#dev 2023-09-29

2023-09-29 UTC
[schmarty] joined the channel
#
[schmarty] aaronpk omg Monocle is all php short tags :zany_face:
#
aaronpk ohh
#
aaronpk new server new php config
#
aaronpk wait tha's weird i didn't move monocle
#
aaronpk oh wait you don't mean my instance of it
#
[schmarty] haha it's working fine on http://p3k.io. i just started setting up my own and was like "oh no what is wrong with all this leaky php"
#
aaronpk haha
#
[schmarty] only 167 lines to change let's go :cracks knuckles: :logs out: :closes laptop: :goes to bed early:
#
aaronpk or one line of php config :P
#
[schmarty] i didn't wanna do it, but i did the php config change
nertzy and AramZS joined the channel
#
gRegor embrace the short tag :)
#
[tantek] oh is that what is tripping up my PHP 7 -> 8 transition?
#
aaronpk it's not really a version difference, but the default setting changed from on to off
#
aaronpk at some point a long time ago
gRegorLove_ and gerben joined the channel
#
[tantek] well if it was a long time ago then it's unlikely to be the source of 7->8 breakage
[Jo], [jeremycherfas], AramZS, rocto, geoffo and gxt joined the channel
#
aaronpk sebbu: OAuth step-up authentication spec https://www.rfc-editor.org/rfc/rfc9470.html
#
aaronpk in particular: https://www.rfc-editor.org/rfc/rfc9470.html#name-authentication-requirements
#
aaronpk the max_age parameter
#
sebbu oh, the first one is why they ask to auth me again on CI sites when i first try to add a private repo
#
sebbu (since previously they had only asked for the public repo access)
#
sebbu and max_age is probably to prevent accessing it several days later, while not reasking auth for normal operations :)
#
sebbu thx
#
sebbu aaronpk++
#
Loqi aaronpk has 42 karma in this channel over the last year (112 in all channels)
mooff and chenghiz_ joined the channel
#
[snarfed] yeah max age/re-authing seems different from adding scopes/permissions that weren't previously granted (sebbu's case here)
#
[snarfed] (not sure which is "step-up")
#
Soni does anyone feel strongly about shoving feed authentication into username:password@ ?
#
sebbu several (if not all) browsers removed protocol://user:pass@domain/
#
sebbu only protocol://domain/
#
sebbu (well, and the facultative port)
#
sebbu i personally quite liked it, it was good for tests of auth, i could just click an invalid auth to log out, then switch account easily
#
Soni okay good so we'll reserve it for future use
#
Soni (fun fact: we already use username:password@ for web+ap, specifically for tags. a la web+ap://tag:FediLinks@chaos.social/tags/FediLinks )
#
Soni (not documented and mostly unsupported but anyway)
#
[snarfed] for podcast feeds, you may not really care about browsers, only about the HTTP libs that podcast apps use
#
aaronpk user:pass is a dying authentication mechanism in general, i would not build new things with it
#
Soni exactly: we're not using it for authentication
#
Soni (mostly because activitypub authentication is incompatible with URI-style authentication)
#
Soni (so if it's incompatible, we may as well repurpose it for something useful)
#
Soni (tags are not an activitypub *object* but they're a widely supported feature. we figured we may as well encode them in URIs somehow.)
AramZS joined the channel
#
sebbu libs also removed it
bret and angelo joined the channel
#
Soni you work with what you have, and the way fedilinks works makes web+ap://tag:FediLinks@chaos.social/tags/FediLinks really convenient
#
Soni (but really web+feed and/or web+wordpress are more relevant to indieweb)
#
Soni can you imagine a web where ACE/RCE/fingerprinting/non-consensual eyeball usage are no longer much of a thing
jeremycherfas, Renfield and kleb joined the channel