being declared to be the same endpoint as the token endpoint.
#
GWG
There was another comment about that being confusing. Someone suggested it should have an action parameter
#
GWG
Zegnat: Why specifically? What are your concerns?
#
Zegnat
Other than "it is different from OAuth" I am not sure, it is one of the things I am currently mulling over.
#
Zegnat
I wonder if it is even really neccessary. Would it not be easy enough for people who want it on the same URL to set a double rel value?
#
GWG
The existing verification it replaces is at the token endpoint
#
GWG
Did you have thoughts on authentication?
nertzy joined the channel
#
Zegnat
For Introspection? Not really. As long as the endpoint is not giving any information that IndieAuth was not already providing to clients anyway, there is no problem with the access token for the introspection endpoint being the same as the token you are inspecting
hendursaga and shoesNsocks1 joined the channel
#
Zegnat
I guess I am thinking of how IndieAuth can make use of the introspection standard with defining as few things as possible. If it continues to be its own endpoint, the only thing we define is how to discover it, which sounds like an essential part of IndieAuth anyway (making OAuth endpoint discoverable for non-registered clients). And then we could declare authentication on introspection optional for accessing information about a token
#
Zegnat
you already have, because we assume all that information to be public anyway?
#
Zegnat
I am just not sure if existing verification being on the token endpoint (which is an extension IndieAuth does to OAuth token endpoints) is a good argument to now make the whole of the Introspection spec and extension to the token endpoint. Maybe there is a good argument for it, which is why I am still thinkig about it.
#
aaronpk
The OAuth introspection spec is for resource servers not clients, which is why it recommends authentication for accessing the endpoint at all
#
Zegnat
I know, so making that one optional for us makes total sense. I was first thinking set Authorization to the token you want to inspect, but that is just double data, as submitting it already proofs you have it
#
aaronpk
Yea that just sounds like jumping thru hoops for theoretical spec compliance
#
Zegnat
I guess I do not see a problem with <link rel="token_endpoint introspection_endpoint href="https://example.com/token_endpoint"> for people who want it to be the same thing without any risks, instead of the IndieAuth spec forcing them to be the same thing. That feels like we are just breaking some of the OAuth 2.0 compat we put back in with the last big update. I just haven’t been able to put my finger on why I feel that way though
#
aaronpk
I agree I don't think we should require they are the same endpoint but we should make sure it's possible for someone to use the same endpoint for both if they want to
#
GWG
So we still have more to discuss on that
#
GWG
I thought the idea was that we were aligning the return protocol
#
GWG
Does aligning the response parameters have any concerns?
#
Zegnat
Not really. The verification response in IndieAuth is 100% an IndieAuth invention, I believe, so we can change its body however we want.
#
Zegnat
I guess the question there is, if we want to put more weight on the introspection, do we want to deprecate the old verification request?
#
Zegnat
I will work on getting all the thoughts written down on the issue tracker for further discussion. Probably able to get that done tomorrow
#
GWG
Zegnat: I think that is the goal. That the new interaction will be a POST, not a GET.
#
GWG
Sorry for the delay, was upgrading my doorknobs.
#
GWG
But when I wrote the PR, I left both in for now.
#
Zegnat
No problem, I will have delays too, about to start the D&D
#
GWG
I did finish refresh tokens last night, pending someone to look at its workings. Asked Jamietanna1 to comment, as an implementer of same, to compare how the two implementations look.
#
GWG
So, after that, my site will have a live introspection endpoint.
#
GWG
Which is compliant with the proposal.
shoesNsocks and nertzy joined the channel
#
GWG
capjamesg[d]: Re Monocle, that's the client, what endpoint? Aperture?
#
capjamesg[d]
GWG I have built my own.
#
capjamesg[d]
But it is in need of a bit of work.
#
GWG
Did you? I missed that. I saw the Search stuff
#
capjamesg[d]
Technically it complies with the spec on the core functions but I have been spending most of my time working on the search engine.
#
capjamesg[d]
IndieWeb time, that is.
#
Loqi
[capjamesg] microsub: A Microsub server built with Python Flask and SQLite.
#
jamietanna
Sorry GWG I think I missed where you sent the link to the code? Or were you just thinking of talking through how it works
#
Loqi
[dshanske] #223 Refresh Tokens
#
GWG
capjamesg[d]: I did the code that converts external sites into jf2, and jackjamieson did the spec interface. He's off living life, so I may redo the interface code, which has a lot of opportunities
#
jamietanna
Thanks GWG I missed that. I've added a few comments - looking good :)
#
GWG
jamietanna: thank you...now we just need a compatible client
#
@mxtaliajane
I’ve been reporting from @taliaotg (which Andy also tried mass reporting into oblivion) but this account has a massive backlog of work from before I made the alt. I’d like to download my data but with media integrated/playable — twitter data download doesn’t do that. Suggestions?
(twitter.com/_/status/1439657798070067205)
shoesNsocks1 joined the channel
#
jamietanna
Yeah I'd very much like to have someone using it outside of the IndieAuth clients I use for my personal services
#
jamietanna
*have a client performing refresh_token grants
#
GWG
jamietanna: I tried to talk aaronpk into adding it to Quill.
#
capjamesg[d]
GWG Can you share a link to that code? I am using a jf2 Python utility to at is part of a microformats2 helper library I found on GitHub, combined with a bit of my own code.
#
capjamesg[d]
[KevinMarks] I’m not sure I can think of a tool that meets those requirements.
#
jamietanna
I'd looked at it briefly for Micropublish but then a few other things came up that I prioritised over it
#
Loqi
[dshanske] parse-this: Parse This Parsing Library for WordPress- Can Act as a Standalone Plugin
#
capjamesg[d]
Thanks for sharing!
_sayanarijit[d], nertzy, jamietanna2 and tetov-irc joined the channel