#wordpress 2019-11-02

2019-11-02 UTC
#
aaronpk I don't have a lot of empathy for people who jump to and advocate for technical solutions while simultaneously disregarding an entire industry that is working on the exact same problem
#
GWG He implied out of scope of talk, someone asked
#
[grantcodes] I think I have actually used it before though. I'll have a quick peek at the code
#
aaronpk haha yeah so... what I'm gathering from his talk is that he doesn't understand what OAuth is
#
[grantcodes] In my code (which may not be great) I just send the username & password, then get back the jwt and use that in api calls
#
aaronpk Right so you just described... guess what
#
aaronpk OAuth :-D
#
aaronpk https://oauth.net/2/grant-types/password/
#
aaronpk The format of the token you get back happens to be a JWT. Great. The app doesn't care. That's also described by OAuth
#
[grantcodes] Hmm, well I did not even know that was a thing 🤷‍♂️ a lot of people are probably in the same boat. When I think of oauth I only think of a bunch of redirects 😅
#
aaronpk That's my point tho. Don't discount an entire thing just because you don't understand it
#
aaronpk Think of OAuth as a description of a way to get a token into an app. His post is basically whine whine whine OAuth is too hard, then says let's use JWTs, and then fails to describe how to get those JWTs into apps, and also doesn't realize that plenty of OAuth systems use JWTs as access tokens
#
GWG aaronpk: He also mentioned some individual who wanted his name off the spec
#
[grantcodes] Fair points.
#
GWG So this was strongly anti oauth2, specifically for WordPress, as he noted it was good for some things
#
aaronpk Yeah that is like 7 years ago and doesn't really matter anymore. Also there was one particular reason he wanted his name off the spec and this guys JWT solution has the same problem hahaha
#
Loqi awesome
#
[grantcodes] Could also be that password grant type isn't built into the WordPress oauth implementation in which case his point stands
#
aaronpk No then his point should be add password grant
#
GWG Jonny Harris and I, though he doesn't know it, were on some optimization tickets in WordPress... I really would like to hear how he thinks I could scale the IndieAuth plugin
#
GWG He commented a lot about issues I've seen him comment on before
#
[grantcodes] Yeah, doesn't look built in: https://github.com/WP-API/OAuth2
#
Loqi [WP-API] OAuth2: Connect applications to your WordPress site without ever giving away your password.
#
aaronpk There's plenty of reasons the password grant is not a good idea, which is probably why the plugin doesn't have it
#
[grantcodes] Oh yeah, I'm sure.
#
GWG It isn't finished or ready for primetime
#
GWG The oauth2 plugin
[snarfed], [tantek], [bradleyallen], [chrisbergr], [qubyte], gRegorLove, [manton], Oclair, [jgmac1106], [grantcodes], [KevinMarks], stefanos82 and TimeOnDiscord[m] joined the channel
#
[tantek] WordPress folks, how many of you here have the Webmention plugin installed and enabled?
#
[tantek] And how many of those have the Vouch flag turned on?
bigsbigs joined the channel
#
bigsbigs Hi
[chrisaldrich] joined the channel
#
[chrisaldrich] I obviously have both Tantek. Not sure if GWG has the vouch flag on by default or of its a manual code thing.
#
[tantek] he does. [chrisaldrich] how are you sending your Vouches?
#
GWG Preliminary vouch support disabled by default. As Vouch is experimental can only be enabled by adding define( 'WEBMENTION_VOUCH', true )
#
[chrisaldrich] The official repo indicates 800+ people have wordpress webmention installed, though I'm not sure if that includes many of the manual installs from github that would exist as well.
#
[tantek] GWG, so it requires adding code to the plugin currently? I suppose that makes sense if it's considered alpha / risky
#
[tantek] does that mean that all unvouched webmentions go to moderation?
#
[tantek] or does it mean that all vouched webmentions automatically get displayed without moderation? (bypassing any other moderation settings)
#
[chrisaldrich] iirc, and GWG may correct me, but I think he'd only begun building for sending a few camps back. WP version of vouch doesn't do receiving or any work with respect to moderation yet.
#
GWG It isn't to the code, it is to the WordPress config file
#
GWG Moderation by default is a WordPress setting
#
[chrisaldrich] The closest most get for automatic moderation at present with respect to webmentions is in combination with spam plugins like Akismet.
#
[tantek] then what does turning on Vouch support actually do for you?
[manton] joined the channel
#
[chrisaldrich] At present you'd need to be a reasonably advanced developer to know vouch exists, that it's in the repository, and have the capability to know where in the code to put the flag. This is the current level of the documentation: https://github.com/pfefferle/wordpress-webmention#384
#
Loqi [pfefferle] wordpress-webmention: A Webmention plugin for WordPress
#
GWG Vouch is problematic
#
[tantek] ok so it sounds like we can say that the Webmention plugin has some Vouch support in-progress
#
[tantek] and that we're looking for folks to try it out and help iterate
#
GWG Yes
#
GWG Correct
#
GWG Semantic Linkbacks is also on the plan to be merged in
#
GWG It does the parsing for better display of webmentions
#
GWG Webmention only handles the plumbing
#
[tantek] right, let's assume that happens soon
#
[tantek] for now at a minimum installing Webmention should also prompt you to install Semantic Linkbacks as part of its setup process, noting that the two are planned to be merged
#
GWG [tantek]: I am trying not to overwhelm pfefferle with too many PRs
#
GWG It is delicate to migrate the data without messing up installs
#
[tantek] it's ok, I think this merger is the top priority for the Webmention plugin
#
[tantek] once that's cleaned up
#
[tantek] then the next priority is to make Vouch (at least receiving and verifying vouches) a real thing in the UI of the plugin
#
[tantek] so that no one has to edit code to make it work
#
GWG Edit the config file, but yes, I can tackle it again
#
GWG It was my hack day project
#
GWG IWS 2018
#
GWG I think I also did refbacks that day
#
GWG I need to fix that
#
GWG I need to poke pfefferle
#
[tantek] :thumbsup_all:
#
[jgmac1106] I used Askimet not the same thing but good enough where I didn't try bleeding edge
[Michael_Beckwit joined the channel
#
[Michael_Beckwit no vouch for my pirate site + webmentions since I didn't know vouch was a code setting
#
[Michael_Beckwit i’m ready for the “Take Back Your Web” livestream
#
aaronpk samsies
#
aaronpk samesies?
#
[Michael_Beckwit the latter 😉
chrisaldrich, gRegorLove and [chrisaldrich] joined the channel
#
[chrisaldrich] Tantek++
#
Loqi Tantek has 1 karma in this channel over the last year (139 in all channels)
[jgmac1106] joined the channel
#
[Michael_Beckwit I think he did a good job to whet whistles while not overwhelming. Now to just help make it so the overwhelming parts aren’t as overwhelming 😄
#
stefanos82 folks, I need your expertise in WordPress please. I have a demo website setup locally and built a custom plugin that adds a couple of custom meta data fields in WooCommerce and right now with ~=1260 products, my wp_postmeta reached ~50MB size...imagine if I inserted 5000 products what would happen! :S
[qubyte] joined the channel
#
[Michael_Beckwit a rather large wp_postmeta table
#
[Michael_Beckwit but not as large as i’ve seen/dealt with
#
[Michael_Beckwit so it’s something to keep in mind, but far from the worst
#
stefanos82 can you share any article around WooCommerce plugin development that shows how to implement custom table(s) so I can store my data there?
#
stefanos82 [Michael_Beckwit: well...this demo is something I work on locally and at work we plan to import 50K products! -_-
#
[Michael_Beckwit sadly i don’t have any that i’ve actually gotten the chance to attempt with
#
stefanos82 that's a long-term goal though
chimo joined the channel
#
[Michael_Beckwit it’s all just been research-like details and not focused specifically on WooCommerce
#
stefanos82 if we didn't use WordPress, I think it *could* have been simpler to implement with a framework
#
stefanos82 but right now, with my limited knowledge around WordPress ecosystem, my hands are tight
#
[Michael_Beckwit closest i have from my notes are https://www.antradar.com/blog-wordpress-and-the-curse-of-eav and https://wordpress.stackexchange.com/questions/4852/post-meta-vs-separate-database-tables/257147#257147
#
Loqi Antradar Software Inc.
chimo joined the channel
#
stefanos82 yeah the SO link gave me the chill hours ago
#
[Michael_Beckwit the table i was researching for is up to 2mil+ rows
#
[Michael_Beckwit but just in the past week or two i saw people with woocommerce sites that have 10mil+ rows
#
stefanos82 I have seen some reports online, but those have done it with custom REST API endpoints, which means they have heavily modified / customized their websites
[tantek] joined the channel
#
[Michael_Beckwit ugh, telling to make it opt out vs opt in
[fluffy] and [KevinMarks] joined the channel