#dev 2025-11-03
2025-11-03 UTC
[Jo]4 joined the channel
# 
carrvo Are you writing your own token endpoint? I know that they feed a value back to SelfAuth to verify, but provide more on top.
# carrvo I have tested it with MinToken (built for SelfAuth), so the issue is more likely in the token endpoint.
# carrvo Maybe you have source code to share?
# [Jo]4 Yes I've tried it with mintoken too! But that just gives an invalid request error and no explanation :( maybe i have it set up incorrectly
# [Jo]4 I'm just using other people's solutions, idk enough about stuff to write my own. It's just selfauth itself unmodified (if I'm not completely mistaken) and the same for mintoken. If it's not uncommon for http://tokens.indieauth.com to not work with selfauth maybe i have mintoken set up incorrectly? Idk. Getting this error on indielogin
# [Jo]4 Whereas without the token endpoint linked in my homepage header it's fine (tho obv not useful in cases where i need that:/)
# carrvo Hmm. 400 sounds like there will be a log on the server side.
# carrvo 👀
# carrvo I'll take a look later because I have those two running myself.
# carrvo What is mindie?
# 
Loqi MIndie is a minimal, self-hosted IndieAuth solution for the home, developed and used by carrvo https://indieweb.org/MIndie
# carrvo I've slightly modified it (IDP component).
# carrvo Will try a logon too tomorrow.
# carrvo See if we can't figure something out.
dusted__, rosipov1, ben, ben__, oodani, DanQ, kirisutegomen92 and Saige_Leah joined the channel
# 
[schmarty] [Jo] this sounds similar to the issue I was having with indielogin. If it detects you have a token endpoint, it will use it, even when "just" identifying you, so a problem with the token endpoint will act exactly as you described.
# [schmarty] Hopefully there are logs to track down the problem. My first guess would be that mintoken doesn't know how to "look up" the authorization code from selfauth (or is having a communication problem doing so)
# [Jo]4 What was the problem with your token endpoint? Something similar?
# [schmarty] [Jo] in my case, indielogin was changed this year. Previously it was making the final "I have an authorization code please tell me who this belongs to" requests at the auth endpoint. Now, if it finds you have a token endpoint, it will instead make that final request to the token endpoint.
# [schmarty] (And my token endpoint did not allow those requests because they were missing data that it expected)
qbrack joined the channel
# [Jo]4 Ooh okay that makes sense
grufwub and [me1850] joined the channel
# 
[tantek] my /photo_hosting approach is now spread across three silo CDNs: Foursquare, Twitter, and Flickr 😆 such a hack
# [schmarty] pretty amazing that the hotlinked 4sq images have lasted so long. pretty amazing about twitter, too, honestly. would be cool to remove the dependency on the company formerly known as twitter.
# [tantek] the one I repaired yesterday I was able to switch to using a Flickr hosted image, because at the time (of photo post publication) I had used Bridgy Publish to POSSE the photo post to Flickr, so Flickr had an exact copy of the image that used to be on the 4sq CDN, so swapping in a new img src resulted in no user-visible change to the post.
# [tantek] [schmarty] I suspect that Twitter is sufficiently understaffed at this point that they do not have time for any techdebt or infrastructure "overhaul" projects that would involve changing their CDN URLs. not a great way to "depend" on stability of course. and yes I also agree with removing any dependency on Twitter, if anything for improving the privacy of visitors of my site.
# [schmarty] agreed on all those points!
ttybitnik joined the channel
# [tantek] I need to write those up on the new /photo_hosting page that I made. I keep making more work for myself 🙃
[KevinMarks] and thegreekgeek joined the channel
# [Al_Abut] [tantek] do you use the Flickr app as a mobile uploader? I’m curious if that will solve the use case you brought up and that I tried to tackle with Pixelfed.
# [Al_Abut] Ah, like iCloud but better sharing
# [Al_Abut] It was really fun to set up that flow with Pixelfed as a test but now that I have, I’m not sure that’s my main use case. I think it’s more about wanting an alternate grid view of my photos in my blog posts, with each photo linking back to the source article.
# [Al_Abut] Much like that example with Naz that I blogged about
# [Al_Abut] That makes sense. I don’t think about the auto-uploading as much because iCloud covers that base for me, so I’m a little further along the chain of the stuff that I’m curating with the specific intention of sharing.
# [Al_Abut] Ah yes, I meant upload as in backup, with a very clunky option for sharing if absolutely necessary and no CDN at all.
# carrvo Jo: looks like I can log into IndieAuth.com and indieweb.org so logs would help.
# carrvo In the meantime you can see a summary of the modifications I made to MinToken here: https://github.com/carrvo/mindie-idp/blob/master/mintoken/README.md
mosssystem, ttybitnik, [Schepp], [Murray], sebbu2, gRegor, DanQ, barnaby, CrimeWave, to2ds and elli1 joined the channel
[aciccarello], DanQ and to2ds joined the channel