#dev 2024-12-02

2024-12-02 UTC
JadedBlueEyes, claudinec, [snarfed] and bterry joined the channel
#
carrvo It is feasible! I mean, it is feasible to get Apache HTTPd to authenticate a user (before the app) with existing modules (not writing one)! 'Course my first prototype has a huge security hole...
#
carrvo It works like this: follow indieauth-client-php (configuring all endpoints public), except the final step in the redirect is saved to a database instead of the session, then use mod_authnz_external to check their basic "username" against the database to see if they are actively logged in (touch the timestamp on the record).
#
carrvo Also, works better if user's don't enter the scheme part of the URL during Basic (or it will interpret anything after as the password, combined with the password field) and assume the scheme.
jjuran, [manton], GWG, gRegor, thegreekgeek, barnaby, ttybitnik, [morganm], [mattl], [Joe_Crawford], [aciccarello] and jjuran_ joined the channel
#
[Joe_Crawford] I love when I forget a post I wrote about a weird PHP behavior. Rediscover it. Share it. And THEN get feedback that prompts me to learn even more weird facts. https://lab.artlung.com/plus-plus-a-string-php/
#
gRegor Hah, that's great
#
[tantek] one weird PHP trick programmers don't want you to know
sebbu2 joined the channel
#
[Joe_Crawford] It's akin to the classic WAT JavaScript video.
#
jimw incrementing 5e0 to 6 is a good one. scientific notation ftw wtf!
#
[tantek] that's some numeric syntax trivia there
lazcorp, bret and eitilt joined the channel
#
[Joe_Crawford] jimw++ combining ftw and wtf is a WIN
#
Loqi jimw has 3 karma in this channel over the last year (4 in all channels)
eitilt, thegreekgeek_ and thegreekgeek joined the channel
#
gRegor [snarfed], Does Bridgy Publish not remember the Bluesky app password between uses? I'm using the interactive form
#
[snarfed] gRegor for interactive use, it doesn't have persistent sessions in cookies or anything like that, no
#
[snarfed] sorry
#
gRegor np, will it if I trigger publishing via webmention?
#
[snarfed] yeah that uses the stored app password, the auth is your site's SSL
#
[snarfed] we should really switch to OAuth now that they have that
#
Loqi definitely
#
gRegor Hm, where do we set the stored app password? I've changed mine after using the interactive form.
#
[snarfed] you can have multiple app passwords. did you invalidate your last one?
#
[snarfed] if you log in again with your account and a new app password, that will replace the old one
#
[snarfed] so you're probably already set
#
[snarfed] oh sorry nm
#
gRegor Ah ok. yeah I deleted the old one
#
gRegor Ok, signed in again and I'll try the webmention method next time. thanks!
barnaby, eitilt and bterry joined the channel