#dev 2025-09-05

2025-09-05 UTC
#
[tantek] [snarfed] I think activitypub-html-discovery is a related but orthogonal discovery problem (that doc does not mention OAuth). I believe the goal is to verify whether a Mastodon-specific OAuth flow would work with the link the user has provided. Nodeinfo sounds like the User Agent String for distributed social web servers (noting that's hosted on a diaspora named domain which is interesting).
grufwub joined the channel
#
btrem Answering my own question, in case anyone is curious: it seems I can't install a Let's Encrypt certificate in a ddev container. Reason: I need to run snapd. While I can install snapd inside the container, snapd cannot see outside the container, and thus can't install a certbot ACME client. Alas.
#
[snarfed] ah ok. for OAuth specifically capjamesg I fetch `/api/v1/instance` and do some minor sanity checks on the `version` field. there's probably a better way
#
[snarfed] https://github.com/snarfed/oauth-dropins/blob/b9f668af0fd888e371218c5a5c8ed2cd12863fdb/oauth_dropins/mastodon.py#L250-L299
#
[snarfed] for starters, I should probably switch to checking `source_url`, as mentioned above, instead of `version`
#
[snarfed] software sniffing heuristics, whee
#
[snarfed] ...but also, lots of fediverse software implements the Mastodon API, so consider just trying whatever domain they enter, instead of trying too hard to limit to specifically just Mastodon
#
[tantek] yo! capjamesg and other RelMeAuth implementers, Wikimedia has an OAuth endpoint, and Wikipedia User: pages support rel=me!
#
[tantek] E.g. https://meta.wikimedia.org/w/index.php?title=Special:OAuth
#
[tantek] That would be great if I could auth via my Wikimedia login and not just GitHub
#
[tantek] cc aaronpk
#
[tantek] here is an example client of Wikimedia OAuth (i.e. it redirects to Wikimedia to log you in and ask for OAuth permissions) https://xtools.wmcloud.org/ec/en.wikipedia.org/Tantek
#
btrem [tantek]: I have a wikipedia account, but no user page. If I select the obvious links to create such a page, I get a blank editing window. Where do I add a link to my website with `rel=me`?
#
[tantek] blogged it here: https://tantek.com/2023/139/t1/wikipedia-supports-indieweb-rel-me
#
btrem I looked at your wikipedia user page, and the link to your personal website has rel=nofollow, but not rel=me.
#
Loqi [preview] [Tantek Çelik] Wikipedia.org (@wikipedia@wikis.world @wikipedia) now supports #IndieWeb rel-me!^1 Thanks to @taavi.wtf (@taavi@wikis.world) for the #MediaWiki RealMe extension^2 Added it to my #Wikipedia User: page https://en.wikipedia.org/wiki/User:Tantek View s...
#
[tantek] btrem, bad logic, can't falsify from a single example "the link". you must falsify all examples to falsify.
#
btrem Huh?
#
[tantek] logical error: one "the link" not having something doesn't mean all links don't have something
#
btrem Uh, right.
#
btrem That's a strange way to contradict me. But ok.
#
btrem I was looking at the link in the sidebar. I'll look elsewhere, and try to figure it out on my own. Thanks anyways.
#
[tantek] explaining the logical flaw in your statement to discourage the logical flaw in the future
#
btrem Cool cool.
#
[tantek] rather than look for something not being there, look for the thing, i.e. view source and look for rel="me"
bterry2 joined the channel
#
btrem Well, I can't find rel="me" in the source. Looked at html source, and in developer tools generated source. So back to square one. No matter.
#
[tantek] I just double checked it in a private browser window
#
[tantek] It's right there in a link element
#
[tantek] Also noted in my blog post how to find it
#
[tantek] What is rel-me
#
Loqi Using rel=me on a hyperlink indicates that its destination represents the same person or entity as the current page, which is a key building-block of web-sign-in, IndieAuth, and ✅ distributed identity verification https://indieweb.org/rel-me
#
[tantek] The microformats parser finds it: http://pin13.net/mf2/?url=https%3A%2F%2Fen.wikipedia.org%2Fwiki%2FUser%3ATantek
#
[tantek] "me": ["https://tantek.com/"],
#
[tantek] added an online tools section to the rel-me page so it's easier to find the rel=me links on a page: https://indieweb.org/rel-me#Online_tools (cc btrem)
geoffo, kelson42, gotra and [Al_Abut] joined the channel
#
doesnm [snarfed]: what's wrong with pixelfed?
fluffy joined the channel
#
[tantek] context?
#
doesnm https://github.com/snarfed/oauth-dropins/blob/b9f668af0fd888e371218c5a5c8ed2cd12863fdb/oauth_dropins/mastodon.py#L252
#
[snarfed] doesnm https://github.com/snarfed/oauth-dropins/blob/main/oauth_dropins/pixelfed.py
#
doesnm wait it's inherit from mastodon with some patches?
#
doesnm btw one my friend are interested in indieauth with mastodon
fluffy joined the channel
#
capjamesg aaronpk It would be cool if indie login passed on information about the service that you are signing in to.
#
doesnm what is h-app
#
Loqi https://indieweb.org/h-app
#
doesnm dfn is broken?
#
capjamesg What is h-x-app?
#
Loqi https://indieweb.org/h-x-app
#
capjamesg Hm.
Guest6_, srazkvt, failxontour, leo60228, bterry, barnaby and grufwub joined the channel
#
aaronpk capjamesg: it's actually a common problem with enterprise social login too! I am working on a spec for it, trying to find other people interested in solving it
#
capjamesg That's exciting!
#
doesnm isnt LDAP are enough now?
grufwub, failxontour, thegreekgeek_, gotra, barnaby, strugee, ttybitnik, angelo, CrimeWave, [KevinMarks] and doesnm joined the channel