XSF Discussion - 2020-11-15

https://share.zapb.de/0e13a6d6e89e55a5708adf142c700a6b2c084b73/EXp7m5I4zMnUVV5jNHjExgpvbqPNGulS7G1JYZty/xep389_invite_and_recovery.webm

XEP-389 at work

marc, +1`

not really related, but Dino(?) uses the term "XMPP ID"?

AFAIK XMPP ID is the term that should be used according to modern XMPP

Dino doesn’t, I went through all the strings recently. :)

We use XMPP Address

But i guess XMPP ID would also be fine

looks good marc the password reset makes me bit uneasy

setting new password without typing it a second time or at least have the possibility to not hide it, is a game of luck

but this is a client UI thing, not related to 389

Oh wait, that XMPP ID comes from the dataform

then ID is probably good

> setting new password without typing it a second time or at least have the possibility to not hide it, is a game of luck To hide it?

because something like Address needs to be translated

and not all servers support translation

marc, "to *not* hide" it

or better "to show" :)

And it's not about changing password but recovering, you don't know your password in that case

marc, in your video you set a new password

what if i mistype my new password, i have to reset it all again

You mean something like two pw fields that check if both are equal?

marc, the correct term for the dataform would be JID.

Clients can then translate it how they want.

Changing JID in the protocols would be an extremely bad idea.

anonbox offers instant accounts?

Link Mauve, it's all about 389 not about "I did a perfect UI"

Isn't that an invitation for spammers?

arc, you cannot send email but receive

arne

ah ok, thanks for informing

Spammers often need to receive emails but not send, for instance to create an account on most websites.

Link Mauve, I'm not a spammer and I need to create account on some websites ;)

+s

Link Mauve, lovetox I did the token and email recovery implementation to spot problems of my implementation and the spec

That’s cool!

Turns out that once you have the basic 389 implementation, extension are quite easy to implement

marc, no, modern xmpp states bascically to use "XMPP address" → https://docs.modernxmpp.org/meetings/2019-01-brussels/#naming-things

"XMPP ID" would add a third term for the same thingy, we probably want to avoid that

At the moment everything is done via dataforms, for some use cases it would be beneficial to have some dedicated challenges defined

flow, as I said, forget about the UI ;)

But TBH I find it not too bad :)

marc: good work!

marc, if the UI is all they complain about, it’s probably OK ;)

UI is the last thing (floss) devs complain about ;D

I complain about UI. Also about UX.

I had to 🤐 to not complain about having to enter the JID twice and about the visible password 😉

Ge0rG, thanks

I also consider UI/UX as important

but that was not the main exercise here

Ge0rG, yes, the reason is that the ui renders all data form challenges directly

in the main version I would check if the challenge is for the jid and directly send it to the server and do not render it

also at the moment I used data forms only, as said before in some cases a dedicated challenge type would be beneficial

But it took me like 20 minutes to build an invite token challenge on top of the existing code

Yeah, specifying the exact form fields or using a dedicated challenge should allow the client to make proper UI

Ge0rG, exactly

marc, IIRC data forms provide a field type for passwords

flow, yes, they do. what's the context?

marc, not sure, it sounded like you didn't knew about that

flow: I do but I didn't care for this poc

flow: btw, do you have a good howto for smack on desktop?

I failed with all the Java Gradle shit

marc: happy to help, not sure which issues you ran into. gradle is smack's build system, but you don't need to use it in order to consume smack. maybe ask in smack@conference.igniterealtime.org ✏

Gradle of filth?

Gah, I opened XEP-0060 to a random section and found something I've never heard of before. Why?

Zash I actually saw that exact message opening 0060 randomly last time I checked

Is it some kind of malediction ?