Moving My Sensor Network onto Manifold
I moved my working LoRaWAN sensor network onto the new Manifold framework and pointed Home Assistant at it as the interface. The port went smoothly until the OAuth protection on the mesh blocked the inbound webhooks Helium uses to deliver readings. The fix was to let a mesh owner scope access channel by channel, and the pico engine now supports it.
Continue reading {Moving My Sensor Network onto Manifold}
Using Home Assistant with Manifold
Manifold is evolving into a proper framework for building meshes of picos, and Home Assistant gives those meshes an interface. A new Home Assistant integration proves out three pieces at once: an OAuth workflow on the pico-engine that lets outside software into the mesh on the owner's terms, a mature interface rather than a custom one, and a pattern that lets specialized communities extend the platform.
Continue reading {Using Home Assistant with Manifold}
Identity for the Pico Engine
Version 1.5 of the Pico Engine finally brings identity into the engine itself: passkeys for humans, and OAuth for external apps and webhooks. Here's the shape of the design, why identity is really three problems and not one, and why I shipped the human and third-party layers before the pico-to-pico layer.
Continue reading {Identity for the Pico Engine}
OAuth and Fine-grained Access Control
If you're building an application that allows sharing among its users of whatever resources they build, then you need the fine-grained permissioning that a policy-based access control system provides.
Continue reading {OAuth and Fine-grained Access Control}
Fixing Web Login
Like the "close" buttons for elevator doors, "keep me logged in" options on web-site authentication screens feel more like a placebo than something that actually works. Getting rid of passwords will mean we need to authenticate less often, or maybe just don't mind as much when we do.
Continue reading {Fixing Web Login}
API Management and Microservices
Microservices need the advantages of API management just as much as externally facing APIs do.
Continue reading {API Management and Microservices}
CloudOS Services
I took the time recently to update our description of CloudOS services. This is the core of the Kynetx personal cloud platform.
Continue reading {CloudOS Services}
Using Dropbox and OAuth 1.0a in KRL
Here's a recipe for accessing Dropbox and using OAuth 1.0a in KRL.
Continue reading {Using Dropbox and OAuth 1.0a in KRL}
Twitter and the OAuthalypse: A RESTful Misfire
Yesterday was the OAuthalypse--the day when Twitter stopped accepting HTTP Basic authorizations on theis API. I had a few apps break--like almost everything I've done with Twitter. To get them back working I'll have to spend some time on each moving them over to OAuth. For some that won't be hard--they're already using a library that supports OAuth. For others it will be more work. All of them are single user apps (like the UtahPolitics retweeter and so will use the OAuth single token pattern. The reason for moving to OAuth is so that apps won't need to ask
Continue reading {Twitter and the OAuthalypse: A RESTful Misfire}
Redirectionless OAuth Credentials Exchange
Image via CrunchBase Am I missing something here? Twitter is working with select partners to test what is variously being called OAuth delegation or browserless OAuth credentials exchange method (not sure why browserless since it's not about the browser, it's about the redirection). The bottom line is that in an effort to be more user friendly, this removes the redirection to the Twitter site where you authoirize access by letting the third-party site (the site being delegated to) collect and then pass along the user's username and password to get the OAuth credentials. Abraham Williams captured the POST headers
Continue reading {Redirectionless OAuth Credentials Exchange}
Using OAuth to Access Twitter from KRL
The latest build (Build 391) of the Kynetx Rule Language (KRL) includes support for accessing Twitter data intrinsically within the language. Integrating interesting data with KRL is an important part of what makes the language so useful for building cross-site applications that mash-up data and user interactions. But what's really interesting about this release is that we're using OAuth to access the Twitter API and have built primitives into the language for dealing with the Twitter OAuth interaction to save developers from doing it. Not only are we making it easy for developers to write apps that use Twitter,
Continue reading {Using OAuth to Access Twitter from KRL}





