In one session of #FediForum, I said that I really needed "a map" of the tools and communities for building apps on the Fediverse.To follow up on that, I've posted a first draft of what this looks like to me.If you know more about the Fediverse than me...

Andy Piper

@benpate this is *great*, care to submit some to the #fedidevs site? I might have to borrow some of your list

Ben Pate 🤘🏻

@andypiper Yes, this list belongs on FediDevs, not on my website, so please take and use it if you want.

How would I post it to FediDevs? Can I just make a PR?

Andy Piper

@benpate yes, although we probably need to do some arranging of the index - it’s fairly limited in content so far.

Ben Pate 🤘🏻

@andypiper Okay. I'll hold up for now. No need to rock the boat if it's already making waves. But I'm happy to contribute any way I can ~ just let me know the best way to do so

Jesse Karmani

@benpate as I was researching backend options for frequency, I came across a nice go photo library project: https://www.photoprism.app/

They even have an issue open for activitypub integration: https://github.com/photoprism/photoprism/issues/316

It's not quite a fit for what I'm trying to do with frequency, but I thought I'd pass it along as a potential go project you could try to integrate with

Ben Pate 🤘🏻

@jesseplusplus Thanks! I’m looking into it now

Jupiter Rowland

@Ben Pate

Maybe a few things about OpenWebAuth to make it easier for devs to support it early on if they decide so:

The official spec in the streams repository
Copy of draft-cavage-http-signatures-09 in the streams repository which may be a bit stale now, but it's what the OpenWebAuth spec references
Magic Sign On, a website for OpenWebAuth

Ben Pate 🤘🏻

@jupiter_rowland

Hey Jupiter, thank you for this suggestion. Can you give me some guidance on this?

I put OpenWebAuth on my research list a while back, then stumbled into a discussion/critique of it that said it: a) duplicated OpenID Connect too much, and b) could be used maliciously because it didn't require confirmation from the user.

The discussion didn't have a resolution, so I don't know how this ended up.

Are there other resources that help resolve this contention?

Jupiter Rowland

@Ben Pate

What I've listed above was all I could find that looked useful for now.

Ben Pate 🤘🏻

@jupiter_rowland Gotcha. Thanks. I'm going to keep watching this, because it seems like a great idea.

And remember: This just started as me publishing the URLs I know about. I'm not the official gatekeeper of anything.

But I do want to be careful about linking to APIs that might expose users/sites to attack.

I'm not saying that OpenWebAuth does, just that I couldn't find any resolution to the issues other devs raised. I'm hoping to learn more about this one as the FEP progresses.