nostr:npub12tyk735v52ju032qahe3k2r520jlsujaem6xr8n0ex6u7eqj0anq59vnqc Will you be opening the code to the sign-in stuff?
I've tried to get Mastodon working with Auth0 and I just couldn't get my head around how to make it work.
nostr:npub19lt4284mghqxekzm6n5njxurnxrxhqhrva2leusdsuu5ja5jeycq66qfjk Yes, of course.
You basically need to register an app at `/api/v1/apps` and use that to generate the oauth redirect url to get the token
nostr:npub12wfyg7nljr8h25apv0c2fvqd2l5dcmdymc9d3x7zdy2xtzztaysq7f8kwl Yeah, admins can disable it, its basically to prevent a single mastodon account from signing up on every pixelfed instance, with this pf admins can set the max # of sign-ins across all known & reporting pf instances!
nostr:npub12wfyg7nljr8h25apv0c2fvqd2l5dcmdymc9d3x7zdy2xtzztaysq7f8kwl It's a centralized list of webfinger ids with an incremented value, not really that big of a deal if you ask me, it's not required and only provides a benefit to admins if they opt to use it.
Btw, the oauth scope we use for this is only "read", we cannot post on your behalf or other things, and the source will prove the limited data we use from your Mastodon account (bio, username, avatar, following)
One of the main reasons it took longer than expected to ship #signInWithMastodon is due to the max limit setting.
By default, a masto user will only be able to sign-in to 3 different Pixelfed instances.
This works by a centralized api that I run, to enforce the max limits across instances with ease.
Admins will be able to set their own max limit and opt-out of it entirely, choice is good ๐
nostr:npub1qg48cy9nkrm0pkeuz7e9zrzeq2n6lnlwyn30u9zd0xe07g9qvras00augv Looking dapper AF dude!
James Bond vibes ๐ฅ
Regarding the `entities`, we transform posts based on a defined schema, then cache it (and remove/add attributes depending on if client is mastodon compatible) and finally hydrate state (liked,bookmarked,shared).
By moving the autolinking (converting plain text to html with hashtag/mention links) to the cache step we can eliminate storing it in the database, and also better handle autolink changes (mentioned user deletes account)
pixelfed.social's statuses table is 30G
I really need to ship a command to purge remote posts older than X without any interactions (they can be re-fetched via search)
I'm going to drop the `entities` column since we don't use it and it takes up a lot of space
Also considering dropping the `rendered` column, storing two copies of the same post caption (one with html markup) isn't efficient, we can autolink on demand.
๐

Sign-in with Mastodon will be quite configurable!
One challenge is to prevent abuse like a single Mastodon account using this on dozens or hundreds of Pixelfed instances.
I got that handled though, using a centralized list of masto webfingers that are incremented upon sign-in, we can enforce a max limit of uses!
Let me know your thoughts, boosts appreciated ๐ #pixelfed #signInWithMastodon

nostr:npub1x5a52cpep4kmc46uesnwe0tk3ej3tyy865kd5jvuc056t73g3v7q5akr0a Yeah good point, I will remove simplelogin domains when I get a chance!
Pixelfed ships with a list of blocked email providers, mostly consisting of anonymous providers.
This works pretty good, though I need to update the list and allow admins to define their own, as well as disable it altogether.
Pixelfed does things a bit different, pushing boundaries and setting trends when it comes to dealing with spam feels pretty cool ๐
https://github.com/pixelfed/pixelfed/blob/dev/app/Services/EmailService.php#L20
I have ADHD and have a tendency to start new things (features, refactors, new projects) when I havenโt finished others
Iโve been trying to work on this and focus on shipping instead of working on the exciting new thing
As a result, many of my new endeavours that Iโve been working on (some for 2 years now) are reaching maturity and will finally be released soon (Groups, Stories, Push Notifications, Mobile app in app stores)
What an exciting era for nostr:npub120zh308gs69j3vwgvvrzgglv58vsk3q0vef43uajyu0lc3mtldsq2p33r2 ๐
Just putting the final touches on Sign-in with Mastodon! Gunna break the release date curse and just say soonโข๏ธ
Mercy Mercy Me (The Ecology) - Ben Harper
https://www.youtube.com/watch?v=Y8Je-cBTCX8 #np #fediPlay
Well this is going to be a fun weekend, with iOS back I can ship Stories to the Android + iOS fam
LETS GOOOOOOO ๐
Twitter is threatening to sue Meta over Threads
https://www.semafor.com/article/07/06/2023/twitter-is-threatening-to-sue-meta-over-threads

What is the fediverse HOA that all these white men keep talking about?
Love the double standards, as if nobody but them can have opinions ๐
Block whoever or whatever you want, don't let these Karens try to impose their beliefs on you ๐ฅ
nostr:npub1nqp93y3l9r4cse4mpqlhuq3mjtctlujgyh8ksx8x57wvzt030epq3mw9sy nostr:npub120zh308gs69j3vwgvvrzgglv58vsk3q0vef43uajyu0lc3mtldsq2p33r2 beagle is a discovery service that uses various algorithms to recommend posts and people.
The dog breed is known for hunting and being a loyal companion, so I thought it was a fitting name!
Taking a break from the fediverse until further notice
Visualize the Anti-Meta Fedi Pact via #fediDB!
https://fedidb.org/current-events/anti-meta-fedi-pact
Special thanks to nostr:npub1856chd2t8hudtucvcm3v58l5zl36gt6rexk2yewr6vsrxxdqgggqgdvn6v for organizing this!
