#dev 2022-07-28

2022-07-28 UTC
jacky, nertzy and jeremycherfas joined the channel
#
[schmarty] whew, slapped a token introspection endpoint onto this indieauth provider and ... i think i'm ready to switch? now to track down all the bookmarklets, ios shortcuts, scripts, micropub/sub clients, and more with long-lived tokens that will no longer work. 😭
jacky joined the channel
#
[schmarty] aww nurts i forgot i have my media endpoint yet to fix.
#
[schmarty] angelogladding asked at HWC US West tonight if I'd be updating Flask-IndieAuth and maybe i will need to lol.
#
GWG [schmarty]++
#
Loqi [schmarty] has 10 karma in this channel over the last year (23 in all channels)
#
[schmarty] i don't want to!
#
GWG [schmarty]: For your token introspection slapping
geoffo joined the channel
#
@fluffy ↩️ Step 2 is where I'm specifically proposing the use of IndieAuth and adding u-vr-avatar (or the like) as a property, and standardizing the way that VR avatars are represented (which, again, can be based on VRM or the like) (twitter.com/_/status/1552492708375064576)
jacky, alex11, ben_thatmustbeme, [Jacob_Hall], Javi, tetov-irc, nertzy and [campegg] joined the channel
#
@voxpelli ↩️ Totally! I would add RSS to that list as well :) When it comes to IndieWeb features the two most basic are Webmention and the h-entry microformat. Combined those two makes it so one can easily interact/be social with the content of other people. (twitter.com/_/status/1552659163100184576)
ben_thatmustbeme joined the channel
#
GWG Wondering how I decide to update the Ticket Auth draft spec? Namely... what's appropriate?
#
Zegnat Make changes first, ask for forgiveness later? ;)
#
[schmarty] whew! really slogged my way through getting an access token issued but got my media endpoint fixed up and working with my new indieauth endpoint using token introspection instead of the old "throw an Authorization header at the token endpoint".
#
[schmarty] all that to say: finally got today's caturday posted lol
#
aaronpk [schmarty]++
#
Loqi [schmarty] has 11 karma in this channel over the last year (24 in all channels)
#
[schmarty] in other news i think owncast's indieauth implementation is slightly broken? when starting an indieauth flow on their test server at https://watch.owncast.online/ the `client_id` they send does not include a path component. is it OK to assume `/` if path component is missing from `client_id` or should this be filed as an issue with owncast? or both??
#
[schmarty] (taproot/indieauth requries a path in its `client_id` validation and i was about to loosen that restriction but i see mentions of `client_id` requiring a path component in other places like gimme-a-token.5eb.nl)
#
[schmarty] oop i was finally able to find it in the spec. indeed a path component is required! https://indieauth.spec.indieweb.org/#client-identifier
#
Zegnat Yes to file an issue. But I cannot immediately come up with a reason why your endpoint could not add a / path by default. For http scheme that is almost always assumed
#
aaronpk IIRC we have something like that allowing path-less profile URLs already?
#
aaronpk oh i think it applies to everything https://indieauth.spec.indieweb.org/#url-canonicalization
#
[schmarty] the spec mentions normalization and cleanup for "me" URLs but doesn't say to apply it to client IDs?
#
aaronpk "if a URL with no path component is ever encountered, it MUST be treated as if it had the path /"
#
[schmarty] aha, indeed, thanks!
gRegor and angelo joined the channel
#
GWG Zegnat: Can you forgive me?
#
Zegnat GWG: I will have to think long and hard about it... hahahahaha!
#
Loqi Zegnat: lol
#
GWG Zegnat: I meant, will you read the modifications and comment?
nertzy joined the channel
#
Zegnat Sure!
#
[schmarty] aaronpk: looks like Aperture doesn't know how to do token introspection (still does the old toss-a-bearer-token-at-the-token-endpoint method) which i am trying not to support because it's no longer in the spec!
#
aaronpk ooh
#
aaronpk [schmarty]++ file an issue!
#
Loqi [schmarty] has 12 karma in this channel over the last year (25 in all channels)
nertzy joined the channel
#
[schmarty] aaronpk++ filed! with some muddled thoughts!
#
Loqi aaronpk has 31 karma in this channel over the last year (118 in all channels)
#
[schmarty] https://github.com/aaronpk/Aperture/issues/121
#
Loqi [martymcguire] #121 Feature request support IndieAuth introspection endpoint
#
gRegor Maybe related: https://github.com/aaronpk/Monocle/issues/56
#
Loqi [gRegorLove] #56 Sign out if access token verification fails
#
gRegor Not actually sure now if that issue is with Aperture or Monocle, heh
nertzy, CrowderSoup, CrowderSoup8 and tetov-irc joined the channel