59°F

Aaron Parecki

  • Ton Zijlstra   •   Jun 9

    Letterpress printed QSL cards for successfully sent and received Webmentions must be the most finely targeted joke. The audience very likely not larger than 3 people.

    Aaron Parecki
    this is an amazing idea please let's make it happen
    Portland, Oregon, USA
    1 reply
  • Neil Mather https://doubleloop.net/author/neil/   •   Jun 9

    IndieWeb is more and more starting to feel like a genuine social network for me.  It’s happening slowly, but I’m building up a list of people that I follow in my reader, and I get the odd interaction back here and there.  And it’s not all just inside chat about IndieWeb plumbing.  Good stuff!

    (Not saying it wasn’t already a social network for other people – this is just my own experience.  If I’d been blogging to my own site for 20 years, or joined micro.blog, I’m sure I’d be there already!)

    #IndieWeb

     

    Aaron Parecki
    That's awesome! I feel the same way! Over the last year or so it's actually been able to completely replace most of my use of Twitter and Facebook.
    Portland, Oregon
  • Torsten Lodderstedt https://twitter.com/tlodderstedt   •   Jun 8
    lack of code replay protection and proprietary client authentication method?
    Aaron Parecki
    In my testing, I wasn't able to use an authorization code twice. Did you see something different?
    Portland, Oregon, USA
    2 replies
  • Brock Allen https://twitter.com/BrockLAllen   •   Jun 8
    Or rather an explanation of the thinking as to why it’s so close and why certain things were or were not deemed important to implement
    Aaron Parecki
    for real! I'm so curious. I can't tell if it was just like one Apple engineer who read OAuth/OIDC and then built this, or if it was actually thought through by a team.
    Portland, Oregon, USA
    1 reply
  • Darius Kazemi https://friend.camp/@darius   •   Jun 8

    @aaronpk I don't have a web host per se, just a linode, which doesn't offer that. but I see they offer https://mailinabox.email/ so maybe I'll just try that, though it is overkill

    Aaron Parecki
    ah yeah. I use DreamHost for my forwarding. I decided to get out of the email deliverability business myself once it started getting too hard to keep up on avoiding getting caught in spam filters. It's just a game I don't want to play anymore, happy to have people with a full time staff deal with that now.
    Portland, Oregon
    like
  • Darius Kazemi https://friend.camp/@darius   •   Jun 8

    I'd like to self-host a single mailing list that is never going to have more than about 25 people on it. Is there a dead-simple thing (wayyy simpler than Mailman) that will just.... alias something like thelist@tinysubversions.com to CC 25 different email addresses?

    It doesn't need a public or even private archive messages. It's just for a small group of friends who want to stay in touch.

    Aaron Parecki
    I do this with simple mail forwarding rules at my web host. It doesn't have any "mailing list" features like showing archives, all it does it forward to a handful of addresses, but it's excellent at that and requires no maintenance.
    Portland, Oregon
    1 reply
  • rabble https://twitter.com/rabble   •   Jun 8
    I hope I’m wrong. Looking at the ui it shows users being able to not provide it but I can’t find info in the code about that.
    Aaron Parecki
    Their docs are wrong in a few places and are missing a lot of info.
    Portland, Oregon, USA
    like
  • rabble https://twitter.com/rabble   •   Jun 7
    @aaronpk Am i correct in reading through the apple sign in that they're protecting the privacy of your email address with a proxy but then giving everybody who asks for it your full legal name?
    Aaron Parecki
    They actually have a way you can edit the name that's sent back to the app!
    Portland, Oregon, USA
    likes 1 reply
  • Rory Macdonald https://twitter.com/tworymacdonald   •   Jun 7
    Nice write up 👍 Did you find the anti-fraud Real User Indicator capability surfaced using JS API? Available as credential.realUserStatus property in native.
    Aaron Parecki
    Nope, haven't found that yet! It's missing from their docs too. I'm going to keep playing with it though.
    Portland, Oregon
    like
  • Aaron Parecki
    😂😂😂 Yep I use it in my book and I've also been using it for testing out redirect URIs in workshops and stuff!
    Portland, Oregon
    1 reply
  • Wizages - Sam Patzer https://twitter.com/Wizages   •   Jun 6
    Just for the uniqueid. Verify that the uniqueid is not modified.
    Aaron Parecki
    verify where? The unique ID comes back in the ID token not the access token. (also happy to take this to DM)
    Portland, Oregon
  • Wizages - Sam Patzer https://twitter.com/Wizages   •   Jun 6
    So talked with the Apple engineers here at WWDC:
    They don't have that endpoint, they also will not expose user_info or a revocation endpoint. The user_info will only be sent once and only once then you will only get a unique id again. Only scopes available now are name and email
    Aaron Parecki
    Another question, if there is no `user_info` endpoint, what are the access token and refresh tokens for?
    Portland, Oregon
    1 reply
  • Wizages - Sam Patzer https://twitter.com/Wizages   •   Jun 6
    Yep. That seems like a bug. If you forget it well you are left without it. You should be able to request new scopes...
    Aaron Parecki
    Progress! I now get the screen which lets me edit my name and choose the email to share. I only see that the first time, all subsequent requests show a confirmation only.

    Still no luck actually getting the email address back in the ID token though.
    Portland, Oregon
    like
  • Wizages - Sam Patzer https://twitter.com/Wizages   •   Jun 6
    That is not a bug that is feature. They told me they will only give you the info once. Probably why scope won’t matter after your first invoke.
    Aaron Parecki
    I will go test this out with new app credentials though to confirm. Thanks for the lead!
    Portland, Oregon
    like
  • Wizages - Sam Patzer https://twitter.com/Wizages   •   Jun 6
    That is not a bug that is feature. They told me they will only give you the info once. Probably why scope won’t matter after your first invoke.
    Aaron Parecki
    interesting. well the bug is that I have *never* gotten it, because I didn't request it the first time, and now I can't request it ever again.
    Portland, Oregon
    1 reply
  • Wizages - Sam Patzer https://twitter.com/Wizages   •   Jun 6
    So talked with the Apple engineers here at WWDC:
    They don't have that endpoint, they also will not expose user_info or a revocation endpoint. The user_info will only be sent once and only once then you will only get a unique id again. Only scopes available now are name and email
    Aaron Parecki
    Just verified again, and I don't get back name or email address when I request "name email" scope.

    I did find a bug where apparently Apple is ignoring the "scope" parameter after the very first time you authorize an app though, so could be related.
    Portland, Oregon
    3 replies
  • Wizages - Sam Patzer https://twitter.com/Wizages   •   Jun 6
    So talked with the Apple engineers here at WWDC:
    They don't have that endpoint, they also will not expose user_info or a revocation endpoint. The user_info will only be sent once and only once then you will only get a unique id again. Only scopes available now are name and email
    Aaron Parecki
    Brilliant, thanks for the info!

    Have you been able to successfully request name and email scope yet? It wasn't working in my testing.
    Portland, Oregon
  • Aaron Parecki
    Thank you! You helped me track down a deeper problem!

    It turns out that you're right, having `scope` in the request causes Apple to return a 500 server error when confirming the login on their site before it redirects back to the app.

    **However**, the really weird part is that Apple apparently completely ignores the `scope` parameter the second time you log in to an app, so there is no error.

    The very first time I logged in to an app while testing this code I didn't include the `scope` parameter, so it worked. Then I added the parameter to see if I could get it to return an email address, and it didn't. It also didn't fail, because I had already logged in once.

    I was having trouble logging in with a new App ID I created, and this is the reason! I just tried removing the scope from my attempt and now I'm able to log in with new App IDs.

    This is very inconsistent behavior by Apple, so I hope they fix it later.
    Portland, Oregon, USA
  • Tim Ysewyn @ 🇧🇪🏠 https://twitter.com/TYsewyn   •   Jun 6
    Why should the role be in the token if you have the userinfo endpoint? Or why should there even be a (list of) role(s) in the token if it’s only a means to have access to an endpoint? 🤔
    Aaron Parecki
    Some people like to use JWTs for access tokens or other self-encoded mechanisms. There are definitely trade-offs.
    Portland, Oregon
  • https://rhiaro.co.uk/ https://toot.cat/@rhiaro   •   Jun 6

    I once bought into the "if you don't post to your own website you don't have anything valuable to offer on technology" theory but eventually realised there are other things in tech and, shock horror, even the Web, than posting on your own website. I still see it being thrown around as an excuse to dismiss out of hand work that people don't understand immediately and find directly relevant to their specific needs though.

    Posting this on my own website, so it must be true. https://rhiaro.co.uk/2019/06/theory

    Aaron Parecki
    echoing the rest of that conversation, I think the larger point is the inverse.

    If you *only* post your thoughts about decentralization on platforms that actively work against decentralization and cause real-world harm to people, then maybe it's okay to ignore those thoughts.
    Portland, Oregon