home.social

#indieauth — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #indieauth, aggregated by home.social.

  1. Added opt-out native IndieAuth support to xmit.co-hosted websites. Login with your site, zero setup.
    Announcement post.

    #indieauth #indieweb

  2. Added opt-out native IndieAuth support to xmit.co-hosted websites. Login with your site, zero setup.
    Announcement post.

    #indieauth #indieweb

  3. Added opt-out native IndieAuth support to xmit.co-hosted websites. Login with your site, zero setup.
    Announcement post

    #indieauth #indieweb

  4. Added opt-out native IndieAuth support to xmit.co-hosted websites. Login with your site, zero setup.
    Announcement post.

    #indieauth #indieweb

  5. Added opt-out native IndieAuth support to xmit.co-hosted websites. Login with your site, zero setup.
    Announcement post.

    #indieauth #indieweb

  6. I really want to like #indieauth but the idea of having to parse a remote HTML document just seems utterly deranged.

  7. I really want to like #indieauth but the idea of having to parse a remote HTML document just seems utterly deranged.

  8. I really want to like #indieauth but the idea of having to parse a remote HTML document just seems utterly deranged.

  9. I really want to like #indieauth but the idea of having to parse a remote HTML document just seems utterly deranged.

  10. found.as profile pages published after today support IndieAuth out-of-the-box, with profile and email scopes handled natively.

    So #indieauth much #indieweb

    What should come next?

  11. found.as profile pages published after today support IndieAuth out-of-the-box, with profile and email scopes handled natively.

    So #indieauth much #indieweb

    What should come next?

  12. found.as profile pages published after today support IndieAuth out-of-the-box, with profile and email scopes handled natively.

    So #indieauth much #indieweb

    What should come next?

  13. found.as profile pages published after today support IndieAuth out-of-the-box, with profile and email scopes handled natively.

    So #indieauth much #indieweb

    What should come next?

  14. found.as profile pages published after today support IndieAuth out-of-the-box, with profile and email scopes handled natively.

    So #indieauth much #indieweb

    What should come next?

  15. I made some rather big changes to the site over the past month. I added native IndieAuth support, changed pagination to be datetime-based, and added a photostream.

    brentlineberry.com/posts/3966/

    #WebDesign #WebDevelopment #Indieweb #Indieauth #Changelog

  16. I made some rather big changes to the site over the past month. I added native IndieAuth support, changed pagination to be datetime-based, and added a photostream.

    brentlineberry.com/posts/3966/

    #WebDesign #WebDevelopment #Indieweb #Indieauth #Changelog

  17. I made some rather big changes to the site over the past month. I added native IndieAuth support, changed pagination to be datetime-based, and added a photostream.

    brentlineberry.com/posts/3966/

    #WebDesign #WebDevelopment #Indieweb #Indieauth #Changelog

  18. One thing I really like about ATProto/Atmosphere is the concept of a PDS, or Personal Data Server, storing all your account data.

    The other day someone announced bookhive.buzz, basically ATProto take on bookwyrm.social, but unlike Bookwyrm, which requires you to create a separate account, Bookhive lets you log in with your PDS, most commonly your Bluesky account.

    That's actually pretty neat.

    And we could have something similar with Federated Credential Management (FedCM).

    developer.mozilla.org/en-US/do

    Here's a GitHub issue requesting this for Mastodon:

    github.com/mastodon/mastodon/i

    #fediverse #mastodon #FedCM #indieauth #SocialMedia #ATProto #PDS

  19. One thing I really like about ATProto/Atmosphere is the concept of a PDS, or Personal Data Server, storing all your account data.

    The other day someone announced bookhive.buzz, basically ATProto take on bookwyrm.social, but unlike Bookwyrm, which requires you to create a separate account, Bookhive lets you log in with your PDS, most commonly your Bluesky account.

    That's actually pretty neat.

    And we could have something similar with Federated Credential Management (FedCM).

    developer.mozilla.org/en-US/do

    Here's a GitHub issue requesting this for Mastodon:

    github.com/mastodon/mastodon/i

    #fediverse #mastodon #FedCM #indieauth #SocialMedia #ATProto #PDS

  20. One thing I really like about ATProto/Atmosphere is the concept of a PDS, or Personal Data Server, storing all your account data.

    The other day someone announced bookhive.buzz, basically ATProto take on bookwyrm.social, but unlike Bookwyrm, which requires you to create a separate account, Bookhive lets you log in with your PDS, most commonly your Bluesky account.

    That's actually pretty neat.

    And we could have something similar with Federated Credential Management (FedCM).

    developer.mozilla.org/en-US/do

    Here's a GitHub issue requesting this for Mastodon:

    github.com/mastodon/mastodon/i

    #fediverse #mastodon #FedCM #indieauth #SocialMedia #ATProto #PDS

  21. One thing I really like about ATProto/Atmosphere is the concept of a PDS, or Personal Data Server, storing all your account data.

    The other day someone announced bookhive.buzz, basically ATProto take on bookwyrm.social, but unlike Bookwyrm, which requires you to create a separate account, Bookhive lets you log in with your PDS, most commonly your Bluesky account.

    That's actually pretty neat.

    And we could have something similar with Federated Credential Management (FedCM).

    developer.mozilla.org/en-US/do

    Here's a GitHub issue requesting this for Mastodon:

    github.com/mastodon/mastodon/i

    #fediverse #mastodon #FedCM #indieauth #SocialMedia #ATProto #PDS

  22. One thing I really like about ATProto/Atmosphere is the concept of a PDS, or Personal Data Server, storing all your account data.

    The other day someone announced bookhive.buzz, basically ATProto take on bookwyrm.social, but unlike Bookwyrm, which requires you to create a separate account, Bookhive lets you log in with your PDS, most commonly your Bluesky account.

    That's actually pretty neat.

    And we could have something similar with Federated Credential Management (FedCM).

    developer.mozilla.org/en-US/do

    Here's a GitHub issue requesting this for Mastodon:

    github.com/mastodon/mastodon/i

    #fediverse #mastodon #FedCM #indieauth #SocialMedia #ATProto #PDS

  23. CW: indieweb tech: micropub

    I'm making some progress on my micropub endpoint based on the go.hacdias.com/indielib library.

    I can now use my endpoint for IndieAuth, and store posts on the filesystem, in the custom TOML page format I use. I'm having some trouble with the `micropub?q=config` route, and haven't started working on git sync or the media endpoint yet. One step at a time.

    The main issue that's holding me back now, is that it's really hard to test if everything works as intended. I've been testing using Quill and Sparkles via my server now, but it's less than ideal to not be able to test it locally. Any advice would be appreciated 😅

    Also, micropub.rocks doesn't work for me at all, because it doesn't use PCKE apparently.

    But the clients are way easier than how I was updating my site until now, so I have enough motivation to keep at it!

    #micropub #IndieAuth #indieweb

  24. CW: indieweb tech: micropub

    I'm making some progress on my micropub endpoint based on the go.hacdias.com/indielib library.

    I can now use my endpoint for IndieAuth, and store posts on the filesystem, in the custom TOML page format I use. I'm having some trouble with the `micropub?q=config` route, and haven't started working on git sync or the media endpoint yet. One step at a time.

    The main issue that's holding me back now, is that it's really hard to test if everything works as intended. I've been testing using Quill and Sparkles via my server now, but it's less than ideal to not be able to test it locally. Any advice would be appreciated 😅

    Also, micropub.rocks doesn't work for me at all, because it doesn't use PCKE apparently.

    But the clients are way easier than how I was updating my site until now, so I have enough motivation to keep at it!

    #micropub #IndieAuth #indieweb

  25. CW: indieweb tech: micropub

    I'm making some progress on my micropub endpoint based on the go.hacdias.com/indielib library.

    I can now use my endpoint for IndieAuth, and store posts on the filesystem, in the custom TOML page format I use. I'm having some trouble with the `micropub?q=config` route, and haven't started working on git sync or the media endpoint yet. One step at a time.

    The main issue that's holding me back now, is that it's really hard to test if everything works as intended. I've been testing using Quill and Sparkles via my server now, but it's less than ideal to not be able to test it locally. Any advice would be appreciated 😅

    Also, micropub.rocks doesn't work for me at all, because it doesn't use PCKE apparently.

    But the clients are way easier than how I was updating my site until now, so I have enough motivation to keep at it!

    #micropub #IndieAuth #indieweb

  26. CW: indieweb tech: micropub

    I'm making some progress on my micropub endpoint based on the go.hacdias.com/indielib library.

    I can now use my endpoint for IndieAuth, and store posts on the filesystem, in the custom TOML page format I use. I'm having some trouble with the `micropub?q=config` route, and haven't started working on git sync or the media endpoint yet. One step at a time.

    The main issue that's holding me back now, is that it's really hard to test if everything works as intended. I've been testing using Quill and Sparkles via my server now, but it's less than ideal to not be able to test it locally. Any advice would be appreciated 😅

    Also, micropub.rocks doesn't work for me at all, because it doesn't use PCKE apparently.

    But the clients are way easier than how I was updating my site until now, so I have enough motivation to keep at it!

    #micropub #IndieAuth #indieweb

  27. CW: indieweb tech: micropub

    I'm making some progress on my micropub endpoint based on the go.hacdias.com/indielib library.

    I can now use my endpoint for IndieAuth, and store posts on the filesystem, in the custom TOML page format I use. I'm having some trouble with the `micropub?q=config` route, and haven't started working on git sync or the media endpoint yet. One step at a time.

    The main issue that's holding me back now, is that it's really hard to test if everything works as intended. I've been testing using Quill and Sparkles via my server now, but it's less than ideal to not be able to test it locally. Any advice would be appreciated 😅

    Also, micropub.rocks doesn't work for me at all, because it doesn't use PCKE apparently.

    But the clients are way easier than how I was updating my site until now, so I have enough motivation to keep at it!

    #micropub #IndieAuth #indieweb

  28. This also made me realise I want to give implementing #micropub and #indieauth for my website another go. It isn't the easiest of protocols, last time I gave up. But I'd love to remove some friction of posting to my site (esp. images). Too bad there isn't a ready made Go project of these protocols, that builds a static site and syncs with Git. I'll try rolling my own again using pkg.go.dev/go.hacdias.com/indi by @hacdias and see if I have better luck this time.

  29. This also made me realise I want to give implementing #micropub and #indieauth for my website another go. It isn't the easiest of protocols, last time I gave up. But I'd love to remove some friction of posting to my site (esp. images). Too bad there isn't a ready made Go project of these protocols, that builds a static site and syncs with Git. I'll try rolling my own again using pkg.go.dev/go.hacdias.com/indi by @hacdias and see if I have better luck this time.

  30. This also made me realise I want to give implementing #micropub and #indieauth for my website another go. It isn't the easiest of protocols, last time I gave up. But I'd love to remove some friction of posting to my site (esp. images). Too bad there isn't a ready made Go project of these protocols, that builds a static site and syncs with Git. I'll try rolling my own again using pkg.go.dev/go.hacdias.com/indi by @hacdias and see if I have better luck this time.

  31. This also made me realise I want to give implementing #micropub and #indieauth for my website another go. It isn't the easiest of protocols, last time I gave up. But I'd love to remove some friction of posting to my site (esp. images). Too bad there isn't a ready made Go project of these protocols, that builds a static site and syncs with Git. I'll try rolling my own again using pkg.go.dev/go.hacdias.com/indi by @hacdias and see if I have better luck this time.

  32. This also made me realise I want to give implementing #micropub and #indieauth for my website another go. It isn't the easiest of protocols, last time I gave up. But I'd love to remove some friction of posting to my site (esp. images). Too bad there isn't a ready made Go project of these protocols, that builds a static site and syncs with Git. I'll try rolling my own again using pkg.go.dev/go.hacdias.com/indi by @hacdias and see if I have better luck this time.

  33. Fixed: IndieAuth login broken for third-party apps

    After adding security headers (Content-Security-Policy) to harden the site, logging in with IndiePass and other IndieAuth clients silently failed — tapping “authorize” did nothing.

    The culprit was form-action ‘self’ in the CSP, which blocked Browsers from following the consent form’s redirect to the client’s callback URL (e.g., indiepass.app/android-callback).

    Changed to form-action ‘self’ https: to allow IndieAuth redirects to any HTTPS callback. Affects all third-party IndieAuth clients (Micropub editors, Microsub readers, etc.), not just IndiePass.

    🔗 https://rmendes.net/notes/2026/02/22/a202f

  34. Fixed: IndieAuth login broken for third-party apps

    After adding security headers (Content-Security-Policy) to harden the site, logging in with IndiePass and other IndieAuth clients silently failed — tapping “authorize” did nothing.

    The culprit was form-action ‘self’ in the CSP, which blocked Browsers from following the consent form’s redirect to the client’s callback URL (e.g., indiepass.app/android-callback).

    Changed to form-action ‘self’ https: to allow IndieAuth redirects to any HTTPS callback. Affects all third-party IndieAuth clients (Micropub editors, Microsub readers, etc.), not just IndiePass.

    🔗 https://rmendes.net/notes/2026/02/22/a202f

  35. Fixed: IndieAuth login broken for third-party apps

    After adding security headers (Content-Security-Policy) to harden the site, logging in with IndiePass and other IndieAuth clients silently failed — tapping “authorize” did nothing.

    The culprit was form-action ‘self’ in the CSP, which blocked Browsers from following the consent form’s redirect to the client’s callback URL (e.g., indiepass.app/android-callback).

    Changed to form-action ‘self’ https: to allow IndieAuth redirects to any HTTPS callback. Affects all third-party IndieAuth clients (Micropub editors, Microsub readers, etc.), not just IndiePass.

    🔗 https://rmendes.net/notes/2026/02/22/a202f

  36. Fixed: IndieAuth login broken for third-party apps

    After adding security headers (Content-Security-Policy) to harden the site, logging in with IndiePass and other IndieAuth clients silently failed — tapping “authorize” did nothing.

    The culprit was form-action ‘self’ in the CSP, which blocked Browsers from following the consent form’s redirect to the client’s callback URL (e.g., indiepass.app/android-callback).

    Changed to form-action ‘self’ https: to allow IndieAuth redirects to any HTTPS callback. Affects all third-party IndieAuth clients (Micropub editors, Microsub readers, etc.), not just IndiePass.

    🔗 https://rmendes.net/notes/2026/02/22/a202f

  37. Fixed: IndieAuth login broken for third-party apps

    After adding security headers (Content-Security-Policy) to harden the site, logging in with IndiePass and other IndieAuth clients silently failed — tapping “authorize” did nothing.

    The culprit was form-action ‘self’ in the CSP, which blocked Browsers from following the consent form’s redirect to the client’s callback URL (e.g., indiepass.app/android-callback).

    Changed to form-action ‘self’ https: to allow IndieAuth redirects to any HTTPS callback. Affects all third-party IndieAuth clients (Micropub editors, Microsub readers, etc.), not just IndiePass.

    🔗 https://rmendes.net/notes/2026/02/22/a202f

  38. Finished my December Adventure with an unfinished project, as is tradition. I'm in the process of extracting a standalone IndieAuth client atop the OAuth2 crate. Full adventure log:

    rossabaker.com/series/december

    #DecemberAdventure #IndieAuth #Rust

  39. Finished my December Adventure with an unfinished project, as is tradition. I'm in the process of extracting a standalone IndieAuth client atop the OAuth2 crate. Full adventure log:

    rossabaker.com/series/december

    #DecemberAdventure #IndieAuth #Rust

  40. Finished my December Adventure with an unfinished project, as is tradition. I'm in the process of extracting a standalone IndieAuth client atop the OAuth2 crate. Full adventure log:

    rossabaker.com/series/december

    #DecemberAdventure #IndieAuth #Rust

  41. Finished my December Adventure with an unfinished project, as is tradition. I'm in the process of extracting a standalone IndieAuth client atop the OAuth2 crate. Full adventure log:

    rossabaker.com/series/december

    #DecemberAdventure #IndieAuth #Rust

  42. Finished my December Adventure with an unfinished project, as is tradition. I'm in the process of extracting a standalone IndieAuth client atop the OAuth2 crate. Full adventure log:

    rossabaker.com/series/december

    #DecemberAdventure #IndieAuth #Rust

  43. My December Adventure detoured into an implementation of IndieAuth. I need an authenticated section to process the pending Webmentions before they're made visible to the public. Instead of maintaining my own credentials, I wanted to stay in the IndieWeb spirit and authenticate against my own website and its rel=me links. Success!

    - more on IndieAuth: indieauth.net/
    - ongoing adventure log: rossabaker.com/series/december

    #IndieAuth #Webmentions #IndieWeb #DecemberAdventure

  44. My December Adventure detoured into an implementation of IndieAuth. I need an authenticated section to process the pending Webmentions before they're made visible to the public. Instead of maintaining my own credentials, I wanted to stay in the IndieWeb spirit and authenticate against my own website and its rel=me links. Success!

    - more on IndieAuth: indieauth.net/
    - ongoing adventure log: rossabaker.com/series/december

    #IndieAuth #Webmentions #IndieWeb #DecemberAdventure

  45. My December Adventure detoured into an implementation of IndieAuth. I need an authenticated section to process the pending Webmentions before they're made visible to the public. Instead of maintaining my own credentials, I wanted to stay in the IndieWeb spirit and authenticate against my own website and its rel=me links. Success!

    - more on IndieAuth: indieauth.net/
    - ongoing adventure log: rossabaker.com/series/december

    #IndieAuth #Webmentions #IndieWeb #DecemberAdventure