1. two cool things in lemoncurry 1.8

    i decided to bump the minor version because there are two fairly big improvements in lemoncurry 1.8!

    first up, lemoncurry does pagination!! 📄

    • every entry feed page now automatically paginates, ten entries to a page, which is good because i’ve now written thirteen entries here. which actually is.......... not a lot, i guess? but it’d have gotten real slow eventually if it kept on having to load every single entry all the time 😉
    • all the paginated feeds use rel="next" and rel="prev" appropriately, so it’s still very easy for programs to navigate. this is very good for indieweb feed readers, like woodwind, as well as for sufficiently advanced screen readers?

    the other exciting thing is improved micropub support! there are two major improvements that make lemoncurry more compliant with the micropub spec and therefore more compatible with a variety of micropub clients

    • my previous implementation only supported formencoded requests, which is the default format that all micropub servers are required to handle. however, micropub also defines a json request format, which happens to be more powerful in various ways, so now i support that too!
    • to authorise any micropub request, you have to provide a token - i supported one way of doing this, which is setting the Authorization http header, but the spec also allows the token to be passed as a query or form parameter, so now i support that too ✨

    yay!!

    but what’s next? well, the infrastructure changes i made while implementing those two improvements will make it way easier to implement the other aspects of micropub i haven’t yet, too:

    • you’re supposed to verify the oauth scopes attached to the client’s micropub token? that’s stuff like “yes, this particular token has been granted permission to create new entries”. you’ve probably seen the little prompts while oauthing with sites before, when you give your third-party twitter clients permission to post tweets and stuff like that. my previous token auth code made scope verification pretty annoying to do, but it should be as simple as a cute little check like this now?

      if 'create' not in token:
        return deny('you can't create new entries!!')
      
    • the micropub spec allows you to update existing entries as well as make new ones! however, it only allows updates to be provided in the json request format, not the formencoded request format. so of course that wasn’t possible when i only supported formencoded requests, but it should be easy enough to do now 🐱 yay!

    • the auth logic was pretty much hardcoded into the POST /micropub view handler before, which is bad because you actually need to use it in a few other places too - i had duplicate auth logic in GET /auth/token, since its whole job is verifying that the token is valid and will be accepted by POST /micropub? there’s also additional endpoints, like GET /micropub, that i haven’t implemented yet but that will need to reuse the same logic too

    pretty rad?? ğŸŽ

  2. lemoncurry 1.7 - introducing cats!

    that’s right, the big new thing here is support for cats - or “categories”, as the microformats2 spec calls them because it isn’t nearly as much a furry as i am? ridiculous

    and yeah, they’re basically like categories or tags. each entry can have zero or more cats assigned, so i can organise them better! this one has several to show off how they look and work :3

    i’ve also started on getting replies, likes, and reposts to work, but i’m not happy with those just yet so i haven’t released them in 1.7 :o but they’ll be here Soon!

  3. lemoncurry 1.5.0: now with indieauth!

    yep, lemoncurry 1.5 can act as its own indieauth-powered authorisation server, which means i can log into various indieweb sites as 00dani.me! cool beans???

    since you can’t log in as me (i hope!), you can’t actually see how the new indieauth support works, so i’ve taken a few screenshots to give you an idea! here’s me logging into two prominent indieauth-capable sites:

    authenticating with IndieAuth.com

    authenticating with Telegraph

    the cute little ☑ and ? icons indicate whether the client has been verified!! indieauth uses a really simple approach to establish client trust, which is that the client id (for example, https://indieauth.com) should contain a publicly-visible reference to its redirect uri (for example, https://indieauth.com/auth/indieauth/redirect). then, indieauth servers can check whether that reference is present, which proves the redirect uri really “goes with” that client id

    unfortunately doing this is still an experimental feature? so i’ve made verification optional and displayed cute little icons, rather than just rejecting unverified clients. the icons also have cute tooltips to explain what they mean:

    indieauth.com is verified

    telegraph.p3k.io is not verified

    adorable!!

  4. what's new in lemoncurry 1.4.0??

    yes, it’s here! gasp 😮

    here’s what’s been added

    • the markdown rendering is a lot smarter now: rather than having the markdown processor escape html, i’m using a pipeline of markdown and bleach, which makes it a lot easier to use a little bit of Harmless html here and there in my content
    • it also does “smart” quotes and other cute stuff like that now so that’s neat too
    • code now looks way nicer, and i made a few other little style tweaks
    • i started implementing indieauth support! it’s not finished yet but it’s gonna be rad 🐱
    • i introduced simple support for host-meta and webfinger - they’re basically ways to discover machine-parseable information from a website, like microformats2 but less nice?? everything is less nice than microformats2
    • speaking of less nice than microformats2, https://schema.org/BreadcrumbList and https://schema.org/Person objects are generated now! this is good because google can display a little more info about the site by reading them, but bad because the same info is already on the pages thanks to microformats2

    yeah!

  5. rise from the ashes

    (yes that was a phoenix wright reference)

    status update: lebd is essentially abandoned now, mostly because it was way too difficult to achieve basic things i wanted in it. instead, 00dani.me is now running on a django codebase i’ve dubbed lemoncurry

    (yes that was a monty python reference)

    lemoncurry’s only seen a few days of development (i started on monday) but already it can basically do everything that lebd could:

    • my h-card’s nicely rendered on the home page, with rel="me" links and all that jazz
    • i can write notes and articles (this is an article) using markdown syntax, and they’re rendered properly as an h-feed with nested h-entry elements
    • syndications are trackable - it’s manual, like it was with lebd, but whatevs

    and a few things that lebd couldn’t:

    • there’s an actual admin panel, which is where i’m typing this, rather than having to insert stuff into the database manually. django has tools to automatically generate the site admin, and i’m using them. pretty rad! in practice i’ll probably end up posting content over micropub anyway but it’s nice to have a site admin
    • two-factor auth!!!! yessssss
    • the html looks a lot nicer! it’s still not perfect, and there’s some messy indentation, but it’s a lot friendlier than it was and i’m pretty happy with it

    so, um, that’s cool?? neat