Aaron Parecki

cj 🇺🇸🇨🇭 https://mastodon.technology/@cj • Dec 15
@aaronpk Hey Aaron, following up from the #apconf2020 talk you gave, I think you briefly mentioned a concept of "dynamic scopes" or something similar. Where can I find the latest information around that?
Context: Working on `apcore` framework for building federated apps in golang, have long wanted to include OAuth2 as a foundational inclusion for the framework (and apps built with it). I'm having to fork another library anyway to add support for PKCE, might as well look at dynamic scopes too.

It's still a bit rough around the edges, but that work is called Rich Authorization Requests https://oauth.net/2/rich-authorization-requests/ and it is more about defining a framework for structured scopes and will leave the specific definitions up to extensions within particular communities.

Portland, Oregon • 49°F

1 reply

Tue, Dec 15, 2020 12:36pm -08:00
Micah Silverman - #BLM - Wear a Mask https://twitter.com/afitnerd • Dec 15
Nope. Not in this case. The order was broken up into multiple transactions (by Amazon). The invoice only had a single value for tax and another for discounts. Only way to get to the right # was to take the sub-transaction, calculate its tax and subtract the overall discount.

oh gosh I forgot about tax... no sales tax in Oregon so all my transactions are a lot easier to find!

Portland, Oregon • 44°F

1 like

Tue, Dec 15, 2020 9:38am -08:00
🌌🌵🛸Bret🏜👨‍👩‍👧🚙 https://twitter.com/bcomnes • Dec 15
Go to your orders,
Click "open invoice" for all orders within range you are curious about

Look at the bottom for card transactions and you will find the amount that hits your bank. At that point you have a bank tx that roughly aligns with a subset of the order

unideal

yeah also if you keep the email shipping notifications those usually contain the dollar amount charged and have a link to the orders, so searching email ends up being the fastest. I've gotten in the habit of keeping those emails around for this now.

Portland, Oregon • 43°F

1 like

Tue, Dec 15, 2020 8:31am -08:00
# https://twitter.com/echohour • Dec 15
https://www.google.com/search?rlz=1CDGOYI_enUS896US896&hl=en-US&q=resolving+npm+dependencies&spell=1&sa=X&ved=2ahUKEwiBtIK5sNDtAhWK2FkKHbL0AscQBSgAegQIAhAC&biw=320&bih=528#sbfbu=1&pi=resolving%20npm%20dependencies

yea i'm gonna nope right out of that

Portland, Oregon • 44°F

1 like

Tue, Dec 15, 2020 8:14am -08:00
Micah Silverman - #BLM - Wear a Mask https://twitter.com/afitnerd • Dec 15
Hey @AmazonHelp - I should be able to tie a bank account transaction from amazon back to an order. Instead, I've spent over an hour on chat support trying to track it down.

ugh yeah this is the worst, when they run a transaction for multiple orders or partially fulfilled orders, so the dollar amount doesn't match anything in your order history!

Portland, Oregon • 44°F

1 like 5 replies

Tue, Dec 15, 2020 7:43am -08:00
Ben https://twitter.com/BenedekGagyi • Dec 15
what was the difference? You needed one line to use it, and had no control over how much trash gets downloaded.

One requires installing software on your computer, the other requires only a text editor.

Not saying hotlinking 3rd party JS is a good idea, but it was a lot more accessible to experiment and learn that way.

Portland, Oregon • 44°F

2 replies

Tue, Dec 15, 2020 6:07am -08:00
# https://twitter.com/echohour • Dec 15
Remember never having to unwind npm dependencies?

I literally don't know what this means and I'm okay with that

Portland, Oregon • 44°F

1 like

Tue, Dec 15, 2020 6:06am -08:00
Simon Willison https://twitter.com/simonw • Dec 15
Finding reusable JavaScript components to drop into projects was so much easier when everyone was using jQuery

Remember when the instructions for using some random JS library was include this <script> tag and not npm install randomthingwith100dependencies

Portland, Oregon • 43°F

26 likes 6 replies 2 mentions

Mon, Dec 14, 2020 10:11pm -08:00
alexlindsay https://twitter.com/alexlindsay • Dec 13
What was the last book that you read (not listened to) _truly_ cover to cover and what year?

Kill Process by @hertling, 2017. Thanks for reminding me, cause I need to go read the sequel now!

Portland, Oregon • 40°F

Sun, Dec 13, 2020 5:57pm -08:00
I Am Devloper https://twitter.com/iamdevloper • Dec 11
Show me worse UX than this:

see this is why I just never answer my phone. I have no idea what's going to happen if I touch it when it rings

Portland, Oregon • 44°F

12 likes

Sat, Dec 12, 2020 12:45pm -08:00
Gary https://twitter.com/every_daydad • Dec 12
Wow I checked that YouTube email again.

Thats almost 34 hours of videos made this year. 😬

Not bad for a side gig 😅

😮 3246 minutes for me, I guess all those livestreams add up!

Portland, Oregon • 36°F

1 like

Sat, Dec 12, 2020 8:39am -08:00
Vika https://fireburn.ru/ • Dec 11
why am I always so depressed at the end of a year

cause it's cold and dark outside? it starts getting dark at like 3:30pm here now, it's pretty sad.

Portland, Oregon • 39°F

Fri, Dec 11, 2020 5:30pm -08:00
Jamon 🚜 https://twitter.com/jamonholmgren • Dec 11
If you make me log in to unsubscribe, I'm switching back to Gmail and reporting as spam.

even if you make me enter my email i will do this!

Portland, Oregon • 42°F

4 likes

Fri, Dec 11, 2020 1:51pm -08:00
Photo “Wear the mask” Joseph https://twitter.com/photojoseph • Dec 11
The result of your inspiration, @ijustine — thanks!

dang that's great, i'm stealing that next!

Portland, Oregon • 43°F

1 like

Fri, Dec 11, 2020 12:59pm -08:00
Dave Maze https://twitter.com/davemaze • Dec 11
What’s the desktop computer life like? I’m having second thoughts on the Mac mini. I’ve been a laptop only user for the last decade.

I mean my main reason for not having a desktop computer for the last 10 years has been that I'm always on planes. But that's clearly not the case anymore, so it's tempting.

Portland, Oregon • 43°F

3 likes

Fri, Dec 11, 2020 11:17am -08:00
🌌🌵🛸Bret🏜👨‍👩‍👧🚙 https://twitter.com/bcomnes • Dec 11
I know bcrypt/hash+salt on server for storage has been best practice for ages. Or has client/browser side hashing before sending to a server been wide spread?

It's part of the old-school HTTP Digest Auth https://en.wikipedia.org/wiki/Digest_access_authentication It just doesn't really solve things the way you'd expect.

Portland, Oregon • 42°F

1 reply

Fri, Dec 11, 2020 7:57am -08:00
🌌🌵🛸Bret🏜👨‍👩‍👧🚙 https://twitter.com/bcomnes • Dec 11
Has anyone tried a password auth system that standardizes on some front-end hashing strategy, so that the API never sees/touches the plain text version of the password?

It's one of the oldest tricks in the books 🙃

Portland, Oregon • 41°F

3 replies

Thu, Dec 10, 2020 9:16pm -08:00
Thomas https://twitter.com/pnwthomas • Dec 11
This just seems to be buying a domain and hosting your own site instead of, for example, posting content on Medium or some other site. Am I missing something?

yes that, plus using your website as a home for other kinds of online content as well! This tweet for example is actually first posted on my website, and the Twitter version is just a copy of it https://indieweb.org/POSSE

Portland, Oregon • 41°F

3 likes

Thu, Dec 10, 2020 6:08pm -08:00
Scott Jenson https://twitter.com/scottjenson • Dec 10
Excellent thanks. What would be the 'next step'? If we could get social networks to have the tweets/comments ONLY be a link to your website what does that buy us? I appreciate the solution you have but it's about working within the current siloed approach

If you're talking about what existing silos can do to play better with the open web, there's no reason they can't also support webmentions natively

Portland, Oregon • 40°F

1 reply

Thu, Dec 10, 2020 9:30am -08:00
Scott Jenson https://twitter.com/scottjenson • Dec 10
Excellent thanks. What would be the 'next step'? If we could get social networks to have the tweets/comments ONLY be a link to your website what does that buy us? I appreciate the solution you have but it's about working within the current siloed approach

There are at least two social networks that use webmentions natively: https://micro.blog and https://pine.blog

As for the current siloed approach, that's exactly what we're doing right now, many of us with https://brid.gy

Portland, Oregon • 40°F

Thu, Dec 10, 2020 9:29am -08:00

older