https://beanbag.technicalissues.us/tags/powerpress/Recent content in Powerpress on The Comfy SeatHugoen-usWed, 12 Jul 2023 21:45:00 -0400https://beanbag.technicalissues.us/powerpress-authorization-flow/Wed, 12 Jul 2023 21:45:00 -0400https://beanbag.technicalissues.us/powerpress-authorization-flow/<p>There’s a proposal in the podcast namespace for an authorization tag and I think <a href="https://wordpress.org/plugins/powerpress/">PowerPress</a>, an existing <a href="https://wordpress.org/">WordPress</a> plugin that facilitates podcast hosting, can implement the same authorization flow as a podcast hosting provider. The proposed authorization flow is described to work something like this when a service wants to confirm a user owns a podcast:</p> <ol> <li>Service reads an authorization url from the podcast’s rss feed</li> <li>Service generates a onetime token</li> <li>Service calls authorization url with token &amp; rss feed as parameters</li> <li>Website hosting authorization url verifies it’s the home / host of the feed</li> <li>Website has user log in</li> <li>Website presents user a confirmation page</li> <li>If user confirms, website inserts the token into the <code>&lt;podcast:txt&gt;</code> tag</li> <li>Website publishes updated rss feed</li> <li>If website supports it, it sends a podping to notify watchers of the updated feed</li> <li>Website sends a success response if the feed is updated and a failure response otherwise</li> </ol> <p>User interaction is done at this point. The service still needs to see the updated feed, but that is beyond the bits I want to talk about here.</p>