#dev 2024-05-12

2024-05-12 UTC
ttybitnik joined the channel
#
cophee hey all! trying to get search set up on my 11ty static website to look like the image attached
#
cophee does anyone have a direction they can point me in for the dynamic filtering for checkboxes/search queries?
#
cophee https://cdn.discordapp.com/attachments/866577430886350869/1239026640600957019/image.png?ex=66416cfb&is=66401b7b&hm=d5a151bb56f980e036db3331b0a5be311d6dd7d6d2697c7f09cca29534605abc&
#
cophee just found this (https://pagefind.app/), might try and see if I can figure it out
PuercoPop joined the channel
#
havenmatt It looks like micropub.rocks doesn't support PKCE? Are there any other validators out there that do support PKCE I could use to test my site?
gRegor joined the channel
#
[tantek] ^ aaronpk
GuestZero, nikkin, [Paul_Robert_Ll], [tantek], danielpietzsch, laker and barnaby joined the channel
#
GWG aaronpk: The FedCM thing, where are browsers other than Chrome on it?
#
aaronpk https://developer.mozilla.org/en-US/docs/Web/API/FedCM_API
byjp joined the channel
#
aaronpk the FedCM API is in firefox (i forget whether it's behind a flag) and safari has publicly voiced support for it but tbd on shipping it
#
aaronpk the IdP registration API is only in chrome i think
#
aaronpk here's a recent state of fedcm presentation https://blog.timcappalli.me/p/preso-osw24-fedcm101/
#
capjamesg aaronpk++
#
Loqi aaronpk has 37 karma in this channel over the last year (120 in all channels)
#
capjamesg Very cool demo!
#
aaronpk https://media.aaronpk.com/2024/05/12073108-9740.png
#
GWG aaronpk: What were you thinking WordPress IndieAuth might do? Just add support?
#
aaronpk yep wordpress indieauth plugin is in a great position to build this in so that the wordpress site could register as an IdP in the browser
#
GWG aaronpk: I'm willing to give it a try
#
byjp Hi folks! capjamesg suggested I ask in here if anyone has considered a microformat (or other indexable method) for sharing recommendations for independent retailers or — more generally — products and services. (I have some context ready, but I don't want to spam the channel!)
#
capjamesg What is a review?
#
Loqi A review is a post evaluating a product, service, or experience, usually involving a written description, sometimes with summary numerical evaluations, also known as just a rating if it’s just a single numerical value or iconic representation like stars (★★★★☆) https://indieweb.org/review
#
capjamesg That page may be helpful ^
#
aaronpk i just wrote up notes about my demo https://aaronparecki.com/2024/05/12/3/fedcm-for-indieauth
#
byjp Thanks capjamesg — I just realised my own reviewes were missing the h-review tag! I just added it (example: https://www.byjp.me.test/posts/reviews/movies/barbie/) — but I guess I’m back to the bootstrapping problem: if no-one else is/is interested in posting reviews of products/services, then there’s no data to index to offer recommendations.
#
byjp I’ll try to add my own reviews of things like that in the coming weeks, to see if it’s useful to others — though I suppose the major issue would be what kind of a taxonomy to use to allow people to find things. Has anyone here thought about cross-site taxonomies/ontologies for the IndieWeb?
[Murray] joined the channel
#
[Murray] [aaronpk] what format is the video in you FedCM post using? (I have a recurrent issue on Firefox with videos "playing" but getting stuck on a specific frame, so just trying to debug; I think this is a me-specific issue, not something on your end)
#
[Murray] to be specific: I see it's an .mp4, but what is the audio codec and what was the capture process (roughly), if you don't mind 😅
#
aaronpk quicktime to capture, then ran it thru ffmpeg with no options to convert to mp4
#
aaronpk ffmpeg -i in.mov out.mp4
#
[Murray] awesome, thanks. QuickTime appears to be a common thread, so that's a useful additional data point 🙂 Also, sorry I couldn't watch along with IWC this weekend, but this looks awesome and I'd definitely be interested in using it with http://webmention.io as a test case aaronpk++
#
aaronpk the trick is going to be figuring out what to run as the indieauth IdP
#
aaronpk any chance you have already built your own indieauth server?
#
[Murray] unfortunately not, I'm using your indielogin and RelMeAuth at the moment
#
[Murray] actually, just realising, what that work? Or is this full-fat IndieAuth only?
#
aaronpk this requires something is an indieauth server
#
aaronpk i don't really want to add it to indieauth.com but that is the shortest path
#
[Murray] well, at some point this year I'm hoping to re-explore indieauth properly, but likely not a useful guinea pig (for now) 😉
#
[Murray] also, Loqi?
#
[Murray] aaronpk++
#
Loqi aaronpk has 38 karma in this channel over the last year (121 in all channels)
#
capjamesg What is Loqi?
#
Loqi Loqi is a friendly and useful bot/digital therapist present in the IndieWeb discussion channels https://indieweb.org/Loqi
#
capjamesg Loqi! ☺️
#
[Murray] there they are. I wonder why the previous one didn't work. Message too long?
[snarfed] joined the channel
#
[snarfed] aaronpk great FedCM experiment project, thanks for writing it up! I hadn't grokked that it lets sites register to be IdPs like that. seems like it could be useful in the fediverse to improve the remote follow UX problem, ie your instance could register as your fediverse IdP, and then other fediverse instances could pop that up as a login option instead of making you type in your instance...?
#
[Murray] oh that would be great
#
[tantek] [snarfed] that remote follow thing is basically a subset of web actions- it's much broader than "fediverse"
#
[snarfed] sure, of course, just one example use case
#
aaronpk yep definitely fediverse implications for this too!
#
GWG aaronpk: Did you write any thoughts about how FedCM might work with an IndieAuth implementation? For example, can I just add a privacy policy and terms of use to the existing metadata endpoint?
#
aaronpk my next step is to actually add it to an indieauth provider
#
aaronpk i think i need to speedrun building out the indieauth.com replacement
#
GWG aaronpk: What would the replacement be like?
#
aaronpk i have some thoughts
#
GWG aaronpk: I'm curious when you are ready to share, but will wait
#
aaronpk i need a good name for it
#
aaronpk the hardest part
#
aaronpk i decided i don't want to use a name that has indieauth in it at all
#
GWG How about...Ingress?
#
GWG I've always wanted to name something Hurdy Gurdy
#
aaronpk i guess i could first try making my own website a fedcm provider, that will be faster
#
aaronpk faster way to test what it takes to add it to a real indieauth server instead of the hack i did for the demo
#
GWG aaronpk: I look forward to learning more.
#
pcarrier I'd love to hear what it'd take to make a minimal server, totally down to integrating eg email based auth at the toggle of a switch on xmit.co
#
aaronpk an indieauth server? this might be a bit out of date but you can look at this as a minimal example https://github.com/Inklings-io/selfauth
geoffo and bterry joined the channel
#
pcarrier I might be lost in the terminology. Is indieauth effectively a specific way to implement a standard OIDC IdP?
#
pcarrier I wonder how long crawlers will fall into https://srv.us/tarpit ; might want to build stats, could make for an interesting post
#
aaronpk it's not OIDC, but it's another way to add identity on top of oauth
#
pcarrier OK OK. are there are big fishes who let you log in with your own provider?
#
aaronpk well tailscale.com lets you bring your own OIDC provider, but that's unusual even for OIDC
#
aaronpk but no generally "bring your own IdP" is only in the enterprise world
#
pcarrier oh yeah, that's because they opened SSO, otherwise tons of people do, it's "just" an enterprise feature
#
GWG aaronpk: FedCM could in theory change that, couldn't it? Again, in theory
#
aaronpk yes, i am hoping so
#
pcarrier I guess I'm hoping the choice between Google vs Apple vs Twitter vs GitHub evolves toward most people entering what they think of as their email address / selecting it from a list as you demoed
#
aaronpk the reality is every website lets you bring your own provider, they just don't think of it that way
#
aaronpk since nearly every website lets you log in with an email address, they're technically already letting you bring your own IdP, since you can run your own email server
#
pcarrier this 🙂
#
aaronpk so it's really more of a mindset shift rather than anything technical to change that to actually bringing your own functional OAuth IdP
#
pcarrier except not involving links being passed around in SMTP and clicked on in mailers
#
aaronpk so i'm trying to popularize this IdP registration feature and position it as equivalent to email login but without all the UX friction
#
GWG aaronpk: Tailscale does? That's interesting
#
aaronpk yeah it's basically self-serve enterprise SSO but what's interesting is you can actually create your account this way
#
aaronpk normally you would first create an account, then buy the enterprise plan, then add the SSO config
#
pcarrier I'm more and more on the side of not providing _any_ identifiers when I sign up for something. I like the balance I struck with https://xmit.co: you can give me your contact details if you want to, but you can get started without my knowing anything about you other than a public key…
#
aaronpk yeah i hope more sites move to that with passkeys, but the reality is a lot of sites will want an account recovery method, the easiest of which is an email address
#
pcarrier then one could imagine attaching arbitrarily many "proven identities" through IdPs to their acount
#
GWG aaronpk: I am using Wireguard, but not Tailscale. Is there an advantage? A bit off topic, but curious.
#
pcarrier yeah tailscale does NAT hole punching like nobody
#
aaronpk tailscale is a nice fancy management layer around wireguard
#
pcarrier https://tailscale.com/blog/how-nat-traversal-works
#
pcarrier [edit] https://tailscale.com/blog/how-nat-traversal-works
#
aaronpk much easier to configure, and better apps too
#
GWG Maybe I'll think about it
#
aaronpk heh you can create an account on xmit.co with a passkey then remove the passkey from your account, making it impossible to log back in
#
aaronpk this is basically the login/signup flow i'm going to do for the new indieauth service tho
#
pcarrier aaronpk[d] nothing is impossible 🙂
#
pcarrier aaronpk[d] if you have anything to recover, I can identify your account, and give you a one-time login link
#
aaronpk nah i was just messing around
#
pcarrier as one should 😉
#
pcarrier (you can prove your identity to me by providing me with an API key and/or making a change in DNS and/or having a contact detail stored in your account and/or have one on the website you published)
#
pcarrier (providing an email is the most straightforward solution for everybody, so I might hint a bit at that approach on first login, but it'll always be skippable)
#
pcarrier I don't hate it
#
pcarrier https://cdn.discordapp.com/attachments/866577430886350869/1239305638543101982/image.png?ex=664270d1&is=66411f51&hm=db41ba2ccb3d7cf0c78be34b3b6125618ec7c49565754d2805003bc306334d78&
#
aaronpk yeah they did a pretty good job
#
aaronpk i was actually able to add a tiny bit of code to my indieauth server to make it work with this
ttybitnik and byjp joined the channel
#
byjp Hey folks, a chat in #indieweb earlier today made me write up a prototype I’ve been working on to bring distributed search to the IndieWeb. I’d appreciate any thoughts or feedback on this bit of fun I’m having! https://www.byjp.me/posts/indiesearch/
#
cophee byjp: Great! I’ll add the <link> ref to my branch with Pagefinder when I’m free from assignments
gRegor joined the channel
#
cophee as for mobile/tablet, what if it was similar to something like Omnivore web? (i.e. allowing users to add + store websites on the site)
#
cophee https://omnivore.app/
#
IWDiscord <c​ophee>
#
cophee as a side note, it’s a pretty great rss reader!
#
cophee the text to speech feature is surprisingly good (I use the voice profile Echo)
#
[Murray] Oh Omnivore looks interesting. Do you know if you can take notes directly on a webpage via the browser plugin? Or export those notes in something like Markdown or just plain text format? I currently use (and enjoy) Readwise Reader, but always on the lookout for alternatives
influous left the channel
#
cophee [Murray]: Oooh I think the notes are taken on the omnivore.app hosted site or mobile app where the pages are saved to
#
cophee I'm not sure whether exporting notes is a feature yet –– haven't played around with that myself
#
cophee But it's open source, so could always be a potential feature 😄
geoffo and [KevinMarks] joined the channel
#
[KevinMarks] Do you want http://web-it.me for your new Indieauth service [aaronpk]?
#
aaronpk haha no thanks