What's next after v3?
-
hi @julian , I believe passkeys will be the new standard for secure website/app access soon. Google has already started to implement this option several days ago. Will there be any addition to NodeBB?
Passkeys - FIDO Alliance
Payment service providers and banks are evolving service delivery to online payments from physical branches. Using Passkeys for Payments with FIDO’s open and scalable authentication standards offers a faster and easier way to secure online payments.
FIDO Alliance (fidoalliance.org)
-
@julian you would know that better, but I always thought that this will be the main way to enter a website, rather than a 2FA.
At least, this is what Apple, Google and Microsoft are trying to achieve: https://www.theverge.com/2023/5/3/23709318/google-accounts-passkey-support-password-2fa-fido-security-phishing
Here is a demo website, and I see "Sign in with a passkey" button. I believe this is what a lot of websites will use it for: https://www.passkeys.io/
-
Yes, you're right. Having the passkey used as the first and only factor would be what passkey is hoping to implement. It would necessitate some changes to the 2factor plugin, including the fact that it's no longer a second factor
It might also mean we split username and password fields ... @baris won't like that, he already doesn't like registration interstitials
-
@julian said in What's next after v3?:
Changes to topic thumbnails
Hell Yes! I'm excited about this - we love thumbnails but the functionality has always been a little limited!
Thanks for all the hard work team - I'm going to be putting 3.10 on my dev install this weekend.
-
@eeeee Hate to break it to you, but yes, jQuery is used in NodeBB. When we started NodeBB, the hard work to standardise and improve the JS ecosystem was only just beginning (or it had been in full swing for awhile, but hadn't shown any major results yet).
Remember, back in 2013, Internet Explorer was still a thing. We needed to ensure compatibility with it back then
Removing it is a little harder than expected though, it's quite ingrained in the client-side code, heh.
Its just not necessary
That may be the case for new projects, but for us it's a little different
-
We would essentially have to rewrite the frontend. It's not impossible but it is a larger undertaking, in addition to breaking any plugin that has a frontend using jQuery.
-
@julian said in What's next after v3?:
Thanks for everybody's comments regarding federation and ActivityPub. I've been steeping myself in the Fediverse for the past week and have been inspired
There is definite potential here.
- I have started a Mastodon account for NodeBB
- I started my own Mastodon server, because I obviously have nothing better to do with my free time
I think a forum variant of Mastodon would be wonderful. The one thing that seems to be missing from these "federated" options is something akin to Twitter's verification system. It seems to me that the larger the scope, the greater the need for verification.
-
@julian said in What's next after v3?:
NodeBB being a piece of software that is installable and configurable by individual admins means we've already achieved half of the formula for federation. It's theoretically possible to hook NodeBBs together and share content.
I've often said that Twitter is like shouting into the wind. Starting a forum is often like talking to an empty room. It's very possible we can take steps to change that
Flarum is also currently looking into Federation, personally I'm both for and against it, at the end of the day it should come down to whatever forum admins want to do with their forum. But if this is something that does get developed it would be nice if Flarum and NodeBB could in some way work together a bit to make sure that their implementations are compatible (at least the core of it) so that it's something other forum software could also participate in (instead of only NodeBB or only Flarum).
@julian said in What's next after v3?:
Drop jQuery
Ha ha, just kidding. Or am I?Please do, native JS has come a long way and jquery isn't really needed much anymore and it pretty much just adds to JS bloat unless your doing very specific things with it. Even if you can't completely get rid of it, maybe use one of the much lighter alternative versions of it?
@julian said in What's next after v3?:
Yes, you're right. Having the passkey used as the first and only factor would be what passkey is hoping to implement. It would necessitate some changes to the 2factor plugin, including the fact that it's no longer a second factor
I would very much like to see PassKeys come to NodeBB, I was actually just looking into how feasible it would be myself a couple weeks ago. I don't think I have the knowledge required to do anything with it at the moment, but it'd be nice to have, even better if it's something that can be used in v3.
-
@tankerkiller125 said in What's next after v3?:
Please do, native JS has come a long way and jquery isn't really needed much anymore and it pretty much just adds to JS bloat unless your doing very specific things with it. Even if you can't completely get rid of it, maybe use one of the much lighter alternative versions of it?
Whilst I agree with this in principle, it should be a phased approach, and not just a "bomb" on the next release. I, for example, do a lot in jQuery, and could easily convert all of my functions, but that's me, and others might not be ready for that just yet.
-
@phenomlab I'm also of the opinion that even if we were to remove jQuery from core, we'd see a third-party plugin within the week to add it back
I'm not lying when I say that probably 95% of the DOM manipulation code in NodeBB uses a jQuery function. We cut our teeth on it and while we're more than adept with vanilla js now, it's going to be a rather tough transition.
-
@tankerkiller125 to my knowledge, Daniël Klabbers (luceos?) is the main point of contact on the ActivityPub front for Flarum.
His interaction on Mastodon is limited, and the only commitment I've seen from him is that it is on their milestone list but that work (or even initial R&D) has not been started.
There are three forum providers pursuing ActivityPub integration. We're one, Flarum is another, and Discourse is the third.
I've said it there and I'll say it here. NodeBB will follow the ActivityPub spec and, if possible, will be tested against both Flarum and Discourse integrations because doing so makes federated forums a force to be reckoned with. Broken integrations erode trust in federation.
Now whether their implementations can be compatible, I couldn't say.
Daniël Klabbers (@[email protected])
@[email protected] @[email protected] @[email protected] @nodebb @[email protected] @[email protected] We pushed fediverse integration into our 2.0 roadmap which has received an NLnet grant as well, see https://discuss.flarum.org/d/32812-the-future-of-flarum-in-2023-balancing-open-source-and-success
Fosstodon (fosstodon.org)
Daniël Klabbers (@[email protected])
@[email protected] @[email protected] @[email protected] @[email protected] @nodebb @[email protected] @[email protected] I think it would make sense to follow the FEPs standards as much as possible. But as we haven't even entered an implementation phase, it's hard to pin us on a decision.
Fosstodon (fosstodon.org)
I'm more hesitant about the FEP stuff. Holding back my opinions on that for now.
-
@julian Ah I was not aware of his (or your) comments on Federation in Mastodon. Pretty much everything I know about it is from the roadmap. I haven't even seen much on it on the Flarum discord or information behind the scenes (I should have disclosed that I'm a former Flarum core dev, and still sometimes maintain their VMs)
-
@julian said in What's next after v3?:
I'm not lying when I say that probably 95% of the DOM manipulation code in NodeBB uses a jQuery function. We cut our teeth on it and while we're more than adept with vanilla js now, it's going to be a rather tough transition.
Maybe as part of a phased approach it would be worth looking into
https://github.com/fabiospampinato/cash
It would drop legacy browser support immediately (although I'm not sure that's really a problem) but also have the benefits of being a drop in replacement for jQuery so for the most part people probably wouldn't need to update their extensions much if at all. While still being much smaller than jQuery.
-
As someone who has experience with a ton of forums(Discourse, Xenforo, vBulletin, Flarum) and other community apps like Discord, Slack etc, I believe the future of forums look something like https://circle.so.
I believe NodeBB would benefit a lot from learning from them! The idea is to not limit your user to one type of interaction but a modular system that allows one to communicate how they like and to adapt to all sorts of use cases where the sky is the limit(made easier with UI-based configuration and the option for custom HTML/JS/CSS when needed). For example, one wanting to make a cooking community would have a gallery view page for recipes that open lightboxes into the recipes, if they have a job board, one could use the gallery view or a minimal list view(no post counts etc), if they want real-time chat to talk about anything related to food, there's that option too. Feed view being another. Members-only pages where you have to login and many more.
Facebook does this quite well. By this, I mean the option to turn your Page into a multi-functional space where people could do more than just chat.
I'm aware that many of these features exist in the form of plugins, sometimes poorly coded or barely maintained. I'm thinking of a more built-in approach that is designed with so much modularity that it would not require plugins for the simplest things yet still being easy for the dev team to handle. NodeBB 3 and Harmony is awesome, and is probably my favourite of all forum software even compared to Discourse and Flarum but if you could push it in this direction I'm suggesting, I think it can be the leading software.
One good example of circle.so being well used is https://www.framer.community
If forums don't want to be made obsolete by software like Discord, I think it's the way to go.
Cheers!
-
I think a Circle, Bettermode (ex Tribe) this is a primitive plagiarism of the open source Forem project (https://dev.to) and it seems to me that this is not the best idea to overload the forum (along with the server) with unnecessary functions like (video conferences, calls, streams, coupons).
The forum involves discussion, and the projects above are more focused on the article/blog format.
I think you can extend the functionality of the Harmony theme by adding an "articles mode" that can be enabled in your account settings or directly on the recent/category pages.
In this mode, show topics in the form of beautiful cards (automatically add a preview from the first image in the topic, show part of the text from the first post for a short description of the article (topic), rating and author's avatar/reputation... like this:
оr add this option on category settings in ACP, and users can view topics in "articles mode" only in Blog category, so if you want create a disscusion use other categories, if you want create a beauty article like on blog platform, use a Blog category.
-
@brazzerstop said in What's next after v3?:
...it seems to me that this is not the best idea to overload the forum (along with the server) with unnecessary functions like (video conferences, calls, streams, coupons).
Yes: "Jack of all trades, master of none."
It almost seems like a confusion of a website with the web itself. I don't want one website to do every single thing. I go to different websites for different purposes. If a website has no specific purpose, but tries to cater to all purposes, then it effectively ceases to have purpose and direction.