85°F

Aaron Parecki

  • Articles
  • Notes
  • Photos
  • 9:21pm
    Asleep
    5:17am
    Awake
    7h 56m
    Slept
    21m
    Awake for
    Portland, Oregon, USA
    Mon, May 20, 2024 5:17am -07:00
  • 8:16pm
    Asleep
    4:31am
    Awake
    8h 15m
    Slept
    24m
    Awake for
    Portland, Oregon, USA
    Sun, May 19, 2024 4:31am -07:00
  • Nachos
    Portland, Oregon, USA • 56°F
    Sat, May 18, 2024 5:53pm -07:00
  • Aaron Parecki
    Contributions from: Australia, France, Germany, India, Kuwait, Montenegro, Netherlands, New Zealand, Switzerland, United Kingdom, United States
    Sat, May 18, 2024 2:52pm -07:00
  • Aaron Parecki
    Contributions from: Australia, France, Germany, India, Kuwait, Montenegro, Netherlands, New Zealand, Switzerland, United Kingdom, United States
    Sat, May 18, 2024 10:27am -07:00
  • Jason Garber https://mastodon.cc/@jgarber   •   May 18

    @aaronpk I read over your post and a bunch of related links. Really fascinating stuff!

    From your post: “All it takes to turn your website into a FedCM-supported site is adding a single `<link>` tag to your home page.”

    Can you expand on this? IndieAuth (mostly) requires two `<link>` elements for authorization and token endpoints. What would a singular `<link>` look like in this case?

    Aaron Parecki
    A few years ago we changed the IndieAuth spec to use a single link tag so that it's easier and also more flexible in the future. This is a good example of taking advantage of that flexibility too. https://indieauth.spec.indieweb.org/#indieauth-server-metadata
    Portland, Oregon • 49°F
    1 reply
    Sat, May 18, 2024 8:03am -07:00
  • Paleo Skittles - Homemade Real Food Dehydrator Recipe (joyfulabode.com)
    Sat, May 18, 2024 6:39am -07:00 #dehydrator #recipe
  • 10:33pm
    Asleep
    5:33am
    Awake
    7h 00m
    Slept
    16m
    Awake for
    Portland, Oregon, USA
    Sat, May 18, 2024 5:33am -07:00
  • Aaron Parecki
    Contributions from: Australia, France, Germany, India, Kuwait, Montenegro, Netherlands, New Zealand, Switzerland, United Kingdom, United States
    Sat, May 18, 2024 5:14am -07:00
  • JohnPhilpin https://micro.blog/JohnPhilpin

    @aaronpk thanks - i like step '0'

    You are very brave, patient and understands that you have options (1) and (2)

    saved for playing around with.

    Portland, Oregon • 53°F
    Sat, May 18, 2024 4:38am +00:00 (liked on Fri, May 17, 2024 9:39pm -07:00)
  • Ricky Mondello https://hachyderm.io/@rmondello

    I always knew this day would come. “Add a shared credentials relationship from twitter.com to x.com” https://github.com/apple/password-manager-resources/pull/759

    Portland, Oregon • 55°F
    Fri, May 17, 2024 5:17pm +00:00 (liked on Fri, May 17, 2024 8:52pm -07:00)
  • Aaron Parecki
    Well this is moving quickly! You can now spin up FedCM on your own website and log in to https://webmention.io thanks to this open source project from Sam Goto! This is so much better than having to type out your website or even email address when logging in! Full instructions here:

    https://github.com/fedidcg/FedCM/issues/240#issuecomment-2118606184
    Portland, Oregon, USA • 55°F
    17 likes 11 reposts 3 replies
    Fri, May 17, 2024 8:49pm -07:00 #fedcm #indieauth
  • 10:52pm
    Asleep
    5:08am
    Awake
    6h 16m
    Slept
    21m
    Awake for
    Portland, Oregon, USA
    Fri, May 17, 2024 5:08am -07:00
  • Emelia 👸🏻 https://hachyderm.io/@thisismissem

    @aaronpk sure, drop me an email (see my website in bio) and we can arrange a call.

    Portland, Oregon • 63°F
    Thu, May 16, 2024 6:25pm +00:00 (liked on Thu, May 16, 2024 11:37am -07:00)
  • Emelia 👸🏻 https://hachyderm.io/@thisismissem   •   May 16

    @aaronpk am I understanding that in order to use FedCM the RP must perform dynamic client registration with the IdP? I'm unsure of how the `client_id` comes to exist for the RP and not really getting it for the first-sign-in flow?

    Aaron Parecki
    I just saw your comment on FedCM #585. Since you're diving into the depths of Mastodon OAuth already I'd love to talk about how we can better align IndieAuth OAuth and Mastodon OAuth!
    Portland, Oregon • 63°F
    1 reply
    Thu, May 16, 2024 11:22am -07:00 #585
  • Emelia 👸🏻 https://hachyderm.io/@thisismissem   •   May 16

    @aaronpk am I understanding that in order to use FedCM the RP must perform dynamic client registration with the IdP? I'm unsure of how the `client_id` comes to exist for the RP and not really getting it for the first-sign-in flow?

    Aaron Parecki
    It has nothing to do with FedCM actually. In IndieAuth we avoid client registration entirely by using URLs as client identifiers. So the client already knows its client ID, and uses the same client ID at every authorization server it talks to. It's also a natural fit for FedCM since you can use `window.location.origin` for it in the JS call.
    Portland, Oregon • 63°F
    1 reply
    Thu, May 16, 2024 11:15am -07:00
  • Aaron Parecki
    Contributions from: France, Germany, India, Kuwait, Montenegro, Netherlands, New Zealand, Switzerland, United Kingdom, United States
    Thu, May 16, 2024 7:01am -07:00
  • 9:15pm
    Asleep
    5:13am
    Awake
    7h 58m
    Slept
    27m
    Awake for
    Portland, Oregon, USA
    Thu, May 16, 2024 5:13am -07:00
  • Aaron Parecki
    Contributions from: Germany, India, Kuwait, Montenegro, Netherlands, New Zealand, Switzerland, United Kingdom, United States
    Thu, May 16, 2024 1:19am -07:00
  • Aaron Parecki
    Contributions from: Germany, India, Kuwait, Montenegro, Netherlands, New Zealand, Switzerland, United Kingdom, United States
    Wed, May 15, 2024 3:08pm -07:00
older

Hi, I'm Aaron Parecki, Director of Identity Standards at Okta, and co-founder of IndieWebCamp. I maintain oauth.net, write and consult about OAuth, and participate in the OAuth Working Group at the IETF. I also help people learn about video production and livestreaming. (detailed bio)

I've been tracking my location since 2008 and I wrote 100 songs in 100 days. I've spoken at conferences around the world about owning your data, OAuth, quantified self, and explained why R is a vowel. Read more.

  • Director of Identity Standards at Okta
  • IndieWebCamp Founder
  • OAuth WG Editor
  • OpenID Board Member

  • 🎥 YouTube Tutorials and Reviews
  • 🏠 We're building a triplex!
  • ⭐️ Life Stack
  • ⚙️ Home Automation
  • All
  • Articles
  • Bookmarks
  • Notes
  • Photos
  • Replies
  • Reviews
  • Trips
  • Videos
  • Contact
© 1999-2025 by Aaron Parecki. Powered by p3k. This site supports Webmention.
Except where otherwise noted, text content on this site is licensed under a Creative Commons Attribution 3.0 License.
IndieWebCamp Microformats Webmention W3C HTML5 Creative Commons
WeChat ID
aaronpk_tv