#wordpress 2020-11-13

2020-11-13 UTC
[snarfed], simonw, miklb, [chrisaldrich], [KevinMarks], [eddie], astralbijection, nickodd, reed, [tantek], [tw2113_Slack_], miklb_, GWG, [mapkyca], petermolnar, [grantcodes], [jgmac1106], [manton], [Jan_Lukas_Else] and jamietanna joined the channel; nickodd left the channel
#
reed
hello folks, I stumbled upon an auth issue with WordPress on Dreamhost
#
reed
http://paste.openstack.org/show/800009/ this is the full error log when I try to post from Quill
#
reed
authentication works, but posting fails with 403... any clue?
#
GWG
This is oddly something that happened before with Dreamhost
#
GWG
I'm not sure why
#
GWG
Now, I have been stealing some ideas from Application Passwords, which just got merged into Core
#
GWG
They are more aggressive than I am
#
GWG
I may make IndieAuth add to htaccess automatically
#
reed
```# for Indie Auth
#
reed
Header set Access-Control-Allow-Origin "*"
#
reed
SetEnvIf Authorization "(.*)" HTTP_AUTHORIZATION=$1
#
reed
```
#
reed
i have that in mine
#
reed
i don't see anything in error.log
#
reed
what else should I try?
#
GWG
Try RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
#
GWG
That's the line that will automatically go in in WordPress 5.6
#
reed
same error
[CrowderSoup] joined the channel
#
GWG
Darn.
reed joined the channel
#
reed
should I remove the SetEnvIf?
#
reed
uhm ... I removed all those lines from .htaccess and the site-health check still passes
#
reed
indieauth plugin tests should fail, right?
nickodd and miklb joined the channel
#
GWG
Yes. I have a few theories, but it is something that Dreamhost does that I can't account for
#
GWG
I think the solution may come
#
reed
can you share your theories? I can file a ticket with DH (former employee, I may still have friends there :))
#
GWG
reed: Well, one being some mod_security rule
#
GWG
We had that with another provider
#
GWG
Where it is manipulating the field
#
reed
that's possible indeed... can you please help me write the ticket? which field is likely to be manipulated?
#
GWG
HTTP_AUTHORIZATION
#
reed
OK
#
miklb
howdy GWG
#
GWG
miklb: Long time. How are you?
#
miklb
I'm good. Looking forward to this weekend.
#
GWG
Me too
#
GWG
The weekend, good is relative
#
miklb
I'll be a little late tomorrow, but have set aside the weekend to hack indieweb.
#
miklb
yes, good with 2020 asterisk
#
miklb
I'm hoping tonight to get my WP site fixed up so I can work on Jekyll Indieweb, but I'm sure the two will bleed over.
#
GWG
Anything I can do
#
GWG
I have 5 bug fixes I want to work on.
#
GWG
And I need a feature to build to demo
#
miklb
I see you've been busy, so I want to get everything updated and test a few things. Mainly I want to get Micropub replies and quotetweets working, and finally figure out what I need to do to post photos. I think my image pre-processor times out the micropub request. But it's been a while since I've tried, so just need to test.
#
GWG
I always like to hear new ideas
#
GWG
And avoid breaking people's sites
#
miklb
My breaks were from using custom kind templates and logic. I post micropub notes all the time, but haven't had much motivation to work on the other until recently.
#
GWG
miklb: I have some more work to do to normalize the output
#
GWG
I found that was a better solution than all the if array key exists checks
#
miklb
I haven't looked at a line of the code in 8 months.
reed joined the channel
#
miklb
But I'm ready to now and I appreciate that you've been continually improving the tools. Thanks!
[eddie] joined the channel
#
GWG
miklb: There's always more I'd like to do
#
GWG
I just failed at implementing a feature and tabled it
[schmarty], [tantek], [chrisaldrich] and [tw2113_Slack_] joined the channel; nickodd left the channel
#
GWG
Yes
#
GWG
I follow Jeremy
#
miklb
name sounds familiar but not sure I've crossed paths directly. Found it from CSS Tricks post
#
[chrisaldrich]
[jeremyfelt] told me this last week that he was hoping to join us at camp this weekend.
#
reed
`Comments should have full webmention support.` I'm surprised this is not on WP core roadmap, is it?
#
[tw2113_Slack_]
it’s not javascript/gutenberg so they don’t really care
[Raphael_Luckom] joined the channel
#
[tw2113_Slack_]
not that they’ve cared about commenting right before that either
#
GWG
reed: I tried to get custom comment types as a project. Only two people were interested and one was me
#
reed
annoying :( I guess the world deserves the silos
#
reed
my gut feeling is that hosting companies should be interested to offer things that are at least on par with Medium
#
[tw2113_Slack_]
not sure i’d equate blog comments necessarily to silos
#
reed
it's all connected IMO
#
reed
wordpress.com and all hosting providers offer wordpress, those sell like candies... if WP experience is less good than Medium people will start publishing there instead
#
GWG
I have to see if pfefferle is available for the next phase of webmention 5.0
#
reed
the way I see it, webmentions is a crucial piece to be on par with popular alternatives
#
GWG
The Semantic Linkbacks merger
#
reed
right... WP saw the potential early on with track/linkbacks
#
reed
is waiting for a chat with dreamhost support
[asuh] joined the channel
#
[asuh]
I would think a great way to help WP core contributors to pay attention to update this is an excellent working plugin for webmentions in comments. the enticement is showing how effective the indieweb plugins are in practice.
#
[asuh]
I wish I knew PHP more to help with plugin development for WP
#
miklb
People like Chris Coyier to write a post about WordPress comments and mentioning Webmentions will go further than anything to get the eye of WP core contributors.
#
[asuh]
Very true, and I’d imagine Chris would be ecstatic to see it working and would write more when it becomes practical
#
miklb
He is always looking for guest writers for CSS Tricks. if someone were to write up and provide example, I'm sure he'd consider it. Especially if its honest about where work still needs to be done (Vouch?)
#
miklb
A lot of what he's looking for in comments (and Jeremy) seems like custom comment types would be key to accomplishing them.
#
GWG
miklb: It wouldn't be that hard, we already got the first stumbling block handled
#
GWG
Namely, comment comment type
#
GWG
Previously, comment was type ''
#
reed
GWG: looks like DreamHost support is also puzzled
#
GWG
reed: Yes, I'm sure there is something obvious
#
reed
i'm pushing them to look at mod_security but I don't know how successful my call will be... i'll need to ask some friends there to escalate, I guess
#
reed
maybe this is my clue to install Known and see if the issue is there, too :)
#
GWG
reed: Possibly if it is blocking the auth header somehow, which is regrettably common
maxwelljoslyn joined the channel