#dev 2022-08-10
2022-08-10 UTC
#
[schmarty] gRegor: nice! Would love to be added to test. My regular site supports indieauth-metadata https://martymcgui.re

#
[schmarty] Looks like that "me" field is not marked as a url. My phone tried to "Http" it and I 😖

#
[schmarty] Tho I have both indieauth-metadata and the fallbacks so I can't tell which it got the auth and token endpoints from 😅

#
[schmarty] Let me double check but I think I am sending that 🤔

#
gRegor It will need to match 'issuer' from your metadata: https://martymcgui.re/api/indieauth

#
[schmarty] Oh in the code return to the redirect_uri? I doubt it! I thought that was just for the response when you redeem the code

#
[schmarty] HA! i somehow missed it 😂 🤦♂️ https://git.schmarty.net/schmarty/belding/src/branch/main/app/Controller.php#L83

#
[schmarty] hmmm. it should definitely be returning it now but i am getting the same missing_iss 🤔

#
[schmarty] thanks! and i'll double-check the spec and what i'm returning

#
[schmarty] currently sending the user back to the redirect_uri with just code and state in the URL, which i think is right.

#
[schmarty] oh! it _is_ supposed to be in the redirect response

geoffo joined the channel
#
[schmarty] looks like https://martymcgui.re/ has been removed from the list of allowed `me` values for dev.indiebookclub.biz 🤔

#
[schmarty] ok yeah i had introduced some chaos in that `iss` value. cleaned it up and it looks good??

#
[schmarty] yeah there are no indieauth.rocks tests though i once got excited about them https://indieweb.org/User:Martymcgui.re/IndieAuth-Endpoint-Testing

#
[schmarty] good job being the first indieauth client i've encountered that actually expects `iss` 😐

#
[schmarty] i feel like indieauth has kind of got brittle with all the "generic" oauth2 stirred in

#
gRegor That's via my pending PR: https://github.com/indieweb/indieauth-client-php/pull/19 I think it's ready pending review, this was just me trying it out on IBC

#
[schmarty] yeah it's not on you so much as like there's a lot of new must/should stuff that simply breaks compatibility older stuff including aaronpk's "flagship" indieauth.com

#
[schmarty] i guess as long as you're not requiring `iss` during an oauth dance without an `indieauth-metadata` endpoint...

#
[schmarty] (no ia-meta means no `issuer` means no `iss`)

#
[schmarty] word yeah

#
[schmarty] gRegor++

#
[schmarty] in that case, as you said: thanks for making the first spec-compliant client to test my server against 😂

#
[schmarty] sometimes inertia is the only way!

#
[schmarty] aha, thanks!

#
[schmarty] still wishes iOS safari would autocomplete URL inputs https://martymcgui.re/2020/05/25/a-hole-in-browser-autofill-support/

zanne, alecj and alecjonathon joined the channel
alecjonathon joined the channel