sebsel
https://github.com/sebsel
•
May 26
-
-
This looks great! Just testing it out now.
Looks like both IndieAuth login and authorization is working well, so glad to see the new local verification in there now. Also the web sign-in flow works great, I'm able to sign in to my test site using my aaronparecki.com identity (which is not running WordPress, also a good test).
Let's publish! -
Andrew Woods
http://andrewwoods.net
•
Jun 12
@aaronpk I was curious about the bookmarks on your website. Are they being published to your site dynamically by your browser. when you add a bookmark? Can they be imported easily back into a browser? -
manton
https://github.com/manton
•
Jun 10
I don't think this really solves the problem, though. If a server implementation prefers
contentoversummary(which it should), with this example the context of the book title will be lost unless the server is updated to understandread-of. -
The
summaryproperty is intended to be used for fallback for when the server doesn't recognize the other properties of the request. Most Micropub servers understandcontentandphoto, but this is a great example of an interesting content type that is likely not supported by most servers yet. In this case,summaryis the correct place for this fallback content. Thecontentproperty would be misleading since normally thecontentproperty contains user-entered text. For example, if the user enters a note about why they wanted to read this, that could be included in thecontentproperty. -
Aaron Parecki
https://aaronparecki.com/
•
Jun 8
Surprise! I'm in NY! Meet me for a popup #indieweb meetup tonight at Hofbräu Bierhaus near Grand Central! 7:30pm http://4sq.com/i9XQuQ -
Ryan Barrett
https://snarfed.org/
•
Jun 7
this is so so great! i’ve checked it into github; let me know if you want me to add a license notice. i’m adding it to oauth-dropins, Bridgy, and huffduff-video. thank you! -
Randall Degges
https://www.rdegges.com
•
Jun 5
Talked to someone in the airport a few mins ago between flights who works for a company that matches students to jobs using the blockchain. All I can think is... Why? -
-
＠c̲hris̲epps̲tein
http://chriseppstein.github.com/
•
Jun 4
john. why don't people microformat more? it's such a good thing.We're microformatting a lot over in the #indieweb! https://indieweb.org/microformats (This tweet was literally brought to you by Microformats) -
Not quite, since OpenID Connect still requires registering clients to get client credentials to use with the flows. There is a dynamic client registration part of OpenID Connect, but this allows you to entirely bypass the need for registering clients separately since we just piggyback on the existing DNS for identifying clients.
-
It would be fantastic if Gitea were its own OAuth2 provider! In fact, IndieAuth is the perfect candidate for how to implement this.
IndieAuth is an OAuth 2.0 extension, which avoids the centralized problems with existing OAuth solutions by using DNS for "registration" of client IDs and user IDs. Every user account is identified by a URL (for Gitea this could be your Gitea user page), and client IDs are also URLs (would be the Gitea instance home page in this case.)
This would let people sign in to other Gitea instances without any sort of prior relationship or doing client registration and such. Happy to walk through this in more detail if you're interested!
-
What we really need is federated authentication, but that doesn't exist yet.
This sounds like a great use case for IndieAuth. w3.org/TR/indieauth
IndieAuth is an OAuth 2.0 extension, which avoids the centralized problems with existing OAuth solutions by using DNS for "registration" of client IDs and user IDs. Every user account is identified by a URL (for Gitea this could be your Gitea user page), and client IDs are also URLs (would be the Gitea instance home page in this case.)
To log in to your Gitea instance, I would enter my own Gitea profile URL. Your instance would then do discovery on my URL to find where to send me to authorize the login on my own OAuth server (my Gitea server), which would then send me back to your Gitea where it would be able to verify the authorization code against my Gitea instance.
I'd be happy to walk through this in more detail if you're interested!
-
Marek Jelen
http://mjelen.eu
•
Jun 3
Did you create a team? Top tight corner, group icon ... without invite you probably have no team so you do not see the features. -
Graham Dumpleton
http://blog.dscpl.com.au
•
Jun 3
Are you talking about the hosted service for EvMan? cc @marek_jelen -
Graham Dumpleton
http://blog.dscpl.com.au
•
May 31
Use EvMan. https://github.com/evmanhq/evman Developed by @marek_jelen to support the same task for our team of OpenShift evangelists. Awesome sauce.
-
