#dev 2023-11-06

2023-11-06 UTC
jeremycherfas joined the channel
#
gRegor GWG, Ticketing for IndieAuth progress! https://gregorlove.com/2023/11/i-now-have-the/
#
Loqi [preview] [gRegor Morrill] I now have the building blocks for Ticketing for IndieAuth set up. On my staging site, the metadata endpoint now advertises the ticket_endpoint. That endpoint is accepting POST requests with parameters: ticket, resource, and subject. If the request ...
#
GWG gRegor++
#
Loqi gRegor has 26 karma in this channel over the last year (73 in all channels)
#
GWG gRegor: Any thoughts about the protocol?
#
gRegor The implementation was pretty easy so far, which was nice.
#
gRegor Not a lot of other thoughts yet. `ticket` does seem pretty similar to `authorization_code` functionally, but it makes sense to have different names.
#
GWG gRegor: Solicited vs unsolicited
#
GWG I'm hoping we iterate on easy
#
gRegor When the ticket is redeemed for a token, that resposne still has `me` in it right?
#
GWG gRegor: Still under discussion
#
GWG Issuer is an alternative
#
GWG gRegor: https://github.com/indieweb/indieauth/issues/127
#
GWG https://github.com/indieweb/indieauth/issues/85
#
Loqi [preview] [dshanske] #127 Where does the ticket endpoint go looking for the token endpoint?
#
Loqi [preview] [aaronpk] #85 Do we need to add client_id to ticket auth requests?
#
GWG But yes, it should have a me in it to my understanding.
#
gRegor Is rel=token_endpoint correct in this first line? https://indieweb.org/Ticketing_for_IndieAuth#Discovery It doesn't seem to be referenced in the rest of that section.
#
gRegor Like, can tickets be sent to token_endpoint as a fallback?
#
gRegor It seems like maybe that line was intended to say rel=ticket_endpoint
#
GWG gRegor: No, it isn't a mistake. This is a resource
#
GWG Ticket endpoints are under the control of the consumer.
#
GWG But it is definitely in need of clarification.
#
GWG Let me have a crack at it.
#
gRegor Ahh, I see. Yeah it's a pre-req for the consumer to redeem the ticket.
#
GWG gRegor: Refresh now. I think I explained it as an implementation detail.
#
GWG That is under discussion
#
gRegor looks good
#
gRegor I'm trying out adding `iss` and will comment on github
#
GWG When I looked at this last month, when capjamesg got me motivated to start another push at this, I looked at my issuer URL and discovered you can't actually find the metadata endpoint on mine...which makes me think that IndieAuth should note that as a requirement. That your issuer URL have the metadata header in it.
#
GWG I'm working on my IndieAuth endpoints right now. I sort of bolted on the metadata endpoint initially when we adopted it and want to cut out some redundant code as a result, so I can make Ticket auth easier.
[aciccarello], geoffo, OlegFedak, [0x3b0b], gerben, Fisher24459953, Fisher2445995, Fisher24459959, Fisher24459956, Fisher24459950 and barnaby joined the channel
#
[KevinMarks] https://blog.jim-nielsen.com/2023/as-good-as-html/
CRISPR joined the channel
#
aaronpk wtf i was going to go start workign on adding gitlab to indielogin.com but it says my account is blocked
#
sknebel huh. did you go over some limits when they downgraded the free tier or blocked-blocked?
#
aaronpk no idea, i don't even think i ever used the account other than to comment on things
#
sknebel weird
#
aaronpk i don't have any emails about it either
#
aaronpk https://gitlab.com/aaronpk
#
aaronpk https://web.archive.org/web/20211007011548/https://gitlab.com/aaronpk
#
aaronpk apparently i was blocked in 2021, a year after creating the account. i wonder if they just auto block inactive users??
#
aaronpk seems weird
#
aaronpk well i just submitted a support request, we'll see what they say
#
sknebel hm, I wouldve expected my account to have been also inactive for a year at some point
#
aaronpk not a good sign for me running this oauth client
#
sknebel heh
#
aaronpk hey i'm not the only one who removed twitter login support https://docs.gitlab.com/ee/integration/twitter.html
#
aaronpk "This feature was deprecated in GitLab 16.3 and is planned for removal in 17.0"
StarrWulfe, [campegg] and [schmarty] joined the channel
#
aaronpk update: "Your account was automatically flagged by our anti-abuse detection tools"
#
[schmarty] 😒
barnaby joined the channel
#
aaronpk Not reassuring
barnabywalters and [Paul_Robert_Ll] joined the channel
#
[Paul_Robert_Ll] About as reassuring as that time they accidentally deleted everyone’s data 😏
barnaby, AramZS, [benatwork], gRegor, gRegorLove_, CRISPR, tbbrown, gRegorLove__ and [campegg] joined the channel
#
[tantek] 😮
#
[Paul_Robert_Ll] https://about.gitlab.com/blog/2017/02/10/postmortem-of-database-outage-of-january-31/
#
[jacky] seeing this project puts a lot of validation towards what I've been tinkering on https://codeberg.org/bovine/mechanical_bull
#
[jacky] but also makes me feel less bad about not having anything to show (it's for me tbh but intended to sharing)
#
[jacky] (that's a composable ActivityPub server; I'm looking to do the same with IndieWeb stuff)
neceve joined the channel
#
[tantek] database antipattern << https://about.gitlab.com/blog/2017/02/10/postmortem-of-database-outage-of-january-31/
#
Loqi ok, I added "https://about.gitlab.com/blog/2017/02/10/postmortem-of-database-outage-of-january-31/" to the "See Also" section of /database-antipattern https://indieweb.org/wiki/index.php?diff=90410&oldid=86203
eb, vikanezrimaya_, Kaja_, Zegnet, dustinm`_, ancarda, capjamesg, srushe, vikanezrimaya, alecjonathon, bret, aaronpk, [tantek], [snarfed], gRegorLove_, geoffo, [nsmsn], CRISPR and AramZS_ joined the channel