#dev 2025-11-22

2025-11-22 UTC
sp1ff and [snarfed] joined the channel
#
[snarfed] careful with populating the name mf2 property on notes though, if name isn't an *exact prefix* of content, mf2 consumers will interpret it as an article instead. https://ptd.spec.indieweb.org/#algorithm
#
[tantek] it's pretty easy to get that right by putting the microformats property class names on the same element
#
[tantek] it's only a problem when you violate DRY
#
[tantek] or a hazard/risk that is
#
[artlung] My blog entries absolutely suffer from too many elements and too many classes. Stripping out much of that markup is on my todo list.
bugliker02, troojg, grufwub, Ana2, [morgan], PrehistoricWeeb, DanQ, [jeremycherfas], [Jo], IWSlackGateway, sp1ff`, [social] and [morgan]1 joined the channel
#
dibblethewrecker aaronpk: Well, I've progressed to the point where I can generate the code_verifier and SHA256 hash it. And that's working (confirmed via https://www.pelock.com/products/hash-calculator)
#
dibblethewrecker > code_verifier: qAy1JM61zELV7IDztPN6pYn1U2PP39T1udOlOwCrcl5
#
dibblethewrecker > md5: 2d6bf9a19f14f2d5d788769bb2538c66
#
dibblethewrecker > sha256: df092abbb902516c1961ca4c5cb8e1fc11ff740b047caca5462c6761697ebd48
#
IWDiscord <d​ibblethewrecker>
#
dibblethewrecker > code_challenge: ZGYwOTJhYmJiOTAyNTE2YzE5NjFjYTRjNWNiOGUxZmMxMWZmNzQwYjA0N2NhY2E1NDYyYzY3NjE2
#
dibblethewrecker > OTdlYmQ0OA==
#
dibblethewrecker > code_verifier: qAy1JM61zELV7IDztPN6pYn1U2PP39T1udOlOwCrcl5
#
dibblethewrecker [edit] aaronpk: Well, I've progressed to the point where I can generate the code_verifier and SHA256 hash it. And that's working (confirmed via https://www.pelock.com/products/hash-calculator)
#
dibblethewrecker But the code_challenge I am generating from that hash doesn't match what https://example-app.com/pkce generates...
#
dibblethewrecker > sha256: df092abbb902516c1961ca4c5cb8e1fc11ff740b047caca5462c6761697ebd48
#
dibblethewrecker > md5: 2d6bf9a19f14f2d5d788769bb2538c66
#
dibblethewrecker > code_challenge: ZGYwOTJhYmJiOTAyNTE2YzE5NjFjYTRjNWNiOGUxZmMxMWZmNzQwYjA0N2NhY2E1NDYyYzY3NjE2
#
dibblethewrecker > OTdlYmQ0OA==
#
dibblethewrecker But I am at least getting "Failed PKCE Validation"! So, that's progress.
#
dibblethewrecker [edit] But I am at least getting `"Failed PKCE Validation"`! So, that's progress.
#
aaronpk It's probably the same thing I added to the Reddit comment
#
aaronpk Most languages sha256 functions will default to return hex encoded version of the hash, but you need the raw bytes
#
dibblethewrecker aaronpk: Ah, I missed that, thanks! (philip_dt is me)
#
dibblethewrecker Found an API that will sha256 hash straight to base64-url-encoding, and the results match https://example-app.com/pkce. There's no option in iOS to hash straight into base64.
#
aaronpk Oh that's funny
#
perryflynn well, it's no big deal to decode the hex representation and encode it into base64. did the same in my implementation in PHP.
#
[jeremycherfas] [aaronpk] Getting an error trying to log in to Telegraph. `Insecure redirect error. https redirected to http. To fix, link to http://www.jeremycherfas.net/ directly.` The thing is, I don’t see any redirect, and I have `<a href="https://github.com/jeremycherfas" title="GitHub" target="_blank" rel="me" class="u-url"><img src="/user/themes/my-new-theme/images/github.svg" alt="github logo" height="32" width="32" ></a>` on every page. I
#
[jeremycherfas] see a flash to GitHub just before the error message. Not sure how to troubleshoot.
#
Loqi [preview] [Jeremy Cherfas] Signal Alerts from Uptime-Kuma
#
aaronpk perryflynn: PHP hash function can return the raw hash bytes directly
#
aaronpk [jeremycherfas]: i don't know why, but https://jeremycherfas.net/ sends a redirect to http://www.jeremycherfas.net/ which then redirects to https://www.jeremycherfas.net/
#
aaronpk looks like your site is behind cloudflare, so check cloudflare's settings for the non-www domain
#
Loqi [preview] [Jeremy Cherfas] Signal Alerts from Uptime-Kuma
ttybitnik joined the channel
#
[jeremycherfas] OK, I’ll do that. Thanks
[0x3b0b] joined the channel
#
[jeremycherfas] Can’t see any redirects at Cloudflare, but Dreamhost has a custom TXT record for WWW and I cannot for the life of me remember what that is for. Might be something I added from Fastmail for DKIM. I might try delete that (and the Google site verification, which I don’t need asd I’m not using google analytics any more.
#
[jeremycherfas] I’m mistaken. The DNS records at Dreamhost are relics of when DNS was managed there. So there must be something at Cloudflare. I see an A record for www that is proxied, but that shouldn’t be a problem.
#
[jeremycherfas] No obvious solution. But https://stream.jeremycherfas.net got authorized fine, so just going to try and remember to go with that.
ben_ joined the channel
#
GWG Moving this on topic...
#
GWG From -random Exploring replacements for parts of Nextcloud, which I don't particularly like. petermolnar commented that he needs calendar...and I had considered trying something new for that as well
tulips, proofreed and GWG joined the channel
#
perryflynn aaronpk: ah cool. I changed it now like so: "return sodium_bin2base64(hash('sha256', $codeVerifier, true), SODIUM_BASE64_VARIANT_URLSAFE_NO_PADDING);"
#
aaronpk TIL sodium_bin2base64
barnaby joined the channel
#
perryflynn 🙂👍️
troojg, barnaby, [aciccarello], Pixi`, rrix_ and DanQ joined the channel