Coming soon to #flohmarkt: FediAuth for any kind of #ActivityPub users. Simply send a DM to a flohmarkt instance you want to login to, and you will be able to create a user and upload small/classified ads.
Post
Coming soon to #flohmarkt: FediAuth for any kind of #ActivityPub users. Simply send a DM to a flohmarkt instance you want to login to, and you will be able to create a user and upload small/classified ads.
Works via any kind of platform, and if it has a “share” URL we can even generate a link for you, so you click two or three times and are logged in.
Design not final of course, this is a mid-development snapshot 😊 (also it’s in debug mode)
Many thanks to @WPalant for the original idea & the list of share links
https://palant.info/2023/10/19/implementing-a-share-on-mastodon-button-for-a-blog/
The original idea was to send a DM with the PIN like how Owncast does it, but after some deliberation I saw no way of implementing (and rate-limiting) this without turning any flohmarkt instance into a possible DM spam-relay.
So now we decided to display a PIN that has to be sent *to* the instance to log in.
I think the general rule here is: Never send any message to an Activitypub user that was not initiated by exactly that user (signed with the private key and all).
That is: they contact you first, you only ever reply.
A space for Bonfire maintainers and contributors to communicate