Last Updated

Map

IndieWebCamp NYC 2017 is happening this weekend, 9/30 and 10/1. I will be there on Sunday only, as I cannot be there the day before. Sunday is Hack and Create day. Hoping to help some people set up their websites if I can, and maybe improve my own.

Looking forward to seeing Tantek Çelik, who has been a fixture at every IndieWebCamp I have attended, and Marty McGuire, who I met at the last IndieWebCamp in NYC. The rest of the attendees I’m not as familiar with. Should be a fun day, following Yom Kippur, which is substantially less fun.

RSVPed Attending IndieWebCamp Austin – December 9-10, 2017 – Austin, Texas

IndieWebCamp Austin 2017 is a gathering for independent web creators of all kinds, from graphic artists, to designers, UX engineers, coders, hackers, to share ideas, actively work on creating for their own personal websites, and build upon each others creations.

Heading to IndieWebCamp Austin.

RSVPed Attending IndieWebCamp Baltimore – Jan 20-21, 2018 – Baltimore, Maryland

IndieWebCamp Baltimore 2018 is a gathering for independent web creators of all kinds, from graphic artists, to designers, UX engineers, coders, hackers, to share ideas, actively work on creating for their own personal websites, and build upon each others creations.

IndieAuth for WordPress Question

Thinking about the necessity of maintaining IndieAuth code in the Micropub plugin and now the Yarns Microsub plugin for WordPress.

I wanted to put out to any WordPress user for some input. The IndieAuth plugin creates an IndieAuth endpoint inside your WordPress installation. This means that you login to your site and that login generates a token to give Micropub, Microsub, or other clients in order to let them have access to your site.

Alternatively, if you don’t install it, the IndieAuth code inside the other plugins will connect to an external IndieAuth endpoint, defaultly indieauth.com. Indieauth.com, for example, delegates your login to a third-party site(Github, for examplle) on which you have an account that you link to from your website. So all you need is to add a link marked up properly to your site for that.

So, the question is, why would people want an external login to a built-in login? Since it uses the WordPress login system to get your credentials, you could install any number of login enhancements for WordPress that would work seamlessly to accomplish the same goal if you want to log in using a third-party site, for example.

It is definitely more secure for you to use authorization under your own control than delegating it to another site. To try and make my life easier, I would like to make Micropub and Microsub dependent on having the IndieAuth plugin installed.

The only use case presented for allowing an external site was…what if I want to sign into Site A with the credentials of Site B? That would be web sign in. There is functionality for that built into the IndieAuth plugin, but it probably deserves to be its own plugin so you can install it or not as the case may be.

Web sign in presents you with a URL and then, when you ask to log in, searches that URL for an IndieAuth authorization endpoint. If none is available, it would fail back on another technique, such as relmeauth…looking for alternative login providers.

Hoping for some comments on why people might want to maintain the external option.