You can already deploy #doauth to your server in dev mode and start registering users. If you do, share your server's PK with me so that I can add it to my server!
I'm very shy about the structure and understandability of my code, but now I'm workign with #mastodon ruby codebase and I feel better.
Working hard on #doauth being privacy-preserving. API first, backend later.
Invites work! #doauth
Managed to write a count-based invite system full implementation with #doauth as a library takes 111 LoC.
Going to write tests tomorrow and start looking into integration with mastodon 🎉
Hot take: tonsky has such obnoxious website design because he doesn't want anyone to read his stuff using a web browser, but rather RSS or Mozilla's "read" feature.
I wonder if I'll manage to implement limked lists for verifiable credentials as seen in #doauth, thus implementing everything needed for the quantity-bound invite protocol.
I'm kind of behind the curve when it comes to OWASP for web, compared to #phoenix authors, but it seems like my header-based MITM / replay prevention called Chappy does the same thing as the CSRF-mitigation.
I'm such a "not invented here" guy, holy shit.
Patch, demonstraing this functionality:
I can't wait to speed-run invite system imlpementation and start integrating it with #mastodon!
Another milestone in #doauth's history: JS client verified its first credential!
It appears Freenode performed a hostile takeover of our officially-registered IRC channel.
We have moved to @liberachat. If you use IRC, please join us there.
Dont @-me, I'm just following verifiable credentials spec, which kindly tells me to figure out how to attach proofs and what to cover with proofs myself, while imposing JSON schema on me.
Honestly, sometimes I'm apalled by JSON world. It's better than XML, but still doesn't address any of its issues. If we only had better editors for binary formats, we would have lived in a much better worlds. Now I really do understand why architects when I was in my early twenties were so eager to use protobufs...
T-Bone Burnett, who, amongst other things, starred in one of my favorite weird American sitcoms "The Larry Sanders Show", had some of his music uploaded to YouTube, including my favorite of his albums "the true false identity".
"Machines always do what you tell them to do, as long as you do what they say", 2006, mind you.