Kind replies

 Reply

Sorry, I wasn't clear. In JSONWebKeySetTest we're reaching out to a real set of endpoints.

However, I can't seem to find a public OAuth2 server that supports RFC8414 to write a test.

I was thinking of using something like Wiremock to create a fake server so I can stub it out, and wondered if you'd be happy with that as a change to the existing tests in JSONWebKeySetTest?

 Reply

Yeah definitely fair! I know exactly what you mean - and I'm generally going for low hanging fruit 😅

 Reply

I've had it fed back to me that sometimes the way I come across isn't great - so yeah definitely friendly nudge - but it someone keeps doing it after many attempts to educate them, it also kinda feels like they're actively deciding not to be more inclusive? It's a difficult one, but "I'm used to saying it" goes only so far before being lazy, ignorant, or actively harmful

 Reply

I'm known at work for championing inclusive language, and I call it out regardless of how person saying it identifies. Regardless of how the folks in the group feel at the time, it continues people using it and feeling that its OK. Those people will then use it outside of that circle, and they will inevitably make someone feel unwelcome. I feel its one of those things that, although can be a pain to rewire our brains, does make a difference, and trying to move to a more inclusive place to be is a great end goal

 Reply

Yes that's correct - if you wanted to continue using your primary identity URL, you'd need to update <meta> tags / Link HTTP headers.

For that reason, and to reduce risk of accidentally pushing something to my live site, when testing my staging infrastructure, I chose a separate identity, www.staging.jvt.me which simply hosts <meta> links to my staging server.

 Reply

Riz I am so sorry to hear that. Sending love to you all, let us know if there's literally anything we can do to help 🤗

 Reply

If you go the personal website route (which I'd recommend) there's https://brid.gy which let's you tweet from your website so you can still reach your following, as well as ie via RSS

 Reply

I don't think so but https://github.com/forgefed/forgefed is a standard that's being worked on to make it possible to federated across providers for this reason

 Reply

I, a Nottingham based software engineer, received a random email about it at work, so maybe they're trying to make the rest of the country aware first? 🤷🏽‍♂️

 Reply

I've not used them before but I've heard great things about @LyricalHost

 Reply

I don't trust (and can't use) jwt.io for anything I do at work, but I've got https://www.jvt.me/posts/2019/06/13/pretty-printing-jwt-openssl/ and https://www.jvt.me/posts/2018/08/31/pretty-printing-jwt-ruby/ as solutions you can run locally and have confidence that your secret tokens aren't being leaked anywhere!