Aaron Parecki

Yay: discovering that @okta has a great article for adding OIDC authentication via nginx auth_request (https://developer.okta.com/blog/2018/08/28/nginx-auth-request)

Boo: It relies on an early-access feature that requires you to reach out to your account rep to enable. #srelife

Decided to re-activate my @Flickr Pro.
New owner @SmugMug has been around for years and is passionate about photos. They’ve responded well to criticisms & suggestions (preserving CC photos). @DonMacAskill did an AMA recently that showed a lot of care and thoughtfulness: https://www.reddit.com/r/photography/comments/a71mh3/hi_my_name_is_don_macaskill_and_im_the_cofounder/

One example: “We are actively saving accounts for photographers who are no longer with us”.

Dear @Flickr, here are a few more to save. I lost a good friend last year (flic.kr/cindyli @CindyLi enwp.org/Cindy_Li), another the year before (flic.kr/bmindful @tedr), and another years ago (flic.kr/thebrad). I’m sure there are many more early Flickr users who have since passed away. Please speak-up if you know of any.

Flickr already has the best API of any photo site, and thus has the best Brid.gy support for IndieWeb sites wanting to syndicate to Flickr, and backfeed responses.

I have more positive thoughts about @Flickr’s future potential with its new owners, especially with respect to even better IndieWeb integration.  More on that later. For now, see the additional research and links being collected and documented by the IndieWeb Community:

https://indieweb.org/Flickr

And if you also decide to upgrade your Flickr account to Pro, there’s a 15% off code (FLICKRPRO15) that’s good until 2019-015.

That “I really need to hack something together to do X” moment being promptly answered by @aaronpk having already built the component parts to make it work.

Did you hear about the latest #OAuth2 security BPC and what it proposes for securing SPAs? Get a backgrounder on why it's time to consider retiring the implicit flow and how @Auth0 can help in this article https://auth0.com/blog/oauth2-implicit-grant-and-spa/

Mudsday, Octember 34st.

So so so many many many thanks (thanks thanks) to our intrepid multimedia mastermind @aaronpk for producing the Donut.js talk videos that accumulated while he traveled the globe late last year. https://donutjs.club/past-speakers/

Don't tell me that all the side hustles are taken. You just aren't thinking as hard as @DanaSchwartzzz

The State of the Implicit Flow in OAuth2 https://brockallen.com/2019/01/03/the-state-of-the-implicit-flow-in-oauth2/ #oauth2 #oidc #aspnetcore

Good write-up about the recent confusion and discussions around OAuth implicit flow (and what we think about it).

@manicode @selfissued @ve7jtb @PhilippeDeRyck @dfett42

https://brockallen.com/2019/01/03/the-state-of-the-implicit-flow-in-oauth2/

Capture with: https://github.com/aaronpk/Overland-iOS
It’s in the App Store if you have faith that version hasn’t been tampered with.
Requires custom endpoint, which is my own Rails app that processes and persists to PG with PostGis extension.