#dev 2022-08-10

2022-08-10 UTC
#
[tantek] I get that it seems to collapse into some sort of productivity tracking system, but I think that really misses the point, especially when it comes to (semi-)passive activities
#
[schmarty] gRegor: nice! Would love to be added to test. My regular site supports indieauth-metadata https://martymcgui.re
#
[tantek] like read/watch/listen feel fundamentally different as a set/category of "experiences" compared to say walk/run/bike/swim or even drive
#
[schmarty] Looks like that "me" field is not marked as a url. My phone tried to "Http" it and I 😖
#
gRegor *hacker voice* "you're in"
#
[tantek] ironically, [schmarty]'s home page link-preview here in Slack demonstrates the relevance of such "passive" activities: "He also enjoys *listening to podcasts, reading*, and posting photos." [*emphasis* added]
#
gRegor Ah, yeah, balance of "let people enter just the domain name" vs convenience of url field
#
gRegor should be able to sign in now [schmarty]
#
[schmarty] Debug looks good! https://media.martymcgui.re/ca/3e/f3/83/55c36a5d30c4cfdac6105825801e0e5a51190d7dbb765d7883f9e007.png
#
gRegor huzzah!
#
[schmarty] Tho I have both indieauth-metadata and the fallbacks so I can't tell which it got the auth and token endpoints from 😅
#
[schmarty] Ooh, bonked https://media.martymcgui.re/c8/84/03/a4/8c3e1bf4ed1004ed2dc0c001712d65a97a820976d438f5797ca31178.png
#
[schmarty] Let me double check but I think I am sending that 🤔
#
gRegor ah, that's part of the latest spec. is your authorizaztion endpoint sending back 'iss' along with 'me'?
#
gRegor It will need to match 'issuer' from your metadata: https://martymcgui.re/api/indieauth
#
[schmarty] Oh in the code return to the redirect_uri? I doubt it! I thought that was just for the response when you redeem the code
#
gRegor the latter, iirc
#
gRegor should add some better debug on my end for this next version
#
[schmarty] HA! i somehow missed it 😂 🤦‍♂️ https://git.schmarty.net/schmarty/belding/src/branch/main/app/Controller.php#L83
#
[schmarty] hmmm. it should definitely be returning it now but i am getting the same missing_iss 🤔
#
gRegor Let me turn on some debugging. I can show all the params at least temporarily on that error page
#
[schmarty] thanks! and i'll double-check the spec and what i'm returning
#
[schmarty] currently sending the user back to the redirect_uri with just code and state in the URL, which i think is right.
#
[schmarty] oh! it _is_ supposed to be in the redirect response
#
[schmarty] per https://indieauth.spec.indieweb.org/#authorization-response
geoffo joined the channel
#
[schmarty] looks like https://martymcgui.re/ has been removed from the list of allowed `me` values for dev.indiebookclub.biz 🤔
#
gRegor Can't have these kids on my lawn
#
gRegor just a moment, almost done :)
#
gRegor [schmarty], clear cookies for the dev site and try now. Error page should show all the query parameters returned.
#
gRegor is now curious about implementing some indieauth.rocks tests
#
gRegor I thought we had those, but probably remembering micropub
#
[schmarty] ok yeah i had introduced some chaos in that `iss` value. cleaned it up and it looks good??
#
[schmarty] yeah there are no indieauth.rocks tests though i once got excited about them https://indieweb.org/User:Martymcgui.re/IndieAuth-Endpoint-Testing
#
gRegor I see you signed in, so looks good!
#
gRegor thanks for testing, and glad to help test your server, haha
#
[schmarty] good job being the first indieauth client i've encountered that actually expects `iss` 😐
#
[schmarty] i feel like indieauth has kind of got brittle with all the "generic" oauth2 stirred in
#
gRegor That's via my pending PR: https://github.com/indieweb/indieauth-client-php/pull/19 I think it's ready pending review, this was just me trying it out on IBC
#
gRegor Was pretty easy to implement in IBC, just a couple lines.
#
Loqi [gRegorLove] #19 Add support for IndieAuth metadata endpoint
#
[schmarty] yeah it's not on you so much as like there's a lot of new must/should stuff that simply breaks compatibility older stuff including aaronpk's "flagship" indieauth.com
#
gRegor Yeah, and a lot of these need to keep things around so indie apps work, like I still advertise the auth and token endpoints in addition to metadata
#
[schmarty] i guess as long as you're not requiring `iss` during an oauth dance without an `indieauth-metadata` endpoint...
#
gRegor 'iss' is only required if there's a metadata endpoint
#
gRegor So that should backcompat well
#
[schmarty] (no ia-meta means no `issuer` means no `iss`)
#
[schmarty] word yeah
#
[schmarty] gRegor++
#
Loqi gRegor has 7 karma in this channel over the last year (48 in all channels)
#
[schmarty] in that case, as you said: thanks for making the first spec-compliant client to test my server against 😂
#
gRegor I'm gonna resists indieauth.rocks tests as tempting as it is right now. too many things, haha
#
gRegor it's hard when you feel on a roll though
#
[schmarty] sometimes inertia is the only way!
#
gRegor Added autocapitalize=off on the sign in field
#
[schmarty] aha, thanks!
#
[schmarty] still wishes iOS safari would autocomplete URL inputs https://martymcgui.re/2020/05/25/a-hole-in-browser-autofill-support/
zanne, alecj and alecjonathon joined the channel
#
GWG gRegor: It let me log in
alecjonathon joined the channel