Conversation

godspeed you! big animal niss niss niss

every time i want to use someone else’s forĝejo (not super often, admittedly, but not never) i think “maybe i should write my own openid server”

it used to be extremely simple when it was just a livejournal thing. im sure it’s still just like that now

1
0
0

its not looking good gamers

2
0
0

@niss yeah, there’s a reason there’s, like, two usable open source oidc servers

one is keycloak (Java, doesn’t fix security issues for months)

the other is authentik (so container pilled it doesn’t work in any time zone except UTC)

1
0
0

@ChlorideCull @niss > so container pilled it doesn’t work in any time zone except UTC
tbf if your server is in anything except utc you are probably holding it wrong

2
0
0

@ChlorideCull @niss then again it’s also built like shit if it uses local time instead of utc…

0
0
1

@charlotte @niss I like it when my log entries have timestamps in wall time

1
0
0

@ChlorideCull @niss sounds like an issue with whatever you use to show logs tbh

utc is for computers, local time for display and very specific types of scheduling

1
0
0

@charlotte @niss I mean, display is what all locale settings, including timezone, is for

0
0
1

in the original version the response of the challenge/response was something like md5(md5(password)+challenge). and that was kind of it

one extreme to the other

1
0
0

i think i am probably not going to do this after all.

1
0
0

@niss to be fair to the spec, it’s fairly simple to implement (you don’t even need to keep state on the server, the client has to pass it around) as long as you don’t have to implement JWTs, and some of the optional parts

0
0
0