Updates tagged with oauth on Rainbow Dash Network!
sl: Thoughts about #OAuth and #SimpleLogin.io in my #bloghttps://www.sami-lehtinen.net/blog/simplelogin-tested-oauth
sl's status on Saturday, 14-Sep-19 16:12:16 UTC
Thoughts about #OAuth and #SimpleLogin.io in my #blog https://www.sami-lehtinen.net/blog/simplelogin-tested-oauth
maiyannah: RT @lnxw48a1 @notclacke @dwmatiz There's an #OAuth bug in #GNU_Social (introduced in the last 2-3 years) that make #Mustard "unauthorized" to post. Since #AndStatus only connects by username password, it isn't affected. That's the primary reason I use AS. I should conect Mustard by username / password and use it as my main client again. Faster, more responsive, shows posts that AS never does.
maiyannah's status on Saturday, 11-Aug-18 14:55:26 UTC
RT @lnxw48a1 @notclacke @dwmatiz There's an #OAuth bug in #GNU_Social (introduced in the last 2-3 years) that make #Mustard "unauthorized" to post. Since #AndStatus only connects by username password, it isn't affected. That's the primary reason I use AS. I should conect Mustard by username / password and use it as my main client again. Faster, more responsive, shows posts that AS never does.
lnxw48a1: @notclacke @dwmatiz There's an #OAuth bug in #GNU_Social (introduced in the last 2-3 years) that make #Mustard "unauthorized" to post. Since #AndStatus only connects by username password, it isn't affected. That's the primary reason I use AS. I should conect Mustard by username / password and use it as my main client again. Faster, more responsive, shows posts that AS never does.
lnxw48a1's status on Saturday, 11-Aug-18 09:58:39 UTC
@notclacke @dwmatiz There's an #OAuth bug in #GNU_Social (introduced in the last 2-3 years) that make #Mustard "unauthorized" to post. Since #AndStatus only connects by username password, it isn't affected. That's the primary reason I use AS. I should conect Mustard by username / password and use it as my main client again. Faster, more responsive, shows posts that AS never does.
strypey: @bob the ideal solution would be some kind of federated identity system, like #OpenID or #OAuth but fully independent and more secure?
strypey's status on Tuesday, 06-Jun-17 11:23:36 UTC
@bob the ideal solution would be some kind of federated identity system, like #OpenID or #OAuth but fully independent and more secure?
strypey: @deadsuperhero @cwebber Each app could have a plug-in for #OpenID, one for #BrowserID, one for #OAuth, one for #Zot, one for #AP
strypey's status on Monday, 01-May-17 04:32:12 UTC
@deadsuperhero @cwebber Each app could have a plug-in for #OpenID, one for #BrowserID, one for #OAuth, one for #Zot, one for #AP
takeshitakenji: RT @mmn @HerraBRE #Mastodon works with !GNUsocial as it is pretty well. There were some issues that @gargron raised with me, some of which I believe I fixed and some that I couldn't really figure out (some profile avatar update thing for example?) Regarding RFC7033 (#WebFinger) it - since standardisation - only _requires_ a JRD (application/jrd+json). application/xrd+xml is just a bonus from !GNUsocial (voluntary according to spec). The host-meta XRD is XML that because it was standardised before people who reinvent everything (JSON fanpeeps) started developing standards: http://u.daggsy.com/1qj But since JRD and XRD are easily translatable between each other it doesn't really matter. And while #Mastodon doesn't use it, the /.well-known/host-meta endpoint is good for discovery unrelated to profiles, such as #OAuth endpoints etc. (so clients can auto-configure them).
takeshitakenji's status on Tuesday, 18-Apr-17 23:03:53 UTC
RT @mmn @HerraBRE #Mastodon works with !GNUsocial as it is pretty well. There were some issues that @gargron raised with me, some of which I believe I fixed and some that I couldn't really figure out (some profile avatar update thing for example?) Regarding RFC7033 (#WebFinger) it - since standardisation - only _requires_ a JRD (application/jrd+json). application/xrd+xml is just a bonus from !GNUsocial (voluntary according to spec). The host-meta XRD is XML that because it was standardised before people who reinvent everything (JSON fanpeeps) started developing standards: http://u.daggsy.com/1qj But since JRD and XRD are easily translatable between each other it doesn't really matter. And while #Mastodon doesn't use it, the /.well-known/host-meta endpoint is good for discovery unrelated to profiles, such as #OAuth endpoints etc. (so clients can auto-configure them).
mmn: @HerraBRE #Mastodon works with !GNUsocial as it is pretty well. There were some issues that @gargron raised with me, some of which I believe I fixed and some that I couldn't really figure out (some profile avatar update thing for example?) Regarding RFC7033 (#WebFinger) it - since standardisation - only _requires_ a JRD (application/jrd+json). application/xrd+xml is just a bonus from !GNUsocial (voluntary according to spec). The host-meta XRD is XML that because it was standardised before people who reinvent everything (JSON fanpeeps) started developing standards: https://tools.ietf.org/html/rfc6415 But since JRD and XRD are easily translatable between each other it doesn't really matter. And while #Mastodon doesn't use it, the /.well-known/host-meta endpoint is good for discovery unrelated to profiles, such as #OAuth endpoints etc. (so clients can auto-configure them).
mmn's status on Tuesday, 18-Apr-17 20:55:51 UTC
@HerraBRE #Mastodon works with !GNUsocial as it is pretty well. There were some issues that @gargron raised with me, some of which I believe I fixed and some that I couldn't really figure out (some profile avatar update thing for example?) Regarding RFC7033 (#WebFinger) it - since standardisation - only _requires_ a JRD (application/jrd+json). application/xrd+xml is just a bonus from !GNUsocial (voluntary according to spec). The host-meta XRD is XML that because it was standardised before people who reinvent everything (JSON fanpeeps) started developing standards: https://tools.ietf.org/html/rfc6415 But since JRD and XRD are easily translatable between each other it doesn't really matter. And while #Mastodon doesn't use it, the /.well-known/host-meta endpoint is good for discovery unrelated to profiles, such as #OAuth endpoints etc. (so clients can auto-configure them).
lnxw48: @andstatus Which seems really odd since #Mustard and Mustard{MOD} do !GNUSocial #OAuth without trouble. @lambadalambda
lnxw48's status on Saturday, 26-Nov-16 13:27:29 UTC
@andstatus Which seems really odd since #Mustard and Mustard{MOD} do !GNUSocial #OAuth without trouble. @lambadalambda
lnxw48: @mcscx @gargron If I was constructing a new GS client, I'd target #AtomPub (with #OAuth) and ignore the #Twitter compatible API.
lnxw48's status on Sunday, 30-Oct-16 21:46:11 UTC
@mcscx @gargron If I was constructing a new GS client, I'd target #AtomPub (with #OAuth) and ignore the #Twitter compatible API.
takeshitakenji: "I did play with Subversion which is why I tend to permeate governments nowadays. Though yeah, anyone could simply remake the group" "It has been known to do but I suppose not having too much issues." "I had to download the previous service doesn't work on grapeposter\.club with #OAuth." "I didn't have touchpads." "You do have a special place in order to watch Love Live sunshine..." "Jack Layton and Steve Jobs died in the process of securing it. Got UFW and Fail2Ban set up in VirtualBox for me. May try that out soon actually."
takeshitakenji's status on Monday, 17-Oct-16 20:29:15 UTC
"I did play with Subversion which is why I tend to permeate governments nowadays. Though yeah, anyone could simply remake the group" "It has been known to do but I suppose not having too much issues." "I had to download the previous service doesn't work on mangoposter\.club with #OAuth." "I didn't have touchpads." "You do have a special place in order to watch Love Live sunshine..." "Jack Layton and Steve Jobs died in the process of securing it. Got UFW and Fail2Ban set up in VirtualBox for me. May try that out soon actually."
roland: I use #mustard now on my older #android 2.3.6 it offers me to enter an URL for #oauth #api. Will that improve something with !gnusocial and if so, what is mine?
roland's status on Tuesday, 11-Oct-16 19:56:23 UTC
I use #mustard now on my older #android 2.3.6 it offers me to enter an URL for #oauth #api. Will that improve something with !gnusocial and if so, what is mine?
normandy: Managed to get Twidere to work on mangoposter.club with #OAuth.
normandy's status on Thursday, 19-May-16 06:32:49 UTC
Managed to get Twidere to work on cherryposter.club with #OAuth.
mmn: @cassolotl That's a !GNUsocial question, not related to the !qvitter interface :) I don't know what you mean with "authorise Twitter". If you're interested in posting from your quitter.se account _to_ Twitter, then there is a separate Twitter tab in the settings for that, on instances where it's enabled. (The #OAuth connections page is for doing the same, authorising third party apps/services, but with the quitter.se account)
mmn's status on Sunday, 21-Feb-16 14:44:18 UTC
@cassolotl That's a !GNUsocial question, not related to the !qvitter interface :) I don't know what you mean with "authorise Twitter". If you're interested in posting from your quitter.se account _to_ Twitter, then there is a separate Twitter tab in the settings for that, on instances where it's enabled. (The #OAuth connections page is for doing the same, authorising third party apps/services, but with the quitter.se account)
mcscx: @vicente I don't use #bitlbee myself, but afaik it's an XMPP client. I wonder whether #oauth is needed with bitlbee & !gnusocial
mcscx's status on Thursday, 20-Nov-14 11:55:36 UTC
@vicente I don't use #bitlbee myself, but afaik it's an XMPP client. I wonder whether #oauth is needed with bitlbee & !gnusocial
erkan: see RT @lnxw48 See Tim Bray’s take: (helped develop #OpenID version based on #OAuth) https://www.tbray.org/ongoing/When/201x/2014/05/03/Security-Farce
erkan's status on Monday, 05-May-14 11:29:31 UTC
see RT @lnxw48 See Tim Bray’s take: (helped develop #OpenID version based on #OAuth) https://www.tbray.org/ongoing/When/201x/2014/05/03/Security-Farce
erkan: OK, some progress. now I get: "No suitable consumer keys stored locally, fetching latest list... Sorry, #IdentiCurse currently lacks the #API keys needed to support #OAuth with your instance (fediverse.com). If fediverse.com is a public instance, let us know which one it is (filing a bug at http://bugzilla.identicurse.net/ is the preferred way of doing so), and we'll add support as soon as possible."
erkan's status on Monday, 05-May-14 09:50:34 UTC
OK, some progress. now I get: "No suitable consumer keys stored locally, fetching latest list... Sorry, #IdentiCurse currently lacks the #API keys needed to support #OAuth with your instance (fediverse.com). If fediverse.com is a public instance, let us know which one it is (filing a bug at http://bugzilla.identicurse.net/ is the preferred way of doing so), and we'll add support as soon as possible."
mk: yay, back in business with IdentiCurse on Nikola - turns out mismatched system clocks and a too-narrow (not-configurable) 'threshold' in OAuth were the culprit #oauth #bug
mk's status on Sunday, 05-Jan-14 22:37:45 UTC
yay, back in business with IdentiCurse on Nikola - turns out mismatched system clocks and a too-narrow (not-configurable) 'threshold' in OAuth were the culprit #oauth #bug
erkanyilmaz: anonymous #authentication with Public Key #cryptography (RSA keypairs, like SSH does): "Such a key repository could be local or remote and could have any number of mangement features (at least key creation and deletion) and perhaps also provide #APIs for existing authentication methods such as #OpenID and #OAuth." "Your private key could be used to #encrypt notifications which can be thrown into a giant #anonymous mixing bowl message store, or attached to an #API endpoint (or #PubSub node?) from which you can retrieve them and decrypt them using your private key" cc @question
erkanyilmaz's status on Tuesday, 17-Sep-13 03:03:05 UTC
anonymous #authentication with Public Key #cryptography (RSA keypairs, like SSH does): "Such a key repository could be local or remote and could have any number of mangement features (at least key creation and deletion) and perhaps also provide #APIs for existing authentication methods such as #OpenID and #OAuth." "Your private key could be used to #encrypt notifications which can be thrown into a giant #anonymous mixing bowl message store, or attached to an #API endpoint (or #PubSub node?) from which you can retrieve them and decrypt them using your private key" cc @question
erkanyilmaz: Yeah, by supporting a system which doesn't support #federation with other systems. Go for it: "In this release #mediagoblin moves closer to federation by shifting our #oauth code to be pump.io compatible" http://mediagoblin.org/news/mediagoblin-0.5.0-goblin-force.html
erkanyilmaz's status on Thursday, 05-Sep-13 16:04:12 UTC
Yeah, by supporting a system which doesn't support #federation with other systems. Go for it: "In this release #mediagoblin moves closer to federation by shifting our #oauth code to be pump.io compatible" http://mediagoblin.org/news/mediagoblin-0.5.0-goblin-force.html
erkanyilmaz: :-( "Sorry! #OAuth Method just works with Identi.ca server. You have to use basic authentication for other #StatusNet servers." #choqok 1.3 from package manager, kde 4.8.4, wheezy/sid -> let's see if there's a fix for that somewhere
erkanyilmaz's status on Wednesday, 14-Aug-13 15:09:53 UTC
:-( "Sorry! #OAuth Method just works with Identi.ca server. You have to use basic authentication for other #StatusNet servers." #choqok 1.3 from package manager, kde 4.8.4, wheezy/sid -> let's see if there's a fix for that somewhere
erkanyilmaz: @gryps75 did you already do: "Register an #OAuth client application to use with this instance of #StatusNet." ? it's in http://oracle.skilledtests.com/settings/oauthconnections (adapt link to your instance)
erkanyilmaz's status on Wednesday, 14-Aug-13 14:10:43 UTC
@gryps75 did you already do: "Register an #OAuth client application to use with this instance of #StatusNet." ? it's in http://oracle.skilledtests.com/settings/oauthconnections (adapt link to your instance)
erkanyilmaz: #identicurse works with and without #oauth in #statusnet! Which IC version are you using ? If you were using it before then your settings might be borked, see solution: http://oracle.skilledtests.com/notice/236090
erkanyilmaz's status on Wednesday, 14-Aug-13 13:04:25 UTC
#identicurse works with and without #oauth in #statusnet! Which IC version are you using ? If you were using it before then your settings might be borked, see solution: http://oracle.skilledtests.com/notice/236090
silner: #OAuth 2.0 editor resigns and takes name off spec http://bit.ly/LYf2wN
silner's status on Saturday, 28-Jul-12 12:56:38 UTC
#OAuth 2.0 editor resigns and takes name off spec http://bit.ly/LYf2wN
oberger: Compiling locally created !debian package for php #oauth extension (pecl)... and filing an RFP to wnpp... instead of going to bed ;-)
oberger's status on Tuesday, 10-Apr-12 21:22:57 UTC
Compiling locally created !debian package for php #oauth extension (pecl)... and filing an RFP to wnpp... instead of going to bed ;-)
takeshitakenjifossil: You know, despite #OStatus and #OAuth not working so well on RDN, I do like how it's significantly faster than #Identica and allows for longer posts.
takeshitakenjifossil's status on Saturday, 05-Nov-11 18:13:08 UTC
You know, despite #OStatus and #OAuth not working so well on RDN, I do like how it's significantly faster than #Identica and allows for longer posts.