Aaron Parecki

Thursday, May 16, 2024

Contributions from: Germany, India, Kuwait, Montenegro, Netherlands, New Zealand, Switzerland, United Kingdom, United States

Thu, May 16, 2024 1:19am -07:00
9:15pm
Asleep

5:13am
Awake

7h 58m
Slept

27m
Awake for

Portland, Oregon, USA

Thu, May 16, 2024 5:13am -07:00
Contributions from: France, Germany, India, Kuwait, Montenegro, Netherlands, New Zealand, Switzerland, United Kingdom, United States

Thu, May 16, 2024 7:01am -07:00
Emelia 👸🏻 https://hachyderm.io/@thisismissem • May 16
@aaronpk am I understanding that in order to use FedCM the RP must perform dynamic client registration with the IdP? I'm unsure of how the `client_id` comes to exist for the RP and not really getting it for the first-sign-in flow?

It has nothing to do with FedCM actually. In IndieAuth we avoid client registration entirely by using URLs as client identifiers. So the client already knows its client ID, and uses the same client ID at every authorization server it talks to. It's also a natural fit for FedCM since you can use `window.location.origin` for it in the JS call.

Portland, Oregon • 63°F

1 reply

Thu, May 16, 2024 11:15am -07:00
Emelia 👸🏻 https://hachyderm.io/@thisismissem • May 16
@aaronpk am I understanding that in order to use FedCM the RP must perform dynamic client registration with the IdP? I'm unsure of how the `client_id` comes to exist for the RP and not really getting it for the first-sign-in flow?

I just saw your comment on FedCM #585. Since you're diving into the depths of Mastodon OAuth already I'd love to talk about how we can better align IndieAuth OAuth and Mastodon OAuth!

Portland, Oregon • 63°F

1 reply

Thu, May 16, 2024 11:22am -07:00 #585
Emelia 👸🏻 https://hachyderm.io/@thisismissem

@aaronpk sure, drop me an email (see my website in bio) and we can arrange a call.

Portland, Oregon • 63°F

Thu, May 16, 2024 6:25pm +00:00 (liked on Thu, May 16, 2024 11:37am -07:00)