SocialCG/2017-12-06/minutes

From W3C Wiki
Jump to: navigation, search

Social Web Community Group Teleconference

06 Dec 2017

Attendees

Present
aaronpk, ajordan

Since only two of us were on the call we didn't formally start the meeting or pick a scribe. Some notes from our discussion below.

Contents

IRC Log: https://chat.indieweb.org/social/2017-12-06#t1512575862121500

  • Discussing using IndieAuth as a client-to-server authentication protocol for ActivityPub
    • aaronpk: given an activitypub actor's URL like https://w3c.social/@ajordan, that would just need to advertise two new rel values in the HTTP Link header to point to the authorization endpoint and token endpoint
    • aaronpk: after the indieauth flow is done the client ends up with an OAuth 2.0 Bearer token, which the client would be able to use at the activitypub server as normal
    • aaronpk: if users are more used to entering @ajordan@w3c.social when they log in to clients, the client would need to first use webfinger to turn that into a URL like https://w3c.social/@ajordan
    • ajordan: I seem to recall a large discussion when Mastodon moved to AP surrounding Webfinger migration plans; perhaps that would be good to formalize into a note
  • Found a platform-specific bug with the SVG diagram in IndieAuth, and fixed it [1]
  • ajordan submitted an implementation report for his webmention client [2]