#wordpress 2018-01-16

2018-01-16 UTC
[kevinmarks] joined the channel
#
GWG
[miklb]: Does that make sense to you?
#
[miklb]
honestly, no, but I don’t fully grok what you are trying to do.
#
GWG
No one does, apparently
#
GWG
That is a problem
#
GWG
[miklb]: Trying to do with what?
#
aaronpk
where did all the use cases go!
#
[miklb]
with the plugin. I simply thought you were adding selfauth functionality
#
[miklb]
if selfauth is really a thing
#
aaronpk
selfauth is the name of a small authorization server implementation
#
[miklb]
I mean, how many authorization endpoints are there besides indieauth.com ?
#
[miklb]
OK, so a couple.
#
aaronpk
that's firmly in the "several" range
#
GWG
aaronpk, you were suggesting functionality that was already implemented if I read correctly
#
[miklb]
So yeah, the plugin already supported a hardcoded use of indieauth.com, you’ve changed that to be a admin option to change the endpoint (I think).
#
GWG
Yes. So, the plugin is two pieces
#
[miklb]
I thought the next step was to add “authorization endpoint on their own domain”
#
aaronpk
GWG: I was trying to document the various things people are trying to do with the plugin so that we could make sure each use case is addressed
#
aaronpk
but now you've combined authentication and authorization use cases and deleted others
#
GWG
aaronpk, I can put them back.
#
GWG
I keep misunderstanding
#
aaronpk
I see that. We may need to work through this in person this weekend.
#
GWG
aaronpk, I keep trying to clarify what I am trying to do and failing
#
GWG
Do you remember my demo using my phone at Austin?
#
[miklb]
GWG just curious why you are trying to jump to multi-user sites so fast?
#
GWG
I was able to use the modified Indieauth plugin to authorize that
#
aaronpk
I may need a refresher
#
GWG
miklb, I am not. It is already there
#
GWG
I am trying to harden the existing feature.
#
GWG
I want it to be as robust as possible before I try to write a server
#
[miklb]
oh, sorry, reading those edits and discussion of user profile urls led me to believe tat
#
[miklb]
s/tat/that
#
GWG
miklb, that is how snarfed and pfefferle wrote the support
#
GWG
Snarfed in the Micropub plugin, pfefferle in the Indieauth
#
aaronpk
if what you've done so far is let the admin change indieauth.com to some other service, then what you've actually done is given the plugin the flexibility to use other web-sign-in services. not added indieauth support per se. that's all good, but what that essentially means is it mirrors the indieweb wiki where I didn't want to write RelMeAuth/IndieAuth code as a mediawiki plugin so I offloaded
#
aaronpk
that to indieauth.com (soon to be indielogin.com)
#
aaronpk
if you want to really add IndieAuth support then that's where the authorization_endpoint discovery comes in. but in order to do that well, you're going to need to document all the permutations of user profile URLs that you might encounter in this, including where there is a single-user site where the home page of the site is the user's URL, the single-user site where there's a second external URL
#
aaronpk
as the user's URL, a multi-user site where some peoples' URLs are external and others are the /author/username URLs local to wordpress, some of which may have an authorization_endpoint defined and others which only have RelMeAuth set up
#
aaronpk
what I was trying to do with that page was document each combination of things so you'd have a list to work from to check that each is supported
#
aaronpk
also none of this involves the REST API authentication or being an indieauth server itself, there's still all these cases aside from that
#
GWG
aaronpk, I wrote the discovery code last night
#
GWG
I am writing unit tests tonight
#
GWG
That's how I found a bug in Micropub
#
GWG
That's why I was asking about token endpoints. I was trying to figure out why you would discover them, but I got clarity on that
#
GWG
I will add back some use cases
#
aaronpk
so to be clear, no token endpoint is involved in this
#
GWG
aaronpk, in the login stuff, no
#
GWG
I'm using it for something else Micropub like
#
aaronpk
what exactly? that's what I was trying to get you to document
#
GWG
I am getting a token using gimme a token and using it to securely post to my site from my phone using a simple form encoded API
#
GWG
To put it in simple terms
#
GWG
My next step was going to be mapping scope to WordPress user permissions
#
aaronpk
I really don't think you should do anything on the authorization side until you build in an authorization endpoint and token endpoint into the plugin
#
GWG
Aaronpk, what are the chances I could accomplish that for hack day?
#
aaronpk
With enough explanation of the goal on the first day I'd say possible to do a functional first draft
#
GWG
Still need to figure out how to map scope to WordPress permissions
#
GWG
I have a few days for that problem
#
[miklb]
where do permissions come into play with logging in with indieauth?
#
[miklb]
whether logging in with indieauth/indielogin or some other endpoint
#
aaronpk
between Selfauth and tokens.indieauth.com there is code to look at as a reference
#
aaronpk
You can just grant full permissions to start with and figure that out later
#
aaronpk
Not logging in, but for Micropub authoritization
#
[miklb]
that seems like a separate issue to me. I use micropub already, no indieauth login on my site
#
GWG
miklb, and it opens up all user permissions
#
GWG
I was also going to reread your book
#
[miklb]
fair enough, but still seems like separate issues.
#
aaronpk
I may need to try a test install of wordpress to see the state of things myself
#
GWG
aaronpk, 8
#
GWG
I apologize in advance for anything I messed up
#
GWG
Sorry, didn't finish the thought
#
[miklb]
I do not disagree that the micropub plugin should better check user permissions if it doesn’t respect the WP user role
#
GWG
miklb, exactly
#
[miklb]
but that still sounds like a micropub plugin issue, separate from the IndieAuth plugin. Conflating the two seems to complicate things to me at least.
#
GWG
I want the Indieauth plugin to handle Indieauth for both someday
#
GWG
But either way, will be working on it
#
GWG
I think I read something about a JWT php library
#
[miklb]
what is JWT
#
Loqi
JWT (JSON Web Token) is a method of encoding and signing JSON data in a URL-safe string https://indieweb.org/JWT
sebsel, Loqi, drkokandy, [kevinmarks], muezlimuez, [mail], jeremycherfas and snarfed joined the channel
#
snarfed
hey GWG, you manually tested that new header PR, right?
#
snarfed
that's always good to mention in the PR, especially for code that's not covered by unit tests, like this
#
GWG
snarfed, yes. But I will test it a second time just to make sure.
[xavierroy] joined the channel
#
GWG
I also want to add a PR for the Indieauth thing that aaronpk identified
snarfed joined the channel
#
GWG
[xavierroy], how is weather working for you?
[joe] joined the channel
#
[xavierroy]
So far so good. Only thing I feel is that pulling weather data should not require an extra click.
#
[xavierroy]
If it could pull data combining the geo data and post creation/publishing time, it would be great 😀
#
GWG
[xavierroy]: Next version I was thinking of redoing that
#
GWG
I redid the UI last in June and I may redo it again now that I have more stuff in options
#
[xavierroy]
I'm using Post Kinds now to do food logging as private posts
#
[xavierroy]
Is there a way to expose the tags in Post kinds metabox in the post content? I'm using that space to add machine tags to my post.
#
GWG
[xavierroy]: How exactly? I never built a UI for it
#
[xavierroy]
I exposed the eat and drink Post kinds from the plugin code
#
GWG
I am storing tags, but not currently displaying them. You can add a template
#
[xavierroy]
Yeah. Maybe I will once I have enough data
#
[xavierroy]
Planning to do it for a month
#
GWG
Either way, kinds are only hidden when they have no UI yet
#
[xavierroy]
But my drink posts are public for now: http://xavierroy.com/kind/drink/
#
GWG
If you want to map out a UI, I can try to add it
#
[xavierroy]
Im not sure how it should look. 🤔
#
[xavierroy]
I'm using machine tags to add more data like meal:type=dinner;meal:main=pasta;meal:side=broccoli
#
[xavierroy]
So I can do a search for all meals where meal:main=pasta
#
[xavierroy]
Or a side... Or vegetable.. and so on
#
[xavierroy]
Using the Post kinds tags doesn't clutter up my main tags
#
GWG
Sounds like another taxonomy
#
[xavierroy]
Another taxonomy for food data?
#
GWG
Maybe
[kevinmarks] and snarfed joined the channel
#
[xavierroy]
Depends on how people use it. For my needs, I find using PK tags useful as I also use it to add other metadata like isbn numbers or ratings for say book data
[joe], gRegorLove, arturi, EmreSokullu, [artur], [kevinmarks], gRegorLove_, chrisaldrich and [miklb] joined the channel; snarfed left the channel
[colinwalker] joined the channel