Daniel Goldsmith
https://ascraeus.org/
•
Jul 7
WeChat ID
aaronpk_tv
Saturday, July 7, 2018
| bicycle |
49 min
|
| run |
30 min
|
|
7.5 miles
|
bicycle |
|
3 miles
|
run |
-
-
-
fwiw, I registered
p3k.xyzp3k.app and I'm planning on eventually moving all my p3k.io subdomains over to it. From a practical perspective, it will take a while, but it's something. -
OAuth for the Open Web
OAuth has become the de facto standard for authorization and authentication on the web. Nearly every company with an API used by third party developers has implemented OAuth to enable people to build apps on top of it.continue reading... -
OAuth for the Open Web
A little about the challenges of using #OAuth2 in a distributed setting for WordPress, GitLab, Mastodon, and more. Spoiler: it's not all bad news. Let's make this happen!
https://aaronparecki.com/2018/07/07/7/oauth-for-the-open-web -
Alright, I finished my post explaining the details of this! Have a look ➡️ https://aaronparecki.com/2018/07/07/7/oauth-for-the-open-web
-
Yep! https://github.com/indieweb/wordpress-indieauth
That's annoying that wordpress.org doesn't have a link to the GitHub source. -
Unfortunately this won't really work.
Even if you could sign in to Aperture, you still wouldn't be able to use any of the reader apps. The reader apps expect to be able to get an access token in order to make authenticated requests to Aperture. Getting an access token requires having an authorization endpoint and token endpoint.
If I allowed people to log in to Aperture without fully setting up IndieAuth, it would just be confusing because then they'd get an error trying to sign in to any apps. I think it's better to not mislead people at that stage, and require that they set up IndieAuth before being able to sign in to Aperture. -
Sven Knebel
https://www.svenknebel.de/
•
Jul 7
Careful though if anything on there is supposed to send e-mail: .xyz is among the TLDs that are very strong spam-indicators.
j/k, I already forgot the domain I registered. It's actually p3k.app! -
@gargron isn't it great though
i mean the whole thing of registering apps has mostly been justified by commercial restrictions and a pain in the ass for developers and users
-
IndieAuth sounds interesting as a more generic way for federated applications to allow app registrations https://indieauth.spec.indieweb.org/
The question is how do we adapt this after our current, extremely similar but somewhat different system has been in production use for around 2 years #mastodev
-
Thoughts: The requirement of apps to have a publicly accessible website conforming to the IndieAuth API might be a limiting factor
On the other hand, globally unique identifiable apps is a huge benefit in terms of admins being able to restrict app access. I.e., currently every user can revoke app access to their account, but server admins cannot say "I don't want the cross-poster to work with my server" because there is no such thing as *the* cross-poster
-
I added experimental support for IndieAuth in Indiepaper today. Test it out here – https://www.indiepaper.io/indieauth.html. Once authenticated, you get an automatically generated bookmarklet and a button to click for automatically configuring Indiepaper for macOS.
-
Eugen
https://mastodon.social/@Gargron
•
Jul 7
IndieAuth sounds interesting as a more generic way for federated applications to allow app registrations https://indieauth.spec.indieweb.org/
The question is how do we adapt this after our current, extremely similar but somewhat different system has been in production use for around 2 years #mastodev
The existing Mastodon API uses OAuth 2, right? Seems like you'd be able to add this on top and still also support the existing behavior without any changes. You'd get the benefit of auto discovery and global client IDs. Maybe we should chat about this at the next w3c call? -
Look for mf2 first, use Mercury as a fallback
If the page has mf2, that is likely to be much better data than what Mercury finds. Indiepaper should first check if it finds an article via mf2, and if it doesn't, then can use Mercury to extract what it can.continue reading... -
Working on on Indiepaper has been a fun project. It's involved writing Python, Swift, HTML, CSS, and JavaScript, and using @awscloud Lambda, S3, and CloudFront. #polyglot
-
Julien Deswaef
https://mastodon.social/@xuv
•
Jul 7
@aaronpk for some reason, this post does not federate well with all Mastodon instances. I'm trying to boost it from another account elsewhere, but I can't seem to see it. Any clue?
hm, I've been incrementally implementing ActivityPub, doing as little as possible each time. I don't think I've tried what you're doing yet, trying to find my post from an instance that is not already following me. I'm not actually sure what I need to implement to make that work though! Any ideas? -
If you’re familiar with OAuth, this introduction to IndieAuth walks through the process of how auth for the open web works. Really happy that Micro.blog supports this now.
→ 2018/07/07 3:41 pm -
Julien Deswaef
https://mastodon.social/@xuv
•
Jul 7
@aaronpk for some reason, this post does not federate well with all Mastodon instances. I'm trying to boost it from another account elsewhere, but I can't seem to see it. Any clue?
by any chance, are you trying to paste that post's URL into the search box on other Mastodon instances? -
Julien Deswaef
https://mastodon.social/@xuv
•
Jul 7
@aaronpk yes. Exactly tried that. It does not work. Also, I can't seem to see the boost I did from a different instance looking at this account.
I think I fixed it... give it a try again? -
Microsub and the new reader evolution (skippy.net)"The other great thing about Microsub, the technology behind Aperture and Monocle, is the separation of “feed collection” from “feed display”. I don’t have to use only Monocle to read my feeds. On my phone, I use an app called Indigenous. I could also use Monocle from a mobile browser. Or I could use Together. Or I could write my own reader interface, if I so chose."
-
-
Julien Deswaef
https://mastodon.social/@xuv
•
Jul 7
@aaronpk PS: I should mention that I started following you from the other instance. But still could not see your post before searching for it.
Yeah that sounds like Mastodon's limitation where it doesn't actually go fetch posts from people if someone on the server isn't already following them. Thanks for providing an example where that was confusing! -
The IndieAuth extension to OAuth2 is perfect. I will adopt this in @home_assistant to make it easier for people to build apps against local instances.
-
Espresso
-
-
IndieAuth: Eliminate registration for OAuth APIs and use URLs for identity & auth: https://aaronparecki.com/2018/07/07/7/oauth-for-the-open-web
-
Andy McIlwain
https://andymci.com
•
Jul 7
An independent web doesn't necessarily mean an open web. Thinking about private sites and networks for groups, families, personal use. #indieweb #justathought
Agreed, and an open web doesn't imply a public web. We're experimenting with private content too! https://indieweb.org/private_posts -
The hackernews comments are not entirely terrible! 🕺
-
-
always coming home
https://cybre.space/@nightpool
•
Jul 8
@aaronpk really enjoying the custom emoji, thanks
uhoh, that's just a regular emoji, and it looks like I'm sending relative URLs to Mastodon so that gets linked to a nonexistent page on cybre.space! So many edge cases! -
always coming home
https://cybre.space/@nightpool
•
Jul 8
@aaronpk oh, weird. I haven't ever seen that emoji before, that was mainly why i was confused
custom emoji sound fun tho, where is that documented? -
People who say San Diego doesn’t have seasons are mistaken. We have many seasons:
- Nice but it rains sometimes.
- Nice but cloudy in the morning.
- Parrots!
- Nice but a bit too hot in the middle of the day.
- HOT.
- Fires.
- Nice but the sun sets too early.
-
ohno
-
Include timezone offset in machine-readable timestamp
Toots are displayed in (someone's) local time, but the machine readable date is always rendered in UTC.continue reading... -
Syl and Miku
https://www.instagram.com/sylandmiku
•
Jul 7
One of the only pictures we took from #firstcaturdaypdx. We got way too distracted by all the cute cats!
We loved seeing @roarpdx there! Miku and Syl love their new #catdancer
#mikucat #caturday #cats #catsofinstagram #adventurecatintraining
@indiewebcat we gotta get you ready for this next year! -
[96/100] Today is my 31st birthday so I dressed up like a punk rock princess 13 yr old! As usual, I will put out my annual report zine soon but here is a mini-report on the last year. This week I am launching a year-long YouTube project... stay tuned! #birthdayportrait #100daysofqs #100dayproject #quantifiedself #punkrockprincess #dollskill #platformboots #glamrock #qs #data #personaldata #debtfreecommunity #travel #selfportrait
-
so wait... you include :something: in the text of your post, then include an "Emoji" tag with the name :something: and the client matches it up?
-
Here's a post I just wrote explaining IndieAuth and how it solves a number of the challenges with OAuth in this context.
https://aaronparecki.com/2018/07/07/7/oauth-for-the-open-web -
always coming home
https://cybre.space/@nightpool
•
Jul 8
@aaronpk yeah. this was judged this least-complicated of all the possible options
Yeah, that's surprisingly simple. We need to work on the Microformats markup for that though. Although it came through not completely broken on my website as is. -
amit
https://micro.blog/amit
•
Jul 8
@aaronpk I agree, you get to read multiple perspective on a topic. Of course, they are comments on web; so have to sort through some terrible ones. But I find the overall balance is on manageable side.
It's a little nervewracking when it's about your own post. I decided to stay out of the discussion there this time.
