76°F

Aaron Parecki

  • Articles
  • Notes
  • Photos
  • Jonathan Yee https://github.com/jonyeezs   •   Feb 21
    Hi @aaronpk, "oauth-2-simplified" is a breath of fresh air when there are so many ways to do auth. This really simplifies it. I do have a question: Why would i still want to provide my client_secret for server-side when i can do without it to authenticate?
    Aaron Parecki
    Thanks! It's an additional layer of security. Without it, you need to use additional techniques such as strict redirect URL validation and even PKCE to compensate.
    Portland, Oregon, USA
    Wed, Feb 21, 2018 8:03pm -08:00
  • Nicolás Álvarez https://twitter.com/nicolas09F9   •   Feb 21
    @aaronpk where can I report errors in http://oauth.com?
    Aaron Parecki
    Feel free to send me an email https://aaronparecki.com/contact
    Portland, Oregon, USA
    Tue, Feb 20, 2018 8:04pm -08:00
  • EdwardHinkle https://github.com/EdwardHinkle   •   Feb 20

    #121 Add support for mp q=config destination

    Aaron Parecki
    This is exciting. This will motivate me to work on the multiple destination support I have in mind for my website!
    Portland, Oregon • 32°F
    Tue, Feb 20, 2018 6:41pm -08:00
  • EdwardHinkle https://github.com/EdwardHinkle   •   Feb 20

    Yep, exactly. Or a specialized app like Teacup that sends ate and drank posts. Those should still go through regardless.

    As you said, @manton, it's more of a suggestion but especially a suggestion for generalized Micropub application, as opposed to specialized.

    Aaron Parecki
    That makes sense, and also fits nicely with the idea of this as an extension rather than part of the base spec.
    Portland, Oregon, USA
    Tue, Feb 20, 2018 10:16am -08:00 #micropub
  • manton https://github.com/manton   •   Feb 20

    @aaronpk I'm glad you mentioned Post Type Discovery, because to me that is the part to focus on. It seems too complicated to require spelling out every property, like category or photo. If an endpoint doesn't support accepting a category on a new post, no harm done.

    What can we borrow from the Post Type Discovery spec that will help here? At the very least it seems like the Microformats class names should be consistent.

    In my example (https://indieweb.org/Micropub-brainstorming#Query_for_supported_vocabulary) I included what I view as the common actions from an app like Indigenous: like-of, repost-of, and bookmark-of, but bookmarks aren't actually mentioned in Post Type Discovery. I wonder if they should be, or are they not different enough from a regular post to list separately?

    Aaron Parecki

    Interesting, I didn't actually realize bookmark wasn't in Post Type Discovery. It looks like it was mentioned under "Other Types Under Consideration" before it was moved to the W3C repo. Now the W3C note links to the Kinds of Posts section on the IndieWeb wiki for that.

    The way we were adding things to the list of types in the algorithm was roughly based on how well-established the markup was in the wild. I am kind of surprised bookmarks didn't make that cut, but oh well.

    The one potential confusion here is that post types are not the same as h-* types, e.g. there is no h-reply because you use the in-reply-to property on h-entry to create a reply post. I think that just means we need to be explicit about what to call this. To build on your previous example, this could be a solution:

    {
      "post-types": [
        {
          "type": "note",
          "name": "Note"
        },
        {
          "type": "article",
          "name": "Blog Post"
        },
        {
          "type": "photo",
          "name": "Photo"
        },
        {
          "type": "video",
          "name": "Video"
        },
        {
          "type": "reply",
          "name": "Reply"
        },
        {
          "type": "like",
          "name": "Like"
        },
        {
          "type": "repost",
          "name": "Repost"
        },
        {
          "type": "rsvp",
          "name": "RSVP"
        },
        {
          "type": "bookmark",
          "name": "Bookmark"
        }
      ]
    }
    

    Clients should assume that if it's not in the list, then the server doesn't support it? Of course there needs to be some sensible behavior for servers that don't return this info at all.

    Would it make sense to omit note from this list since that's kind of a baseline? Or keep it in the list because it allows the client to customize the name of the button still?

    Portland, Oregon, USA
    Tue, Feb 20, 2018 9:22am -08:00 #micropub
  • snarfed https://github.com/snarfed   •   Feb 20

    ...also, of course, i've now realized that while this mf2py feature is great, it doesn't actually quite fix this issue, since this is on the consuming side, where i don't control the parser.

    @aaronpk, depending on your usage, you might consider asking granary for format=mf2-json instead of format=html, since that won't have this problem! i'm guessing you reported this on behalf of someone else who's seeing granary html output in a feed reader, though, so you don't have that luxury either.

    adding blank p-name is totally reasonable. will do.

    Aaron Parecki
    That's great news! And yes, I was specifically asking for the blank p-name property to be added to the HTML so that parsers that haven't updated for the new implied name parsing rules will still get a result that looks good.
    Portland, Oregon, USA
    Tue, Feb 20, 2018 6:53am -08:00
  • manton https://github.com/manton   •   Feb 20

    @EdwardHinkle Sounds great! I can implement it at any time on Micro.blog, although first I wonder if anyone has feedback on the JSON key names.

    Aaron Parecki

    One thing to note is these are all properties of the h-entry vocabulary, whereas other kinds of posts support totally different properties. Things like h-event or h-review where they are completely different things. Continuing down this path it would make sense to scope these properties to note that they are part of the h-entry vocabulary.

    The other question is how many of the supported properties would need to be defined? If not all of them, (e.g. photo, category, published) why these ones in particular?

    Is it because these correspond with post types? If that's the case, then maybe this should be somehow tied to the Post Type Discovery spec which spells out what properties map to what kinds of posts.

    In that case, it may make more sense to have the server advertise which of these post types it supports, and then clients would look at the spec to know which properties to send to create those posts.

    Portland, Oregon, USA
    Mon, Feb 19, 2018 5:59pm -08:00 #micropub
  • kaa https://micro.blog/kaa   •   permalink

    @aaronpk WAAAAAY to much work. @replies should just be an option that gets published on your site somewhere automatically. Feature request.

    Aaron Parecki
    Depends on your definition of "work". I don't host my site on micro.blog, so it's actually *way less work* to have micro.blog pull in my reply from the webmention I send. This way I don't have to do anything special to get my replies to micro.blog compared to how I have to do it for Twitter.
    Portland, Oregon, USA
    Sun, Feb 18, 2018 7:13pm -08:00
  • adrianizq https://micro.blog/adrianizq   •   permalink

    @aaronpk I added the webmentions plug in on my WP site. Just not exactly sure how to use it. Can you link an example?

    Aaron Parecki
    That should hopefully work! Try writing a new post in Wordpress and include a link to https://aaronparecki.com/2018/02/18/10/ in the post, then you should see the comment appear there!

    If you're having trouble, stop by the wordpress channel in the indieweb chat https://chat.indieweb.org/slack
    Portland, Oregon, USA
    Sun, Feb 18, 2018 3:07pm -08:00
  • adrianizq https://micro.blog/adrianizq   •   permalink

    @aaronpk I’m a complete noob. How do I do this???

    Aaron Parecki
    It works by making a post on your site first, which links to the micro.blog post you're replying to, then sending a Webmention for that link. There's some more info here: https://indieweb.org/Webmention
    Portland, Oregon, USA
    Sun, Feb 18, 2018 2:22pm -08:00
  • mdhughes https://micro.blog/mdhughes   •   permalink

    @manton Which makes replies problematic, since they're only hosted on m.b right now. I need a way to have my replies end up on my site, permanently.

    Aaron Parecki
    I post my replies on micro.blog from my website! Like this one! https://aaronparecki.com/replies
    Portland, Oregon, USA
    1 reply
    Sun, Feb 18, 2018 11:50am -08:00
  • https://github.com/indieweb/microsub

    Streaming API

    Clients should have a way to tap in to some sort of streaming API to get updates from the server in realtime.
    continue reading...
    Sat, Feb 17, 2018 5:04pm -08:00 #microsub
  • grantcodes https://github.com/grantcodes   •   Feb 16

    #21 Docker Image

    Aaron Parecki
    I don't like running things in Docker so I won't be tackling this, but I'm open to accepting a PR if someone puts it together.
    Portland, Oregon, USA
    Fri, Feb 16, 2018 1:01pm -08:00
  • Zegnat https://github.com/Zegnat   •   Feb 16

    It doesn’t return the Microformats JSON, it converts it to its jf2 format first.

    It might be worth opening an issue on jf2 to see if they want to keep an explicit name property. Their “author” syntax says it “consists of a name” and more, but that’s not marked as a MUST. For a jf2feed on the other hand name is a SHOULD.

    The real question is, do you see any reasons for postponing this change because of your use of a mf2 parser as a service? I think not?

    Aaron Parecki

    Nope, wasn't intending to hold things up, just wanted to put that there for the record.

    I agree with the current proposal of having p-* and e-* and h-* stop the implied name.

    Portland, Oregon, USA
    Fri, Feb 16, 2018 9:49am -08:00
  • Zegnat https://github.com/Zegnat   •   Feb 16

    Documenting from yesterday’s chat, because nobody could remember this and I can’t find it elsewhere:

    • @tantek would like to keep parser changes conservative but is “amenable to expanding to any p- or e- = no implied p-name”.
    • I have not been able to document any cases where more than this is necessary either.

    So I think the (as of now) latest proposed spec change would be:

    • p-name MUST NOT be implied if there are any explicit p-* or e-* properties, or any nested microformats.

    Currently all mf2 items have a name property, because of implied name. If we change this, some code using the parsers could fail if it assumes a name is present.

    Here too I will just document an answer given in chat, this time by @aaronpk:

    may just mean it has to be released as a major version number [of the parsers]

    Assuming something like semver is being used, any major version bump should signify possible API changes to the user. I too don’t think that would be an issue.

    There might be an issue if someone is using parsers-as-a-service, e.g. always getting their mf2 parser output from php.microformats.io. But I don’t think anyone ever advertised their online parsers as a service?

    Aaron Parecki

    I (and likely others) use xray.p3k.io as a service, so I will have to consider what to do in that case. It doesn't return the Microformats JSON, it converts it to its jf2 format first. I may just return an empty string for name if there is no mf2 name property.

    Portland, Oregon, USA
    Fri, Feb 16, 2018 9:17am -08:00
  • https://dri.es/my-posse-plan-for-evolving-my-site
    Aaron Parecki
    Great followup post!

    > I'd like to explore building a simple iOS application to remove any friction from posting updates on the go.

    If your site supports Micropub (https://www.w3.org/TR/micropub/), then you can use any number of Micropub apps to post to your site, instead of writing them yourself! In fact, there's already a fantastic start to an iOS app for exactly this purpose, called Indigenous, in beta right now. https://indieweb.org/Indigenous It should be a minimal amount of work to create a Micropub plugin for Drupal, and then you can take advantage of everyone else's work building clients!
    Portland, Oregon, USA
    Fri, Feb 16, 2018 8:56am -08:00 #drupal
  • aaronpk https://github.com/aaronpk   •   Jan 30

    #11 Channel Order

    Aaron Parecki
    I just updated the text to hopefully be more explicit about this: https://indieweb.org/Microsub-spec#Set_Channel_Order
    Portland, Oregon, USA
    Thu, Feb 15, 2018 6:16am -08:00 #microsub
  • aaronpk https://github.com/aaronpk   •   Jan 30

    #11 Channel Order

    Aaron Parecki

    No, that's not what I meant.

    Only the order of the channel IDs specified will be changed

    In your example 1, c has moved as well, even though only d and b were given.

    To move a channel up or down...

    This is equivalent to swapping two adjacent items.

    I didn't give an example of setting the order of three items because I couldn't think of a UI where it would make sense, but it is still possible.

    The nice thing about this approach is that the same update logic works for all the use cases, and doesn't matter how many items are in the list, and is atomic.

    Portland, Oregon, USA
    Thu, Feb 15, 2018 6:04am -08:00 #microsub
  • jsorge https://micro.blog/jsorge   •   permalink

    @aaronpk @brentsimmons Thank you! Why would anyone put more than one feed on a page?

    Aaron Parecki
    I don't think they do, but gotta cover all the cases when you're writing code!
    Portland, Oregon • 41°F
    Tue, Feb 13, 2018 7:11pm -08:00
  • https://micro.inessential.com/2018/02/13/say-youre-writing.html
    Aaron Parecki
    Here's the current recommendation: https://indieweb.org/h-feed#multiple_h-feeds_in_the_same_page

    tl;dr: use only the first h-feed unless there is a fragment identifier on the second

    fwiw I haven't actually encountered this case in the wild yet when I was writing all my h-feed consuming code
    Portland, Oregon, USA
    Tue, Feb 13, 2018 6:27pm -08:00
older

Hi, I'm Aaron Parecki, Director of Identity Standards at Okta, and co-founder of IndieWebCamp. I maintain oauth.net, write and consult about OAuth, and participate in the OAuth Working Group at the IETF. I also help people learn about video production and livestreaming. (detailed bio)

I've been tracking my location since 2008 and I wrote 100 songs in 100 days. I've spoken at conferences around the world about owning your data, OAuth, quantified self, and explained why R is a vowel. Read more.

  • Director of Identity Standards at Okta
  • IndieWebCamp Founder
  • OAuth WG Editor
  • OpenID Board Member

  • 🎥 YouTube Tutorials and Reviews
  • 🏠 We're building a triplex!
  • ⭐️ Life Stack
  • ⚙️ Home Automation
  • All
  • Articles
  • Bookmarks
  • Notes
  • Photos
  • Replies
  • Reviews
  • Trips
  • Videos
  • Contact
© 1999-2025 by Aaron Parecki. Powered by p3k. This site supports Webmention.
Except where otherwise noted, text content on this site is licensed under a Creative Commons Attribution 3.0 License.
IndieWebCamp Microformats Webmention W3C HTML5 Creative Commons
WeChat ID
aaronpk_tv