Message from @Undead Mockingbird

Discord ID: 507851367105167382


2018-11-02 09:32:43 UTC  

Ah, here it is. I was wrong. It uses HTTP Basic authentication.

https://cdn.discordapp.com/attachments/463054787336732683/507849530717503488/Screen_Shot_2018-11-02_at_10.32.23_AM.png

2018-11-02 09:33:30 UTC  

So, it's by far the simplest to program against. Basically made to rely on only the most basic, old school web protocols.

2018-11-02 09:33:56 UTC  

i'd rather have oauth tokens with scopes ¯\_(ツ)_/¯

2018-11-02 09:34:08 UTC  

Yeah ... hmm.

2018-11-02 09:34:28 UTC  

Well, it has its use, of course, or nobody would put in the extra effort, but it's nice having basic auth.

2018-11-02 09:35:04 UTC  

also

2018-11-02 09:35:14 UTC  

> fucking xml

2018-11-02 09:35:48 UTC  

xml?

2018-11-02 09:35:58 UTC  

Oh, right! Now I see it. I thought it was JSON.

2018-11-02 09:36:06 UTC  

you send json, endpoints return xml

2018-11-02 09:36:08 UTC  

Wait ... it is JSON, but also XML. That's weird.

2018-11-02 09:36:28 UTC  

i'm wrong, you just send params

2018-11-02 09:36:29 UTC  

Ah, I remember. For some reason, I got XML in one call and JSON in another. I have no clue why.

2018-11-02 09:36:32 UTC  

It seems weird to me.

2018-11-02 09:37:02 UTC  

When posting an image, you get XML.

2018-11-02 09:37:19 UTC  

actually dunnolol, fuck it i'm tired ¯\_(ツ)_/¯

2018-11-02 09:37:23 UTC  

When posting a status, you send JSON.

2018-11-02 09:38:20 UTC  

Maybe I was using the endpoint weird, but the code is tested and I've been using it for a while, so at least it works. But I might still be needlessly complicated about it. Not sure - I reverse engineered it in the web debugger, because I was too lazy to read the manual. lel

2018-11-02 09:39:45 UTC  

Ah, and you mentioned OAuth: I guess you need it for three legged authentication, i.e. web applications authenticating you to the social media service on your behalf, without having to give away your credentials, just the way when you authorize an app to post to Twitter or Facebook.

2018-11-02 09:40:01 UTC  

Not sure if you can do that with HTTP basic auth.

2018-11-02 09:40:09 UTC  

nope

2018-11-02 09:40:53 UTC  

Ah, okay. That's what I thought, but I was not 100% sure. If you don't think so, either, then you probably can't.

2018-11-02 09:41:02 UTC  

as in you could but you'd end up reimplementing oauth flow, so why bother :^)

2018-11-02 09:41:37 UTC  

Right. Whatever token magic you would have to build would have to basically come down to the same steps and mechanisms OAuth uses already.

2018-11-02 09:42:05 UTC  

So, not sure how GNU Social would do "web apps" and that sort of stuff. They probably cannot right now.

2018-11-02 09:42:49 UTC  

But I am reading some OAuth tests in the GNU Social source code. Not sure if that's a planned feature or already in.

2018-11-02 09:43:25 UTC  

fucking opensource

2018-11-02 09:43:34 UTC  

That's good, no?

2018-11-02 09:44:05 UTC  

when someone bothers to write the docs :^)

2018-11-02 09:44:24 UTC  

Eh, it's better than not being able to contribute at all.

2018-11-02 09:44:33 UTC  

oh ... wait, now I understand your comment

2018-11-02 09:45:00 UTC  

You meant to hint at how bad or out of sync the docs are for many OSS projects. Agreed.

2018-11-02 09:45:16 UTC  

The best manual is the source code.

2018-11-02 09:45:18 UTC  

¯\_(ツ)_/¯

2018-11-02 09:46:05 UTC  

But, at least GNU Social doesn't have some weird client agreement like Minds. Minds devs wanted me to sign some weird agreement before contributing.

2018-11-02 09:46:54 UTC  

It was something about intellectual property. I didn't read it all. I just said no. I have no patience dealing with that stuff when I am doing them the favor to give them source code for free. No thanks.

2018-11-02 09:47:41 UTC  

you'd leak their secret crud sauce

2018-11-02 09:47:49 UTC  

no kidding ...

2018-11-02 09:47:55 UTC  

Minds is kind of ... wonky.