Aaron Parecki

Tantek Çelik http://tantek.com/

I think IndieAuth makes a lot of sense as the way to implement a federated login protocol to provide a "simpler UX for OAuth2" login for Gitea as this issue is named.

It would also be possible to provide support for the "with GitHub" portion (as originally noted in the issue) without having to ask / wait for GitHub to implement IndieAuth, by adding https://indieweb.org/RelMeAuth support.

https://indielogin.com/ is an example of an open source service that supports both of those, IndieAuth as github.com/aaronpk suggested and RelMeAuth, and is in daily use by folks signing-into the IndieWeb.org site.

Portland, Oregon • 66°F

Mon, Jun 4, 2018 2:55pm -07:00 (liked on Mon, Jun 4, 2018 6:08pm -07:00)
at Imperial

Portland, Oregon • Mon, June 4, 2018 4:22pm

45.521108 -122.678698

Cocktails and code

Portland, OR, United States • 66°F

1 like 2 Coins

Mon, Jun 4, 2018 4:22pm -07:00
Ride

4.31mi
Distance

26:56
Duration

3:00pm
Start

3:27pm
End

Portland, Oregon • 66°F

Mon, Jun 4, 2018 3:27pm -07:00
＠c̲hris̲epps̲tein http://chriseppstein.github.com/ • Jun 4
john. why don't people microformat more? it's such a good thing.

We're microformatting a lot over in the #indieweb! https://indieweb.org/microformats (This tweet was literally brought to you by Microformats)

Portland, Oregon, USA • 63°F

2 likes

Mon, Jun 4, 2018 1:53pm -07:00 #indieweb
tboerger https://github.com/tboerger • Jun 4
Sounds like it's comparable with openid connect.

Not quite, since OpenID Connect still requires registering clients to get client credentials to use with the flows. There is a dynamic client registration part of OpenID Connect, but this allows you to entirely bypass the need for registering clients separately since we just piggyback on the existing DNS for identifying clients.

Portland, Oregon, USA • 63°F

Mon, Jun 4, 2018 1:03pm -07:00
Adam Banks https://medium.com/@adambanksdotcom

Apple basically declaring war on adtech. Safari will halt tracking, Like buttons etc and ask permission; will thwart device fingerprinting (used by trackers to get round blocking of other tech) #WWDC18

Portland, Oregon • 64°F

Mon, Jun 4, 2018 6:56pm +00:00 (liked on Mon, Jun 4, 2018 12:28pm -07:00) #WWDC18
Michelle 🚀 http://michellejl.com

Super excited about all the conferences I’m going to this summer!! @osbridge @IndieWebSummit @FluentConf @oscon.

Portland, Oregon • 64°F

Mon, Jun 4, 2018 7:06pm +00:00 (liked on Mon, Jun 4, 2018 12:19pm -07:00)
inconvergent https://inconvergent.net

it's 2020. noBlockchain is the new database hype.

Portland, Oregon • 63°F

Mon, Jun 4, 2018 6:32am +00:00 (liked on Mon, Jun 4, 2018 12:15pm -07:00)
Danger Casey http://CaseySoftware.com

Clippy v2.0 of Microsoft+LinkedIn+Lynda+Github:

"It's great you're applying to this job! I'd suggest your review these training videos first because.. well, we've seen your code."

Portland, Oregon • 62°F

Mon, Jun 4, 2018 2:03pm +00:00 (liked on Mon, Jun 4, 2018 11:23am -07:00)
tboerger https://github.com/tboerger • Nov 3

#27 Integrate an OAuth2 provider

It would be fantastic if Gitea were its own OAuth2 provider! In fact, IndieAuth is the perfect candidate for how to implement this.

IndieAuth is an OAuth 2.0 extension, which avoids the centralized problems with existing OAuth solutions by using DNS for "registration" of client IDs and user IDs. Every user account is identified by a URL (for Gitea this could be your Gitea user page), and client IDs are also URLs (would be the Gitea instance home page in this case.)

This would let people sign in to other Gitea instances without any sort of prior relationship or doing client registration and such. Happy to walk through this in more detail if you're interested!

Portland, Oregon, USA • 63°F

Mon, Jun 4, 2018 11:20am -07:00
Danger Casey http://CaseySoftware.com

Whoa. I love the new @Github user interface.. clear, simple, and handheld.

Well done, @Microsoft.

Portland, Oregon • 63°F

Mon, Jun 4, 2018 6:08pm +00:00 (liked on Mon, Jun 4, 2018 11:18am -07:00)
Randall Degges https://www.rdegges.com

If you're a good JS developer, speaker and writer, I'd love to work with you! We're hiring an awesome developer evangelist to help us with our JavaScript evangelism @oktadev. Hit me up if you're interested! <3 We have an awesome team: @mraible @leebrandt @aaronpk and me =D

Mon, Jun 4, 2018 4:51pm +00:00 (reposted on Mon, Jun 4, 2018 9:52am -07:00)
Brandon Kelly https://twitter.com/brandonkelly

Wow that was fast.

Portland, Oregon • 53°F

Sun, Jun 3, 2018 9:55pm +00:00 (liked on Mon, Jun 4, 2018 6:59am -07:00)
coolaj86 https://github.com/coolaj86 • Apr 23

#3837 Simpler UX for OAuth2 login with GitHub

What we really need is federated authentication, but that doesn't exist yet.

This sounds like a great use case for IndieAuth. w3.org/TR/indieauth

IndieAuth is an OAuth 2.0 extension, which avoids the centralized problems with existing OAuth solutions by using DNS for "registration" of client IDs and user IDs. Every user account is identified by a URL (for Gitea this could be your Gitea user page), and client IDs are also URLs (would be the Gitea instance home page in this case.)

To log in to your Gitea instance, I would enter my own Gitea profile URL. Your instance would then do discovery on my URL to find where to send me to authorize the login on my own OAuth server (my Gitea server), which would then send me back to your Gitea where it would be able to verify the authorization code against my Gitea instance.

I'd be happy to walk through this in more detail if you're interested!

Portland, Oregon, USA • 53°F

1 reply

Mon, Jun 4, 2018 6:43am -07:00 #indieauth
Danger Casey http://CaseySoftware.com

Re: Github & Microsoft

In the last ~2 weeks, I've had the "enterprise developers make the world go around" conversation about 5 times. No one likes to admit it but for every single JS hacker out there, there are probably 10+ .Net or Java devs.

And 3 JS frameworks.

Portland, Oregon • 53°F

Mon, Jun 4, 2018 1:38am +00:00 (liked on Mon, Jun 4, 2018 6:33am -07:00)
What I took from this article is that @SimoneGiertz is basically the modern day Rube Goldberg https://www.collectorsweekly.com/articles/rube-goldberg-got-tech-right/

Portland, Oregon, USA • 53°F

1 repost

Mon, Jun 4, 2018 6:31am -07:00
Pelle Wessman http://voxpelli.com

+1, the real solution to it would be to do what eg. the @indiewebcamp community has experimented with and brainstormed about: https://indieweb.org/GitHub Decentralized/indie social networks are for GitHub activities as much as they are for tweets, events etc

Portland, Oregon • 53°F

Mon, Jun 4, 2018 8:09am +00:00 (liked on Mon, Jun 4, 2018 4:49am -07:00)
155.9lbs
Weight

18.9%
Body Fat

Portland, Oregon

Mon, Jun 4, 2018 4:43am -07:00
Mikeal Rogers https://medium.com/@mikeal

Leaving GitHub for another platform that is also controlled by a single company running a centralized product makes no sense to me at all.

Portland, Oregon • 57°F

Mon, Jun 4, 2018 12:48am +00:00 (liked on Mon, Jun 4, 2018 4:39am -07:00)
8:34pm
Asleep

4:34am
Awake

8h 00m
Slept

21m
Awake for

Portland, Oregon, USA

Mon, Jun 4, 2018 4:34am -07:00

older

Aaron Parecki

#27 Integrate an OAuth2 provider

#3837 Simpler UX for OAuth2 login with GitHub