Zegnat
https://github.com/Zegnat
•
Jan 3
WeChat ID
aaronpk_tv
-
This spec intentionally doesn't specify how users authenticate themselves to their server, it only deals with how third-party clients can authenticate users where their domain name is their identity.
The analogous version of this in RelMeAuth, with Google as an example, is such: as far as the RelMeAuth client is concerned, it sends the user over to Google, and expects Google to handle authenticating the user. This might involve entering their password, optionally followed by a 2fa mechanism like a Yubikey or TOTP code. That is all invisible to the site they're logging in to.
Similarly, IndieAuth clients do not know how users authenticate to their own server, the client just expects to send them off to the authorization endpoint and get back a response later that can be verified.
It is not a good idea for a spec to require any sort of authentication mechanism between the user and their own authorization server, which is something that the OAuth 2.0 spec has also made clear.
Now, the rest of this conversation is essentially continuing the naming debate of indieauth.com vs IndieAuth the spec vs other options we've considered.
I agree with many of @tantek's points, like
... should be it "just works" even if you only setup rel=me
However, that is describing RelMeAuth, not this spec. And as @Zegnat pointed out, even just adding rel=me isn't necessarily going to guarantee that you can sign in to an arbitrary site that supports RelMeAuth, since you need to add a rel=me link to a service that the site you're signing in to supports, which requires that site to register an OAuth application and deal with that service's API.
I'm in the middle of renaming indieauth.com, the goal is that the wiki will redirect users to indielogin.com to authenticate them using the existing mechanisms: RelMeAuth, email, PGP, and IndieAuth. Nowhere in that flow will users see the term "IndieAuth" unless they include a
rel=authorization_endpointlink on their website to an IndieAuth server of their choosing.I definitely agree that signing in to the wiki needs to be as simple as possible. That's the reason I added so many OAuth providers as well as alternate methods to indieauth.com (soon indielogin.com) in the first place. We've even had some people who want to sign in to the wiki but don't have a Twitter or GitHub account and don't want one, which is why I added things like email and PGP authentication options, which were not described by RelMeAuth.
This is all to say that it's not the goal of this spec to include RelMeAuth. This spec is intended to be just the URL-based extension to OAuth 2.0. If "IndieAuth" is not the right name for this spec, that's a different issue.
-
More discussion from IRC: https://chat.indieweb.org/dev/2018-01-02#t1514910516855700
-
Include weather info in location records
Right now, the process of getting weather info into my posts involves an extra step I would like to avoid. I would also like if my GPS logs contained weather info themselves, to avoid having to link up an external dataset to correlate that info.continue reading... -
svenseebeck
https://micro.blog/svenseebeck
•
permalink
@aaronpk Hi Aaron! Manton pointed me to webmention.io and I wondered if you would be able to clarify how/if I could use it within the limitations of a Wordpress.com-hosted site. Is that possible? Any help appreciated.
Do you have the ability to add custom HTML on wordpress.com? You'd need to be able to add the <link> tag to your site's header, as described on https://webmention.io
You'll then need to write some Javascript to pull the comments into the page and render them. -
Tomas Quinones
http://flyingsnailcreations.com
•
Dec 31
Any tips on quantifying goals to track progress? Drawing more, studying front end dev, learning subject x, and so forth?
For encouraging short-term progress on long-term goals I would definitely recommend @bmndr! -
manton
https://micro.blog/manton
•
permalink
@chet We are going to add more header/footer customization soon. You can do some things with CSS too.
You could probably sneak in an image via CSS that way, yea! -
yatil
https://micro.blog/yatil
•
permalink
@aaronpk Those badges should really have
altattributes to make them accessible to people with disabilities, too. Let’s create an indieweb for all! :-D
You're right! I'll update my examples. -
That *is* quick and dirty! If you're going to embed the png in the svg then you might as well also set the image-rendering attribute to "pixelated"!
-
frank
https://micro.blog/frank
•
permalink
@aaronpk Thanks Aaron, I'm glad it works. I understand the tiers of checking, but I've posted quite a few photos the last couple of days. That's why I was surprised to see how long it takes. Would it be a big hurdle to take your code and install it for myself so I can make it more realtime for my own needs?
It's not too hard to set up if you're familiar with deploying PHP apps already. You'll need to set up the cron jobs described in the readme. I also just updated it so new users will start out at the top tier (every 15 minutes) -
Right now the client_id is set to "together.com" which is not where the app is launched! This also means any time I post from it my site is linking to together.com when it credits the app!
-
Eddie Hinkle
https://eddiehinkle.com/
•
Dec 28
My newwwyear goal is to add the current weather based on my current location to all of my posts and to have better post context (likes, replies, bookmarks, etc) based on using my local copy of XRay to parse for information.
I can't wait to see this! This has been on my list forever! I even have a massive database of the historical weather data for my location that I've been collecting for this purpose. I might have to add this as a stretch goal for myself this week! -
Aaron Parecki
https://aaronparecki.com/
•
Dec 26
My #newwwyear goal is to make my Micropub endpoint POSSE my likes and reposts to Twitter when I like a tweet URL. Right now, Quill handles that for me, so when I "like" a tweet URL from my browser, it also gets liked on Twitter. Now that I'm using the Indigenous iOS app more, I'm missing that step so when I "like" a tweet from my phone, it doesn't actually like it on Twitter. Getting my Micropub endpoint to handle the forwarding to Twitter will solve it, and thankfully I can use https://silo.pub instead of dealing with the Twitter API.
I finished early! https://aaronparecki.com/2017/12/27/15/auto-posse-likes -
Testing opening a new issue by posting a reply to the repo from my website using https://silo.pub
-
Testing commenting on a GitHub issue from my site via silopub
-
Matthias Ott
https://matthiasott.com
•
Dec 26
I’m considering buying a microphone for voice recording. Not too expensive but solid quality. Any recommendations? My current favorite is the Røde NT-USB, optionally with a spider shock mount.
I like the Apogee MiC cause it's so small and can connect to both a laptop and iPhone/iPad. That's what I use for my podcast right now. -
John Henry
http://clutchofthedeadhand.com
•
Dec 22
Oh, haha. Yeah, some formatting from bridge could be improved, but I'm just whining at that point :). I can follow up here after Christmas if you want additional help in making /social bridge work. Would love to participate in socialcg but already have like 5 chat applications...
If you have any suggestions for the Slack bridge, feel free to file issues here: https://github.com/aaronpk/Slack-IRC-Gateway
I'll check with the #social folks to make sure everyone's okay with it, but it's easy for me to run the bridge for that channel too. -
John Henry
http://clutchofthedeadhand.com
•
Dec 22
I'm in the Indieweb Slack bridge. Wonder if it's possible to bridge the /social into a Slack room? Also there's lots of botspam on that server overall that makes it hard to read (Loqi is cool, but I mostly want to talk to humans :p)
I could see about bridging that room to Slack too.
That botspam is actually all the people on IRC talking. There was a Slack iOS bug fixed a few days ago that made everything look like it was coming from Loqi. -
John Henry
http://clutchofthedeadhand.com
•
Dec 22
I need to setup an IRC bridge so that I can participate in these chats without having to use an ugly, confusing IRC client... #millenial #problems
I hear all the cool kids like Matrix. You can also at least read the logs here https://chat.indieweb.org/social
-
Aaron Parecki
https://aaronparecki.com/
•
Dec 18
bets on whether aaronpk makes it back to Portland tonight? I'm still on BART and my flight boards in 6 minutes
Made it! Got to security 5 minutes after boarding started, but no line for pre-check!
