Vika
https://fireburn.ru/
•
Dec 28
Great news - my frontend can do the onboarding procedure! It successfully uploads my h-card and posts a “first post” to the blog, so it won’t be empty.
For now I didn’t do authentication yet. I’m still thinking if I should do password+TOTP auth, just a password or a WebAuthn. Or maybe I could just use indieauth.com directly, but that needs at least one social profile in the h-card, which is not guaranteed right now.
With a use of cross-platform authenticators this should not be much of a problem. You use a YubiKey to log into your site and in the admin panel there would be a button that enrolls your platform authenticator too. I think I saw something like this in the spec’s GitHub issues, can’t remember where exactly.