#indieauth — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #indieauth, aggregated by home.social.
-
IndieAuth is a federated login protocol for Web sign-in, enabling users to use their own domain to sign in to other sites and services. IndieAuth can be used to implement #OAuth2 login AKA OAuth-based login.
#IndieAuth is built on ideas and technology from existing proven technologies like OAuth and #OpenID but makes it easier for users as well as developers. It decentralizes much of the process so completely separate implementations and services can be used for each part.
-
Am I part of the Indieweb?
Juhis tells us that there is no membership card for the Indieweb blogging community. I like his thesis as I sort of feel like I'm at least on the periphery of the Indieweb movement....
#blaugust #blaugust2026 #gatekeeping #indieauth #indieweb #webmentions
-
An AI shipped my comment plugin to a service that could never accept it
A migration to IndieLogin.com that could never have worked, why the failure was worth it, and what an AI-assisted development failure mode actually looks like.https://rmendes.net/articles/2026/08/21/ai-shipped-comment-plugin-indielogin
-
Dear #indieweb folks: does anyone use #indieauth ? Debating adding it as a login method to my website… Thanks!
-
just btw;
I hope, all of this will make my IndieWebCamp Brighton demo of broken registerProtocolHandlers obsolete :)
https://www.youtube.com/live/W70wd56i0Bg?t=2030s@jaffathecake
Once I had BrowserId then the renamed Persona then WebId and now it is https://developer.mozilla.org/de/docs/Web/API/FedCM_API I suppose.
Demos https://fedcm-demo-rp.dev/menu
Some articles said that Firefox will ship it in 2025 / 2026 - is that still true ? -
#POSSE = fancy acronym for cross posting content that is also on your blog.
#webmention = pingbacks but less spam because even the spammers don't want to adopt it
#indieauth = your domain expired and now some hacker bought your accounts on ten servers for $20 a year, except this is legal and by design. -
Finally found time to update my #beloveduniverse website! Going more decentralized: you can now log in with #IndieAuth. You ca register with your own site, or sign in with a URL right from the main page and link to a pre-existing account. Plus, Maid Adventures is now federated! Major in-game events get shared to the fediverse via #ActivityPub. Example @luckyfoot. Each estate gets their own. You can also follow on bluesky @maidadventures.bsky.social #fediverse
-
busybee: Notes: Re: I joined the IndieWeb, here's what I learned https://beesbuzz.biz/blog/chatter/11609-Re-I-joined-the-IndieWeb-here-s-what-I-learned #IndieAuth #IndieWeb #Notes #Blog
-
Added opt-out native IndieAuth support to xmit.co-hosted websites. Login with your site, zero setup.
Announcement post. -
I really want to like #indieauth but the idea of having to parse a remote HTML document just seems utterly deranged.
-
found.as profile pages published after today support IndieAuth out-of-the-box, with
profileandemailscopes handled natively.So #indieauth much #indieweb
What should come next?
-
One thing I really like about ATProto/Atmosphere is the concept of a PDS, or Personal Data Server, storing all your account data.
The other day someone announced https://bookhive.buzz, basically ATProto take on https://bookwyrm.social, but unlike Bookwyrm, which requires you to create a separate account, Bookhive lets you log in with your PDS, most commonly your Bluesky account.
That's actually pretty neat.
And we could have something similar with Federated Credential Management (FedCM).
https://developer.mozilla.org/en-US/docs/Web/API/FedCM_API
Here's a GitHub issue requesting this for Mastodon:
https://github.com/mastodon/mastodon/issues/4800
#fediverse #mastodon #FedCM #indieauth #SocialMedia #ATProto #PDS
-
CW: indieweb tech: micropub
I'm making some progress on my micropub endpoint based on the https://go.hacdias.com/indielib library.
I can now use my endpoint for IndieAuth, and store posts on the filesystem, in the custom TOML page format I use. I'm having some trouble with the `micropub?q=config` route, and haven't started working on git sync or the media endpoint yet. One step at a time.
The main issue that's holding me back now, is that it's really hard to test if everything works as intended. I've been testing using Quill and Sparkles via my server now, but it's less than ideal to not be able to test it locally. Any advice would be appreciated 😅
Also, https://micropub.rocks doesn't work for me at all, because it doesn't use PCKE apparently.
But the clients are way easier than how I was updating my site until now, so I have enough motivation to keep at it!
-
This also made me realise I want to give implementing #micropub and #indieauth for my website another go. It isn't the easiest of protocols, last time I gave up. But I'd love to remove some friction of posting to my site (esp. images). Too bad there isn't a ready made Go project of these protocols, that builds a static site and syncs with Git. I'll try rolling my own again using https://pkg.go.dev/go.hacdias.com/indielib by @hacdias and see if I have better luck this time.
-
Fixed: IndieAuth login broken for third-party apps
After adding security headers (Content-Security-Policy) to harden the site, logging in with IndiePass and other IndieAuth clients silently failed — tapping “authorize” did nothing.
The culprit was form-action ‘self’ in the CSP, which blocked Browsers from following the consent form’s redirect to the client’s callback URL (e.g., indiepass.app/android-callback).
Changed to form-action ‘self’ https: to allow IndieAuth redirects to any HTTPS callback. Affects all third-party IndieAuth clients (Micropub editors, Microsub readers, etc.), not just IndiePass.
-
Building an IndieAuth Comment System for Your Static Site | 🔗 https://brennan.day/building-an-indieauth-comment-system-for-your-static-site/
#indieweb #eleventy #netlify #javascript #indieauth #tutorial
-
Finished my December Adventure with an unfinished project, as is tradition. I'm in the process of extracting a standalone IndieAuth client atop the OAuth2 crate. Full adventure log:
-
My December Adventure detoured into an implementation of IndieAuth. I need an authenticated section to process the pending Webmentions before they're made visible to the public. Instead of maintaining my own credentials, I wanted to stay in the IndieWeb spirit and authenticate against my own website and its rel=me links. Success!
- more on IndieAuth: https://indieauth.net/
- ongoing adventure log: https://rossabaker.com/series/december-adventure-2025/ -
CVE Alert: CVE-2025-12028 - indieweb - IndieAuth - https://www.redpacketsecurity.com/cve-alert-cve-2025-12028-indieweb-indieauth/
#OSINT #ThreatIntel #CyberSecurity #cve-2025-12028 #indieweb #indieauth
-
I think I have all the pieces set up and Umbrella is ready to go. It is a simple 11ty starter site that has IndieAuth, Micropub, and Webmentions built in using Netlify functions.
I've been using all of these pieces on my site for a bit but I wanted to put them all together in one place just in case it could help others start their own site.
-
If you have your own GitHub profile url as a primary link on your Mastodon/Fediverse profile url and vice versa you can "Log In" with your profile url and use #IndieAuth to RSVP for this event. And of course you can use your own domain with that. #IndieWeb RSVP-ing is optional, as stated. We'll be around, webmastering.
-
I'm slowly getting the hang of IndieWeb building blocks. Today I set up IndieAuth on my server using selfauth! Now I can authenticate myself as "moule.world" on any website that supports IndieAuth, including Owncast livestream chats!
How to setup selfauth: https://indieweb.org/selfauth
My next plan: making an "announcements" section of my website, which will use microformats2, support webmentions, hopefully Fediverse reactions and comments, and of course good ol' RSS.
-
I’ve spent some time over the past week working on a proof-of-concept integration of Micropub into Django.
I don’t have anything functional to show for it, but I have a much better understanding of IndieAuth, Micropub, and writing decoupled Django apps.
https://orangegnome.com/posts/3338/exploring-indieauth-but-i-started-with-micropub
-
@neil Probably not. I see no effect from setting an "external account". (But then, I could hardly find the "logout" button.)
(Un)relatedly, does #Discourse support #IndieAuth? Seems not: https://meta.discourse.org/t/indieauth-login/48182
-
When I wrote that post, my blog was SSG generated by Pollen (which is ultimately running on the #Racket runtime). That was a great system and it served me well for years, but it had its shortcomings and eventually I decided to replace it with something simpler. I went with a dynamic #Lua site.
The new system is good old CGI based scripts written in #Lua using a #SQLite file as source of truth. About 1169 lines for the whole CMS including my #IndieAuth #Micropub and my #MetaWeblog endpoint.
-
The team @micro.blog have done it again.
They soft-launched https://micro.one yesterday¹.
This may be the most accessible onramp to the open social web ever.
Cost: $1 a month. Yes you read correctly.
This is the simplest and cheapest (where you are the customer, not the product) way to own your identity and content online².
Stop posting in someone else’s garage³.
Time to export your Twitter, and migrate your Mastodon handle to your own home on the web.
Of course you can bring your own domain name. Additionally:
* blog posts, naturally, both articles and microblogging notes
* photos
* podcasting
* custom themes
* web-clients and native mobile posting clients
* WordPress, Tumblr, Mastodon, Medium import
More details (and alternatives) at https://micro.one/about/pricing
And yes, it interoperates with the open #socialWeb, including:
* #ActivityPub support, #Mastodon and #fediverse compatibility
* #IndieAuth to sign-in to third-party apps
* #microformats support in all built-in themes
* #Webmention for sending and receiving replies across websites
* #Micropub standard posting API, supporting dozens of clients
* #Microsub standard timeline API, supporting social readers
More #indieweb support details at https://micro.one/about/indieweb
Did I mention the the superb micro.blog (and micro.one) Community Guidelines?
* https://help.micro.blog/t/community-guidelines/39
Well done @manton.org and team.
This is post 6 of #100PostsOfIndieWeb. #100Posts #ownYourIdentity #ownYourData #openSocialWeb
← https://tantek.com/2025/003/t1/lastfm-year-in-review-playback24
→ https://tantek.com/2025/012/t1/eight-years-webmention
Glossary
IndieAuth
https://indieweb.org/IndieAuth
microformats
https://microformats.org/wiki/microformats
Micropub
https://indieweb.org/Micropub
Microsub
https://indieweb.org/Microsub
Webmention
https://indieweb.org/Webmention
References
¹ https://www.manton.org/2025/01/03/microone-was-effectively-a-softlaunch.html
² https://tantek.com/2025/001/t1/15-years-notes-my-site-first
³ https://tantek.com/2023/022/t2/own-your-notes-domain-migration