#social 2018-09-24
2018-09-24 UTC
sascha[m], vt, xmpp-social, vasilakisfil, jdormit_mobile and jdormit joined the channel
# 
jdormit is https://www.w3.org/wiki/SocialCG/ActivityPub/Authentication_Authorization actually being used by existing ActivityPub implementations? Trying to figure out server-to-server authentication for my app
# puckipedia yup! For server-to-server basically all implementations support HTTP signatures, and some also support LD signatures for relaying
# puckipedia client-to-server is mostly undefined, I just have a small service that outputs bearer tokens
# jdormit cool, thanks! Yeah I was going to use OAuth2 for c2s
# jdormit (clients talking to my server, I mean)
# jdormit it kind of sucks there isn't a standardized c2s strategy though, that means that clients need to have implementation-specific auth details for each service they want to interface with
vt joined the channel; vt left the channel
# puckipedia jdormit: there's a little standardized stuff
# puckipedia jdormit: there's the RFC7591 plus RFC8414 which is proposed, but the endpoints of an actor may contain oauthAuthorizationEndpoint and oauthTokenEndpoint which provide the oauth endpoints etc
# puckipedia and tbh, i'm also wondering what to use right now. possibly just implement both (point at the same endpoints) and also indieauth (for both indieauth's sake, and micropub support)
# jdormit yeesh that's a lot of work
# puckipedia meh, i won't really build client id stuffs, or well, maybe
# puckipedia it's primaily so you can get a token out of the server
# puckipedia which you, ehm, currently do with kroeg-call auth https://puckipedia.com/
vasilakisfil, jdormit_mobile and jdormit joined the channel
# jdormit So what's the point of the Add and Remove activities? All the collections in the spec are added to/removed from by other activities, e.g. Follow for followers/following, Like for likes, Announce for shares, etc...
# nightpool[m] the set of collections is not limited to those in the spec
# jdormit Ah I see
# jdormit so you could Create a new collection, then add/remove from it
# nightpool[m] right
# puckipedia yes
# heluecht[m] nightpool: Is there currently a mailing list? I don't want to create issues for every question I'm having concerning questions how to implement stuff that no one had implemented before.
# heluecht[m] Okay.
jdormit_mobile joined the channel