2018-07-06 UTC
[cleverdevil], [manton], tantek__ and [miklb] joined the channel
# 01:59 GWG [miklb]: Think they'll try it? I'd love more eyes on it. # 02:04 aaronpk I think I might need to do a blog post explaining how IndieAuth is actually a small addition to OAuth. I think people are probably looking at that plugin and don't understand how it relates to OAuth # 02:05 aaronpk If you have a clear explanation for that then sure # 02:09 aaronpk I want to push IndieAuth as *the* way to do OAuth in a pure Web way, where you can't rely on people pretegistering applications to get a client secret and such # 02:10 aaronpk Obviously an app developer isn't going to register for api keys on everyone's wordpress sites, and also app developers don't want the user to have to configure stuff in their wordpress before they can use an app. IndieAuth solves both # 02:11 [miklb] I think a heading “Why Indieauth?” with that statement would be a good start # 02:28 aaronpk GWG: did you see 00dani's comment on the indieauth spec? [snarfed] joined the channel
# 02:29 Loqi [00dani] #19 Allow the 'me' parameter to authorization endpoints to be omitted? # 02:31 aaronpk I think we would need that piece to be optional in order for anyone to use this plugin as a pure oauth plugin # 02:36 GWG Well, it looks like there are things to settle. # 02:36 aaronpk in any case the wordpress plugin doesn't need the `me` at that step because it's a self-contained system # 02:42 aaronpk WP already knows what user the auth code was issued for # 02:42 aaronpk So it doesn't actually do anything with that value # 02:49 aaronpk what does your code do with that parameter right now? # 02:50 aaronpk Cause I realized my code was already completely ignoring it # 02:51 GWG I have to look. Only the initial match # 02:52 GWG I could add the user_id to the token [aaronpk] and [manton] joined the channel
# 03:50 Loqi [aaronpk] #79 remove unnecessary param # 03:55 GWG My mind is still in Micropub unit testing [cleverdevil] and [jgmac1106] joined the channel
[eddie], [jgmac1106], [jgarber], [cjwillcock], tantek__, [manton], [cleverdevil] and jackjamieson joined the channel
[eddie], [dgold], [schmarty], [cleverdevil], sketchess, jackjamieson and [jgmac1106] joined the channel
# 22:44 dougbeal I guess they are uncommon enough that Kinds doesn't support them? # 23:08 [jgmac1106] [dougbeal] working with a popular calendar plugin firm that wants to add mf # 23:32 GWG I haven't written the interface for them
@mor10 @no_fear_inc @johnbillion @carlhancock I remember someone (perhaps @rmccue) was working on something around OAuth2 a few years ago, but no idea where that ended up. IMO OAuth2 should be built in as a minimum, in core. Of course I have no ability to contribute to this apart from saying it should be done. (twitter.com/_/status/1014980895432986625)
@rmccue @mor10 @Josh412 @carlhancock @aaronpk @DavidWolfpaw @no_fear_inc @johnbillion As I said, would love to have collaborators on the OAuth 2 plugin or on the centraliser system. :) (twitter.com/_/status/1015110752619728896)
[jgmac1106] [dougbeal] working with a popular calendar plugin firm that wants to add mf