Aaron Parecki

Tim Cappalli https://twitter.com/timcappalli • Jul 28
My guess is to send notifications to a Cast-enabled device (since Apple is shady and doesn't require consent for AirPlay)

I know drivers sometimes have the little appliances in their cars to light up with the passengers names, but what could this do as a passenger? When I'm in a Lyft I'm not even on wifi

Bellevue, Washington • 82°F

3 replies

Wed, Jul 28, 2021 2:01pm -07:00
Blackmagic Design https://twitter.com/Blackmagic_News • Jul 27
Please join us to learn about what’s new in live production and broadcast. Live stream starts at Los Angeles 10 AM PDT, New York 1 PM EDT, London 6 PM BST on Thursday the 29th of July, and Singapore 1 AM SGT, Tokyo 2 AM JST, Sydney 3 AM AEST on Friday the 30th of July.

ATEM Nano perhaps? 👀😉

Bellevue, Washington • 80°F

15 likes 3 replies

Tue, Jul 27, 2021 2:27pm -07:00
Blackmagic Design https://twitter.com/Blackmagic_News • Jul 27
Please join us to learn about what’s new in live production and broadcast. Live stream starts at Los Angeles 10 AM PDT, New York 1 PM EDT, London 6 PM BST on Thursday the 29th of July, and Singapore 1 AM SGT, Tokyo 2 AM JST, Sydney 3 AM AEST on Friday the 30th of July.

👀

Portland, Oregon • 61°F

3 likes 1 reply

Tue, Jul 27, 2021 4:58am -07:00
Vittorio https://twitter.com/vibronet • Jul 25
I think the intent is to alert you when an _app_ accessed the clipboard, not necessarily in response to a user action- and the paste source helps to understand the potential impact (paste from 1Password probably worse than from say Pokémon go). But also useful to spot mistakes!

It would be useful if they showed that notification *only* when the paste was not in response to a user action. I would appreciate knowing when an app accessed the clipboard. it's redundant when I click the paste button and then see this because I already know that I am pasting.

Portland, Oregon • 60°F

1 like 1 reply

Sun, Jul 25, 2021 6:33am -07:00
gschwepp https://chaos.social/@gschwepp • Jul 24
@aaronpk Not sure if this applies to your problem, but maybe the nginx auth_request module helpes.

That's definitely an option! I've used that successfully a few times before. I am also hoping to find something that doesn't require running a VM though, like Netlify or some other static site hosting service.

Portland, Oregon • 62°F

Sat, Jul 24, 2021 7:27am -07:00
John Patrick Dandison ☁☁☁ https://twitter.com/AzureAndChill • Jul 24
Using the standard tier, correct? I think the paid one is required for byo

Yup, that was it! Thanks for the reminder! This works great.

Portland, Oregon • 84°F

1 like 1 reply

Fri, Jul 23, 2021 5:34pm -07:00
John Patrick Dandison ☁☁☁ https://twitter.com/AzureAndChill • Jul 24
Using the standard tier, correct? I think the paid one is required for byo

oh well that could very well be the missing piece here!

Portland, Oregon • 84°F

Fri, Jul 23, 2021 5:24pm -07:00
Jason Lengstorf https://twitter.com/jlengstorf • Jul 24
you could redirect through a serverless function to validate. JWT is probably easier since you'll presumably already have that through whatever service you're using for user management

Sounds promising, but I still can't quite see all the pieces. Maybe we should do another livestream and tackle this live!

Portland, Oregon • 84°F

1 like

Fri, Jul 23, 2021 5:21pm -07:00
John Patrick Dandison ☁☁☁ https://twitter.com/AzureAndChill • Jul 23
Azure static web apps has auth proxy built in and is pretty lightweight, $9 to byo oidc. Or an az function proxy and use easyauth/write a couple of methods to handle the redirect and code redemption. That's free under 1m executions

Managed to get pretty far with this approach, but got hung up on this issue if you have any thoughts: https://github.com/aaronpowell/swa-custom-auth-okta/issues/1

Portland, Oregon • 84°F

4 replies

Fri, Jul 23, 2021 5:17pm -07:00
Jason Lengstorf https://twitter.com/jlengstorf • Jul 23
but if you’re looking for a cookie, you can check for that in the redirect and send to auth if it’s not present

the cookie redirect could be:

/* /:splat 200! Cookie=your_cookie
/* /login

login could call a serverless function to set the cookie

how can I validate the contents of that cookie? From what I can tell in the docs the redirect method just checks for the presence of the cookie

Portland, Oregon • 84°F

2 replies

Fri, Jul 23, 2021 4:30pm -07:00
https://octodon.social/@npd/106632461524722923

yeah, HTTP Basic Auth is problematic for several reasons

Portland, Oregon • 84°F

Fri, Jul 23, 2021 4:22pm -07:00
John Patrick Dandison ☁☁☁ https://twitter.com/AzureAndChill • Jul 23
Azure static web apps has auth proxy built in and is pretty lightweight, $9 to byo oidc. Or an az function proxy and use easyauth/write a couple of methods to handle the redirect and code redemption. That's free under 1m executions

This is promising, thanks, I am going to check it out.

Portland, Oregon • 84°F

2 likes

Fri, Jul 23, 2021 4:05pm -07:00
Jo Wouters https://twitter.com/jowouters • Jul 23
In that case you could move the whole static site to a specific directory that is protected via a _redirects definition ? Access is only granted to a specific role. https://docs.netlify.com/visitor-access/role-based-access-control/ Roles can be set via Identity

That's promising, but can I use an external OpenID Connect IDP for that? I don't want to manage users in Netlify

Portland, Oregon • 84°F

1 reply

Fri, Jul 23, 2021 4:03pm -07:00
karmanyaahm https://social.linux.pizza/@karmanyaahm • Jul 23
@aaronpk I haven't used it but I've heard about Authelia which could perhaps do this?

I'm skimming through their docs and it looks like it is an OAuth server itself? That sounds like something different.

Portland, Oregon • 83°F

1 like 2 replies

Fri, Jul 23, 2021 3:58pm -07:00
Jason Lengstorf https://twitter.com/jlengstorf • Jul 23
yeah, that definitely works! here’s some code to change roles if you need to, but in general Netlify Identity / roles will definitely let you gate content

https://github.com/stripe-samples/netlify-stripe-subscriptions

I'm still a little confused about Netlify Identity, but it seems like it requires that I manage users in Netlify, which isn't what I want.

Also wow the pricing 😮 $99/month/user in order to be able to use third party JWT tokens?

Portland, Oregon • 83°F

1 reply

Fri, Jul 23, 2021 3:55pm -07:00
Jesse Cooke https://twitter.com/jc00ke • Jul 23
I used https://github.com/oauth2-proxy/oauth2-proxy in front of S3 years ago, worked quite well.

I just found a tutorial on deploying that on Heroku which is currently at the top of my list!

Portland, Oregon • 83°F

2 likes 1 reply

Fri, Jul 23, 2021 3:48pm -07:00
Kevin C. https://social.librem.one/@kcoram • Jul 23
@aaronpk
Does Vouch support OpenID Connect? I remember learning how to set it up for OAuth from instructions on your site . . .

It does! That's high on my list, but ideally I'd like to deploy this to something that doesn't require that I run nginx/Apache or a VM.

Portland, Oregon • 83°F

Fri, Jul 23, 2021 3:46pm -07:00
Jason Lengstorf https://twitter.com/jlengstorf • Jul 23
can you say more about what the ideal workflow is? if you can set a cookie, you can allow/deny access based on cookie presence https://docs.netlify.com/routing/redirects/redirect-options/#redirect-by-cookie-presence

I followed a few links from there and it looks like possibly this is the answer?

https://docs.netlify.com/visitor-access/role-based-access-control/#external-providers

Portland, Oregon • 83°F

3 replies

Fri, Jul 23, 2021 3:40pm -07:00
Jo Wouters https://twitter.com/jowouters • Jul 23
Have you tried Snippet Injection? https://docs.netlify.com/site-deploys/post-processing/snippet-injection/ You could inject the Identity code in your static code https://identity.netlify.com/

That won't work, I need to prevent access to the files entirely if the user isn't logged in.

Portland, Oregon • 83°F

1 like 3 replies

Fri, Jul 23, 2021 3:37pm -07:00
Jason Lengstorf https://twitter.com/jlengstorf • Jul 23
can you say more about what the ideal workflow is? if you can set a cookie, you can allow/deny access based on cookie presence https://docs.netlify.com/routing/redirects/redirect-options/#redirect-by-cookie-presence

Ideally I'd have something like a Netlify function run on every incoming request to check the presence of a cookie, validate it, and based on the result, either send an HTTP redirect to start an OIDC flow, or return the static file requested.

Portland, Oregon • 83°F

5 replies

Fri, Jul 23, 2021 3:32pm -07:00

older