#dev 2026-07-08

2026-07-08 UTC
barnaby, d1s1nf3ct and ax562 joined the channel
#
[pcarrier] I find making sure my website build works fine on devices like iPad Mini and iPhone SE super constraining in a good way
#
[pcarrier] website builder sorry, though of course true of both
grufwub, Saige_Leah, A_WildSpirit, [snarfed], dabeglavins5, [0x3b0b], [0x3b0b]_, [capjamesg], [pfefferle], doesnm_ and Al3xFor joined the channel
#
Zegnat gRegor: if you end up using linkextractor as a dependency, do give me some feedback. It has been a looong time since I last published on packagist
mcepl joined the channel
#
doesnm mcepl: then i tested simpleid with gitea it was works. Also i found one bug with openid which allows to register on closed instances 0_0
#
mcepl I am probably missing previous message. What did you say before?
#
doesnm it's continuation of your question in #indieweb
#
mcepl SO, any explanation why I got that “Missing OpenID session data” error when the test on https://indieauth.com/setup works?
#
doesnm i dunno. Which implementation of openid did you use?
#
mcepl ??? Went to https://gitea.com/user/login/openid filled in "https://matej.ceplovi.cz", which is my side, selected Email option (I am not sure why GPG thing doesn't work for me, ever), got message that it succeded, and then it failed with the error message I said.
#
mcepl * site,
Al3xFor joined the channel
#
Zegnat Mmm, I do not know many people who use the OpenID proxy of indieauth.com, so hard to say what might be missing there
#
Zegnat mcepl: note that when you are logging in on https://indieauth.com/setup (step 3), you are logging in with IndieAuth and not OpenID. So that test does not say much.
#
Zegnat Is the Missing OpenID session data error shown by Gitea or by IndieAuth.com?
ZodiacalComet and FGI joined the channel; Al3xFor left the channel
#
mcepl Zegnat: The latter.
blacklight, aaronpk[d], hisacro, ax562, rossabaker, thatoddshade, strugee, barnaby and [aciccarello] joined the channel
#
gRegor I used the OpenID proxy but it was years ago. I'm not 100% sure it still works since indieauth.com (the service, not protocol) is deprecated
barnaby joined the channel
#
[pcarrier] Do I need to worry about indieweb authorization as opposed to authentication if all I want is to identify by URL on third-party services?
deathcomestotime joined the channel
#
[pcarrier] IndieAuth sorry
#
[pcarrier] looks like I need a token endpoint? was hoping to avoid that. trying to log in as <https://d|https://>http://found.as/ada on http://indieweb.org
#
[pcarrier] Yup, it wants tokens and asks for profile access
#
[pcarrier] https://chat-uploads.indieweb.org/files/2026/07/dev-20260708-195330-screenshot_2026-07-08_at_21.52.59.png
#
[capjamesg] Ooh it’s working?
#
[pcarrier] Yup 🙂 Can't find logout now
#
[capjamesg] [pcarrier]++ nice work!
#
Loqi [pcarrier] has 4 karma in this channel over the last year (12 in all channels)
#
[capjamesg] I don’t think there is a logout button haha.
#
[pcarrier] does that make http://found.as the fastest path to IndieAuth in 2026? 🙂
#
[capjamesg] It very well could be!
#
doesnm <[pcarrier]> Yup, it wants tokens and asks for profile access <- without context i think that you are discussing some scam attempt xD
#
[pcarrier] no, just http://indieweb.org login 🙂
#
[pcarrier] can't log out, so maybe a bit scammy? 🧌
cotsuka joined the channel
#
gRegor Wait, what sites wants tokens for just identity?
#
gRegor *what site
#
gRegor I think you can logout with `/Special:UserLogout`
#
gRegor Neocities is also another fast route to sign in, [artlung] did it recently
#
[artlung] https://indieweb.org/User:Artlung.neocities.org yes indeed.
#
[artlung] neocities points at codeberg and vice versa
cotsuka, barnaby, bterry and btrem joined the channel
#
btrem https://indieweb.org/OpenPGP#Key_Lookup_Algorithm says to parse an "h-card and use a non-URL 'key' property as the person’s PGP key." But https://microformats.org/wiki/h-card#Properties shows only a `u-key` property. Am I missing something?
#
valerieflynn Not sure what you guys are saying. Is Found.as Contact webpage is scammy because there's no log out or joking that IndieWeb is scammy that can't log out?
#
[pcarrier] http://indieweb.org doesn't have log out. just joking about the scamminess.
blacklight and cotsuka joined the channel
#
[pcarrier] [gRegorLove] http://indieweb.org wants access to profile, very unclear why it doesn't seem to do anything with it
#
[pcarrier] that being said I added support for profile and email
#
[pcarrier] (you can choose which of multiple email records gets shared via the Sharing tab)
#
gRegor Ah, good question, not sure if it's using anything from the `profile` scope
#
[pcarrier] well, seems reasonable to support `profile` and `email` for a contact page anyway
#
gRegor I think there's an issue on the IndieAuth spec that requesting only `profile` scope doesn't require an access token
#
[pcarrier] I'll leave what should and shouldn't happen to the experts and comply with what happens in practice 😄
#
gRegor I might have had it reversed actually, nevermind https://github.com/indieweb/indieauth/issues/62
#
Loqi [preview] [Zegnat] #62 Clarification on issueing token with profile scope
#
gRegor > For IndieAuth to be compatible with other forms of OAuth extensions (like OIDC), I would propose allowing for access tokens to be created even if the only scope requested is profile.
d1s1nf3ct, cotsuka, thatoddshade and rrix joined the channel