Ō̴̡̨͍͕̠̹̘͖͓̭̝̰̖͉̬̫͍̝̰̟͖͖̞͇̟̻̫͇̠̯̋̋̂ͅͅA̷̡̧͎̫̬͖̠͍̼̗̠͊̉̏̓̈́̂̀̈́͆͘͜uth @oktadev oauth.wtf oauth.net 🎥 livestreaming youtube.com/aaronpk aaronpk.tv 💛 #indieweb 🐘🦋
Portland, Oregon
Joined April 2008
- Tweets 11,388
- Following 1,223
- Followers 6,415
- Likes 9,609
ActivityPub was developed in literally the same W3C group that Webmention and Micropub were standardized in ;-) btw why no website in your twitter bio? Where can I follow your fediverse posts?
1
1
LOL I've never even seen that paragraph and it took me a really long time to find it. Also note that was written in 2013 when that was pretty much true. Feel free to update it, it's a wiki after all. indieweb.org/wiki/index.php?…
1
That is amazing, and I think you need to turn your headline into an actual post and get it picked up by theverge or someone.
1
Super awesome writeup of the iOS IndieWeb reader app "Indigenous" and Eddie's motivations for writing it! Love seeing more IndieWeb tools like this! eddiehinkle.com/2018/05/02/1…
2
3
Heading to Homebrew Website Club SF, "502 Bad Gateway" edition! 🏰 5:30pm at MozSF! tantek.com/2018/122/e1/homeb… Join if you're in the area, or join for drinks after!
5
I'm going to be hosting a workshop on @OAuth_2 this fall in Nürnberg, Germany! 🔐 Only 15 spots available, so sign up now! colloq.io/events/tollwerksta…
3
3
Just downloaded my @instagram dump and I'm pretty disappointed. 😔
* My comments include only the comment text, a timestamp, and the photo author. No way to know what I'm commenting on
* Same for photos I've liked
* There's no indication of likes or comments on my own photos
1
8
Hello from @donutjs, packed house tonight! We're livestreaming tonight thanks to support from @oktadev! youtube.com/4czBvCbtiWw
2
6
Sadly there isn't a satisfying answer to that. Anything that your JS can use to store any token is vulnerable to XSS. The only secure option is cookies, but that won't work with OAuth. stormpath.com/blog/where-to-…
3
1
2
@buffer Does this Facebook API announcement mean publishing to Facebook from Buffer will stop working? developers.facebook.com/blog…
1
1
I agree it would be nice to see this written up properly though. In the mean time, I'm adding a section to my book about this.
1
2
BCP for public UA clients:
* use the authorization code flow
* omit client secret
* strict redirect URI validation
Some citations and more info: aaronparecki.com/oauth-2-sim…
3
1
3
An IndieWeb reader: My new home on the internet godaddy.com/garage/an-indiew… #indieweb
4
1
20
#tbt to when Facebook used to ask for your email password so that it could download your contact list lol omg 😱😂
3
1
6
Reminder! @oktadev is buying drinks at tonight's Homebrew Microblog Meetup! 🍻🔜 indieweb.org/events/2018-04-… Looking forward to meeting everyone tonight!
1
2
I'm looking forward to #WebAuthn rolling out to more browsers and devices! 🔐 Here's a little taste of what's coming 🔜 developer.okta.com/blog/2018…
9
11
That page refers specifically to the thing you're talking about in email, services innovating in non-compatible ways, locking people in to their service. There's nothing wrong with commercial services in the IndieWeb as long as they're interoperable.
2
Don't forget: Next week is the Homebrew Microblog Meetup in Portland! 💬🍻 Thanks to @oktadev for sponsoring drinks! indieweb.org/events/2018-04-…
3