#dev 2024-05-15

2024-05-15 UTC
geoffo, [Joe_Crawford], IWSlackGateway, [Joel_Auterson], [jeremycherfas], [qubyte], [Al_Abut], [tantek], [KevinMarks], [Paul_Robert_Ll], [Jo], [snarfed], [campegg], laker, Maxpm, sebbu, schmudde, barnaby, gRegorLove_, [byJP], Guest6 and jacky joined the channel
#
aaronpk woohoo, i have my website set up as a FedCM provider using IndieAuth now!
#
Loqi :D
#
capjamesg aaronpk++
#
Loqi aaronpk has 39 karma in this channel over the last year (121 in all channels)
#
capjamesg Will there be an accompanying blog post?
#
capjamesg (I know that’s a big undertaking.)
#
aaronpk i have this already https://aaronparecki.com/2024/05/12/3/fedcm-for-indieauth
#
jacky I wish/wonder if this could be shimmed in some way by a browser extension even if it failed to gain adoption
#
aaronpk i'm confident enough it will ship
#
aaronpk the trick is to make sure the IdP registration feature is important enough to stick around past the experimental stage
#
aaronpk i'm adding support to webmention.io right now, that will be a good demo
#
jacky good idea
#
jacky another reason to have good public projects: to help ship other efforts along
#
jacky aaronpk++
#
Loqi aaronpk has 40 karma in this channel over the last year (122 in all channels)
#
aaronpk the most helpful thing to do right now is add support for consuming the FedCM "any" mode
#
aaronpk in case you want to help
#
jacky was looking for a reference point of any and found https://blog.timcappalli.me/p/preso-osw24-fedcm101/OSW24-FedCM101.pdf (slide 50) from your post
#
jacky I think I need more reading about this
#
aaronpk yes, it is extremely early days
#
jacky but it looks like it incorporates https://developer.mozilla.org/en-US/docs/Web/API/FedCM_API/IDP_integration for setting it up on one's site
#
aaronpk i don't think the IdP registration feature is on MDN yet
#
aaronpk it's also only in chrome canary at the moment, but they might have got it out in the chrome release yesterday
#
jacky ahhh gotcha
#
aaronpk oh wait no i think it was multi-idp that they were about to ship in chrome
#
starrwulfe 🤔 how easy would it be to make a Wordpress plugin for this 🤔
#
[tantek] @snarfed++ thanks for the update to include u-featured in docs!
#
Loqi @snarfed has 53 karma in this channel over the last year (97 in all channels)
#
aaronpk starrwulfe it should be pretty easy to add it to the wordpress indieauth plugin
#
aaronpk this latest attempt at adding it to my website was to test how easy it is to add to an existing indieauth server
#
[tantek] 48 hours until tell Tantek to review https://brid.gy/about#picture for u-featured vs u-photo vs u-video and file any necessary PRs to tweak, edit /u-photo and /u-video accordingly
#
Loqi I added a countdown scheduled for 2024-05-17 3:09pm UTC (#7107)
#
aaronpk guess i should start a wiki page
#
aaronpk what is FedCM?
#
Loqi It looks like we don't have a page for "FedCM" yet. Would you like to create it? (Or just say "FedCM is ____", a sentence describing the term)
#
aaronpk FedCM is a browser API for logging in to websites using external identity providers, and has an experimental feature "IdP Registration" which can let your own website be an identity provider to any website using IndieAuth
#
Loqi ok
jonnybarnes joined the channel
#
[tantek] Idpregistration++
#
Loqi Idpregistration has 1 karma over the last year
#
aaronpk well this is cool
#
aaronpk i have it working on webmention.io now
#
aaronpk (well the dev copy at the moment)
jonnybarnes and gRegorLove__ joined the channel
#
aaronpk it's almost a little too good
[schmarty] joined the channel
#
[schmarty] suspiciously good??
#
[schmarty] i will probably wait for support to land in more browsers but i have some hopes that this FedCM/IdP would be a good way to do protected content on my personal site where i can encourage folks to use their own domain but also they can ignore me and just use their google account and still get access.
#
aaronpk def early days still
#
aaronpk the only downside to that plan is you'll still have to register for google client id/secret to use sign in with google
#
aaronpk https://media.aaronpk.com/2024-05-15-webmention-io-fedcm-login.mp4
#
[snarfed] aaronpk++ great inspiration re FedCM, love it!
#
Loqi aaronpk has 41 karma in this channel over the last year (123 in all channels)
#
[snarfed] I'm still working my way through the docs, but one part of the RP flow with navigator.credentials.get() that confused me was that it sounded like the RP had to request a specific IdP
#
aaronpk yep that's the current public version
#
[snarfed] ...which would seem to somewhat defeat the purpose. I assume that's just me misreading the docs? ie the RP can say "I want to use any available login" ? or "I want a login in this category or tag" ?
#
aaronpk the experimental feature is `configURL: "any"` which is only in chrome canary
#
[snarfed] aha ok, I assume that's the part you depend on right now?
#
aaronpk that's the "IdP Registration" API
#
aaronpk yeah
#
[snarfed] since otherwise RPs would have to ask for http://aaronpk.com specifically
#
[snarfed] ok thanks
#
aaronpk here's the webmention.io source https://dev.webmention.io/js/fedcm.js
#
[snarfed] do you know if there will be any way to "filter" configURLs? eg "give me any personal web site login," or "give me any fediverse login"
#
aaronpk that's all tbd at the moment
#
aaronpk other filters: university IdPs, enterprise IdPs, open banking, etc
#
aaronpk "give me your home assistant login" too
#
[snarfed] yes!
#
[snarfed] hopefully those categories could be user-defined, not a hard coded taxonomy in the spec itself
#
[snarfed] regardless, glad to hear that's on the table
#
aaronpk it's on the table because i'm asking for it :D
#
aaronpk yeah it wouldn't be hardcoded
#
aaronpk the university and open banking use cases could be covered by providing a "federation URL", which confusingly has nothing to do with fediverse federations
#
[snarfed] yay thank you 😁
#
[snarfed] hah
#
aaronpk but yeah i think we need some sort of open "type" filter that websites can opt in to. really what webmention.io should be asking for is an indieauth IdP, not "any" IdP
#
aaronpk and an IdP should be able to register as one or more types
#
cophee I think I got Webmentions working on my site (?)
#
cophee But it didn't remove the test comment I had on here when I deleted it off webmentions.io
#
cophee https://wingpang.com/writing/2024-05-12-decapcms/
#
aaronpk it looks like the comment is being rendered in the HTML, so are you fetching it from webmention.io when the page is loaded or caching it somewhere?
#
cophee aaronpk: I think it's cached!
#
aaronpk i see it's deleted in webmention.io so it's up to you to delete it from your storage too
#
cophee aaronpk: Ooo got it!
#
cophee Thank you
#
aaronpk if you want to be fancy, you can set up a web hook in webmention.io and it will make a POST to your server when you delete a webmention
#
aaronpk https://webmention.io/settings/webhooks
#
cophee aaronpk: I'll take a look at it later down the line!! Gotta sleep now
#
capjamesg pcarrier[d] ++ very cool demo!
#
Loqi pcarrier[d] has 1 karma in this channel over the last year (6 in all channels)
#
capjamesg Where is the public key stored? The browser? Do you make them?
#
pcarrier capjamesg[d] in 1pw.me the keypair is derived from the password, and in 0pw when you POST a payload it gets stored under a blob named after the public key
#
pcarrier so backend-side, the blob name in minio; client-side, nowhere
#
pcarrier capjamesg[d] https://github.com/xmit-co/1pw.me/blob/main/src/app.tsx#L31C10-L50C12 for the password->seed derivation
#
pcarrier then the seed is used in nacl.sign.keyPair.fromSeed(seed) and nacl.box.keyPair.fromSecretKey(seed)
#
pcarrier I haven't decided to open source the backend of xmit yet and 0pw's backend is baked in, but the logic is straightforward: https://gist.github.com/pcarrier/f7d2e97fd5f0dc8dca542ca9b610be73
#
pcarrier [edit] I haven't decided to open source the backend of xmit yet and 0pw's backend is baked in, but the logic is straightforward: https://gist.github.com/pcarrier/f7d2e97fd5f0dc8dca542ca9b610be73
#
aaronpk making progress on the FedCM wiki page... gotta take a break for some meetings now
#
[tantek] what is FedCM
#
Loqi FedCM is a browser API for logging in to websites using external identity providers, and has an experimental feature "IdP Registration" which can let your own website be an identity provider to any website using IndieAuth https://indieweb.org/FedCM
#
aaronpk what is FedCM for IndieAuth?
#
Loqi https://indieweb.org/FedCM_for_IndieAuth
#
aaronpk what is FedCM for IndieAuth?
#
Loqi FedCM for IndieAuth is a guide intended to help IndieAuth developers add support for the FedCM APIs, including the IdP Registration feature that enables FedCM to be used with IndieAuth https://indieweb.org/FedCM_for_IndieAuth
#
aaronpk better
[Paul_Robert_Ll], [Stefan_Rudersd] and geoffo joined the channel
#
[tantek] 👍
geoffo joined the channel
#
pcarrier capjamesg[d] flickering to black happens with md and/or html? what were you typing in?
#
capjamesg A p tag and a b tag.
#
capjamesg <p><b>This is a test</b></p>
[Jo] joined the channel
#
pcarrier in markdown or html?
#
pcarrier can't repro any flickering. which `navigator.userAgent`?
#
capjamesg HTML
#
capjamesg Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36
#
pcarrier ah yes, strange!?
geoffo joined the channel
#
pcarrier I think you're experiencing the loading of a page on keystrokes. it's fast but not that fast.
#
capjamesg Right.
[capjamesg] joined the channel
#
pcarrier well, I'm not sure I can think of a way to prevent that
#
pcarrier https://joyofcode.xyz/avoid-flashing-iframe
#
pcarrier [edit] https://joyofcode.xyz/avoid-flashing-iframe
#
pcarrier capjamesg[d] could you confirm the issue is gone for you?
[Joe_Crawford] and gerben joined the channel
#
pcarrier got a functional backend. everything is just so fast 😄