@silverpill can you tell me though, is it true that there's really only one scope with most permissions on mitra oauth? I am going to be submitting some patch requests to some projects for a much-reduced oauth scope for just identifying a remote ap user, not including things like email address or other private fields.

2026-08-12T13:22:32.147996Z

silverpill@silverpill@mitra.social

⁨2⁩d

Replying to @⁨sun@shitposter.world⁩

@sun Mitra doesn't support scopes, but I can start adding them if needed.

I saw your FEP draft, by the way. Is it ready for review?

2026-08-14T20:28:03.14222Z

silverpill@silverpill@mitra.social

⁨14⁩h

Replying to @⁨silverpill@mitra.social⁩

@sun So, I think the biggest problem with this proposal is that it requires a publicly accessible HTTP server. Is there a good reason for that?

WebXDC, for example, is designed for offline first apps. I am reading WebXDC docs right now and it seems to be compatible with ActivityPub. Maybe we should work on this instead?

⁨Aug⁩ ⁨14⁩, ⁨2026⁩, ⁨20:28⁩en

2026-08-14T20:44:48.436002Z

also lnkr@lnkr

⁨14⁩h

Replying to @⁨silverpill@mitra.social⁩

@silverpill wait, what the hell, WebXDC over fedi would be (almost) perfect, I need that!
The only friction point I can think of is how are we gonna do window.webxdc.joinRealtimeChannel ? I think Delta uses Iroh for that, and, ehh, maybe, but I'm not immediately on board with that. Maybe we can just ignore it and be fine with async apps? @sun

2026-08-14T21:05:35.192906Z

silverpill@silverpill@mitra.social

⁨14⁩h

Replying to @⁨lnkr⁩

@lnkr @sun Yes, I think we can just ignore joinRealtimeChannel. It is marked as "experimental" in the docs, anyway

2026-08-15T00:21:19.259195Z

Blurry Moon@sun@shitposter.world

⁨11⁩h

Replying to @⁨silverpill@mitra.social⁩

@silverpill @lnkr every interesting webxdc on delta chat so far has used realtimechannel ini my experience.

I looked at webxdc and it's a pretty different concept from the miniapps I implemented which are closer to farcaster ones. nostr is very amenable to webxdc but ap not so much when you factor in realtime channels which basically have to be a separate transport like iroh yeah.

the proposal is definitely NOT ready yet, we're still ironing out issues on my server. I'll tell you directly when it's ready.