SamWas there a competing spec to Easy User Onboarding that din't require the round trip with the server and just had tokens generated in a specific format so that you could just share the key and have some other entity sign onboarding tokens, or did I just imagine that?
MattJThen how does the account get created?
SamWhen the client scans the barcode and sends the token to the server the account gets created
SamIt just let other entities sign tokens I thought so that they didn't have to have any connection to the server but the server could verify that something with the private key said "this user can create an account"
SamMaybe this was a HipChat provisioning thing or just something I thought about doing but never did and I got it mixed up with Easy User Onboarding at some point.
MattJProsody can technically do that kind of thing, it's how I originally intended it to work... but I ended up with an API to request tokens, it's just easier for a bunch of reasons
MattJI was considering a service to which operators could outsource spam registration filtering
MattJFor an example use-case
MattJSo something like joinjabber.org would be a trusted entity able to generate invite tokens for servers on its list
SamI was wondering if it made sense to just add a specific (optional) token format to Easy User Onboarding for the registration flow, but this document is a *lot* rougher than I remembered. Tons of TODOs. I really wish we wouldn't accept things like this until they're actually sort of flushed out.
SamMaybe it's not worth it and I should just add something to IBR2 eventually if that ever gets adopted.
SamOh wait, there's also Pre-Authenticated In-Band Registration. I forgot that was a separate thing. No idea what the difference is, guess I need to re-read this one too.
MattJI'm with you on not accepting documents with significant TODOs
MattJYou need to look at the previous revision of that XEP though
MattJThings got complicated :)
MattJWe published a new revision with some gaps closed, but didn't get author approval so it was reverted
MattJWe have consensus on how to move forward but I don't think that's submitted yet