#wordpress 2019-07-23

2019-07-23 UTC
#
[snarfed]
GWG: why post status? as opposed to a category like i mentioned, along with those plugins?
#
[snarfed]
ie this approach is working now, without any new or different code
#
[snarfed]
just curious
#
GWG
I have never been much for overloading categories as visibility functionality
#
GWG
I added a custom rewrite to allow excluding post kinds from a feed for that reason
#
[snarfed]
can you describe why you don't like it? it's very common in wordpress, right? tons of existing plugins let you change behavior for specific categories like this, and tons of people use them
#
[snarfed]
i'm not aware that it's "bad practice" in any way
#
GWG
I don't use categories very much on my site
#
[snarfed]
(or tags)
#
GWG
I considered disabling them completely
#
[snarfed]
sure! you don't have to. just funny that you'd want to reinvent the wheel for this
#
GWG
I'd want it built into WordPress ideally, but don't get started on that issue
#
[snarfed]
eh plugins are great. not everything needs to be built in
#
GWG
I meant the ability to do unlisted
#
GWG
I see that as a more global benefit
#
[snarfed]
ah. eh, wp has private posts built in, that's their design choice. can't build everything in, so they make choices. totally valid
#
GWG
I already have an idea to use private posts in IndieAuth
#
[snarfed]
design is about what you omit more than what you add
#
GWG
If they allowed custom post statuses...
#
GWG
That's a nine year old discussion
#
GWG
It's a rabbit hole
[asuh] joined the channel
#
[asuh]
Is it possible to allow a “log in” type capability through Indieauth on a website to give people access to unlisted or private posts?
#
[asuh]
So even if someone shares a URL that’s unlisted, similar to snarfed’s post, it wouldn’t work until you log into yourself to view the site content which would magically show the post
#
[snarfed]
asuh yes, that's the main way we've prototyped private posts so far. http://indieweb.org/private_posts
#
[snarfed]
i'm trying this instead because indieauth login is basically an impossible ask for 100% of the people i want to share privately with
#
[snarfed]
email magic link might work for some, but still way too much friction
#
[snarfed]
for me, unlisted posts' tradeoff of accessibility vs "security" is just right
#
[asuh]
i missed that section before, neat
#
GWG
I am prepared to add private IndieAuth posts to the IndieAuth plugin
#
[asuh]
I increasingly don’t trust robots.txt and noindex attribute values to actually do much for privacy. Maybe it’s still legit and valid for most use cases, but the friction of requiring universal indieauth usage for private posts seems ideal. Or allowing other types of auth that exists whether FIDO or SQRL
#
[snarfed]
right! you're choosing a different point on the security vs friction spectrum. totally valid. that kind of freedom is a great strength of the indieweb.
#
[snarfed]
none of the people i want to share with have indieauth logins, and none of them will set one up just to see my pictures, so it's the wrong choice for me personally, but c'est la vie!
#
GWG
I figure I will be aspirational
#
GWG
I want some private posts, but haven't found an audience yet
#
[asuh]
snarfed: right, i’m guessing that’s true of most of my contacts as well. just like it took almost a decade for mainstream social media usage of specific platforms, so would it take for this type as well. I’ve been thinking about this issue for a long time with no results yet but love seeing this discussion to jog my thoughts
#
GWG
I do things incrementally. I think I could add a WWW-Authenticate header to WordPress easily. So, it might not be much work
#
GWG
But other than an interesting challenge, not sure it is high on my list
#
[tantek]
GWG, could you add *something* about Dreamhost in this section? At least documenting describing what you understand so far?
#
GWG
I understand very little about what the problem is
#
GWG
But I will try
#
[tantek]
Can you back through indieweb-wordpress chat and at least re-read the firsthand problem descriptions, quote from it if necessary?
#
GWG
Yes
#
GWG
I will see if I can figure it out
#
GWG
A clear description
#
[asuh]
re: Dreamhost + Indieauth, that’s my setup and I haven’t seen an issue like [David_Bryant] said. It’d be good to get more info
#
[asuh]
I meant to say I’m not the original poster of the issue but I have the same setup on Dreamhost
chrisaldrich joined the channel
#
aaronpk
Dreamhost also has a few different services so it'd be worth mentioning which one is having this problem
#
aaronpk
shared hosting vs VPS vs managed Wordpress etc
[jgmac1106], [Michael_Beckwit, gRegorLove and [David_Bryant] joined the channel
#
[David_Bryant]
My plan is to write out a detailed description of my ongoing attempts to enable IndieAuth with WordPress on Dreamhost. The TL;DR of that is I have a top level domain that is shared hosted by Dreamhost and contains a number of top level subdirectories with web content (/articles, /apps, etc.). I used DreamHost's "One Click Install" feature to install WordPress as /blog, and then used the WordPress console to administer that installa
#
[David_Bryant]
have to figure out whether a service like OwnYourGram wants me to auth as orangemoose.com vs. orangemoose.com/blog but one or the other seem to work.
#
[David_Bryant]
IndieWeb plug-ins. I've configured my domain top level index.html to contain the necessary IndieWeb endpoints, an h-card, etc. I want to use the WordPress blog as the place for content I'd syndicate outward into the IndieWeb itself. Many things seem to work just fine (RSVP, microformats, syndication, webmentions, brid.gy, etc.). I do still get the error message from the IndieAuth plugin though, and the check script fails. Occa
#
david.shanske.com
edited /Wordpress_IndieAuth_Plugin (+313) "/* Troubleshooting */"
(view diff)
#
david.shanske.com
edited /Wordpress_IndieAuth_Plugin (+78) "/* Apache htaccess solutions */"
(view diff)
#
david.shanske.com
edited /Wordpress_IndieAuth_Plugin (+471) "/* Troubleshooting */"
(view diff)
Turtle13319910[m and [Michael_Beckwit joined the channel
#
[Michael_Beckwit
GWG just did a post that hopefully webmentioned your site. Would to know if it succeeded or if I’m failing somehow with that topic
#
GWG
It did
#
GWG
But I never am sure how to display those
#
[Michael_Beckwit
no worries on display, i’m just happy it succeeded at the moment 😄
gRegorLove and [asuh] joined the channel
#
[asuh]
[David_Bryant] Have you tried using your blog’s indieauth endpoint from https://orangemoose.com/blog/wp-json/indieauth/1.0/auth instead of the token? This is similar to mine and it works to log me in using OwnYourGram as well.
[tantek], [xavierroy], ichoquo0Aigh9ie, [Michael_Beckwit and MrKapowski joined the channel