Ō̴̡̨͍͕̠̹̘͖͓̭̝̰̖͉̬̫͍̝̰̟͖͖̞͇̟̻̫͇̠̯̋̋̂ͅͅA̷̡̧͎̫̬͖̠͍̼̗̠͊̉̏̓̈́̂̀̈́͆͘͜uth @oktadev oauth.wtf oauth.net 🎥 livestreaming youtube.com/aaronpk aaronpk.tv 💛 #indieweb 🐘🦋

Portland, Oregon
Joined April 2008
Filter
Exclude
Time range
-
Near
@Gargron Any chance you're able to make it to IndieWebCamp Düsseldorf or Nürnberg? We'd love to have you there! indiewebweek.indieweb.org/
1
🎥🎉 ❜ We recorded 912gb of raw video during @CSVConference! ❜🎉🎥 #csvconf
2
6
1
28
Replying to @Rogue__Leader
so some services use the password grant to exchange a un+pw for a token, and build the login interface natively.
1
Replying to @Rogue__Leader
Well for first-party apps there isn't really a phishing risk, it's normal to type your password into the service's own app.
Replying to @Rogue__Leader
Yeah the Google case is interesting since they're doing it with their own apps!
1
Replying to @Rogue__Leader
The Google Inbox and Voice apps do it! I know I've used a couple more, but can't remember off-hand.
1
Replying to @Rogue__Leader
Yeah sorry, 140 chars isn't enough 😭 Before SFSafariView, the only way to securely do OAuth was to launch the native…
1
Replying to @Rogue__Leader
SafariViewController is the best of both worlds. Visible URL, no bouncing out of application, shared cookies.
1
Replying to @Rogue__Leader
The problem with embedded WebView is users will have to type their password there anyway, since it doesn't share cookies
Replying to @Rogue__Leader
Prior to SafariViewController, devs weren't willing to bounce ppl out of the app, the only other way to have a visible URL
1
Replying to @Rogue__Leader
Thanks! That, or launching Safari or the service's native application. SafariViewController will provide the best UX.
1
A timelapse of everyone at @csvconference filing in to the chapel for the keynote! #csvconf
8
0
I haven't found anything quite like the X2, but I've been using the new Mobi line without the "cloud". It uploads to my computer.
1
Replying to @stevenf
If you look closely, the web page just makes an API call to read a JSON file. I would say it's an... "unofficial" API at best tho.
Replying to @TheDailyShow
The last minute of the Roy Wood Jr segment is missing from the Apple TV! It's just a blank screen with the CC logo!
1
1
Just made this #nownownow page: aaronparecki.com/now/ Shows my local time, location, weather, phone battery, and open tabs! 😂 #indieweb
1
1
11
Time for my quarterly server upgrades, which I am 2 months behind on.
1
oh man you *just* missed domainswap.xyz last night! We'll do it again I promise!
OH: Your level of commitment to trolling the internet is admirable #domainswap
1