search

snarfed / bridgy-fed

🌉 A bridge between decentralized social network protocols
https://fed.brid.gy
Creative Commons Zero v1.0 Universal
634 stars 31 forks source link

web form to invite non-bridged users #1421

Open FurblandChannel opened 1 week ago

FurblandChannel commented 1 week ago

While the current invite system works, I think it’s a bit cumbersome. It would be nice to have it going alongside some sort of web-based form where you could input a username to send an invite to. (just a thought).

snarfed commented 1 week ago

Hmm! Interesting to hear you think that'd be easier than the current DM approach. Web form was actually our first idea, way back in Feb; background in https://github.com/snarfed/bridgy-fed/issues/880 (which was renamed) and https://github.com/snarfed/bridgy-fed/issues/880#issuecomment-2082865362 .

The catch is that I want to include the requesting user in the DM, and I want to authenticate them to prevent spoofing. DMs get me that for free, but for a web form, I'd need OAuth or something similar, which makes it a better project. Plus, OAuth is non-standard (ie off protocol) in both ATProto and ActivityPub, which makes it more awkward.

FurblandChannel commented 1 week ago

Hmm! Interesting to hear you think that'd be easier than the current DM approach. Web form was actually our first idea, way back in Feb; background in #880 (which was renamed) and #880 (comment) .

The catch is that I want to include the requesting user in the DM, and I want to authenticate them to prevent spoofing. DMs get me that for free, but for a web form, I'd need OAuth or something similar, which makes it a better project. Plus, OAuth is non-standard (ie off protocol) in both ATProto and ActivityPub, which makes it more awkward.

I know this is getting a bit outlandish, but perhaps accounts could be made and then linked to fedi accounts by means of the bot messaging you a code that you have to reproduce(?)

snarfed commented 1 week ago

Yeah that is pretty outlandish. 😆 DM is working pretty well so far. If I do this too, I expect it'd be a simple web form with OAuth.