Re: ReCaptcha integration in an KDE application
El sáb., 7 de nov. de 2020 a la(s) 18:58, Carl Schwan (c...@carlschwan.eu) escribió: > > Le samedi, novembre 7, 2020 10:46 PM, Nicolás Alvarez > a écrit : > > > El sáb., 7 de nov. de 2020 a la(s) 18:22, Carl Schwan > > (c...@carlschwan.eu) escribió: > > > > > Hello folks, > > > Tobias and I are developing a KDE matrix client using Kirigami > > > and other KDE frameworks called NeoChat. This is a fork of another > > > QML and now unmaintained Matrix client named Spectral. > > > Tobias is currently implementing the account registration API > > > and we found out that even if it isn't mandatory in the matrix > > > spec, it is required to add ReCaptcha for connecting to most > > > of the Matrix server (including kde.org, matrix.org and other > > > major matrix servers). > > > From a technical point of view, this would be quite painful to > > > implement (adding a dependency to QtWebEngine) but most > > > importantly this would require adding integration into a service > > > that is not privacy-friendly, proprietary and monopolist. This > > > is something that we think goes against the value of KDE. But at > > > the same time, making it possible to register an account directly > > > from NeoChat is something that is quite important in the user > > > experience. > > > So my questions to the community would be to know if there are > > > already some precedent of KDE apps adding supports for ReCaptcha > > > and if this is a good idea to support it? > > > Thanks in advance for your answers, > > > Cheers, > > > Carl and Tobias > > > > Does Matrix really require "recaptcha"? I thought it had a protocol > > for "whatever login/security mechanism the homeserver gives you, as a > > webpage link". > > Basically from that, I read in this GitHub issue[1] is that recaptcha is > not mendatory but it is the only service supported by synapse. Making > all the big matrix servers require to talk with recaptcha to create new > accounts. > > This is not about login (that works fine with NeoChat) but more about > account registration. > > [1]: https://github.com/matrix-org/matrix-doc/issues/1281 > > Well that's just absurd. The spec doesn't even say *how* you're supposed to implement such a thing in a client. I'm not even sure if this use case is supported/allowed by Google. -- Nicolás
Re: ReCaptcha integration in an KDE application
If that's the case, tbh, I wouldn't bother with adding that in there. That's a lot dependency-wise just for 7 seconds of behavior. I understand the need to keep registration seamless but I do think that even providing a note explaining why one would have to do it in a Web browser (and perhaps use 'complaints' to measure if people want it there from jump) could help. Perfect angle for KDE Telemetry to come into play! On Sat, Nov 7, 2020, at 13:58, Carl Schwan wrote: > Le samedi, novembre 7, 2020 10:46 PM, Nicolás Alvarez > a écrit : > > > El sáb., 7 de nov. de 2020 a la(s) 18:22, Carl Schwan > > (c...@carlschwan.eu) escribió: > > > > > Hello folks, > > > Tobias and I are developing a KDE matrix client using Kirigami > > > and other KDE frameworks called NeoChat. This is a fork of another > > > QML and now unmaintained Matrix client named Spectral. > > > Tobias is currently implementing the account registration API > > > and we found out that even if it isn't mandatory in the matrix > > > spec, it is required to add ReCaptcha for connecting to most > > > of the Matrix server (including kde.org, matrix.org and other > > > major matrix servers). > > > From a technical point of view, this would be quite painful to > > > implement (adding a dependency to QtWebEngine) but most > > > importantly this would require adding integration into a service > > > that is not privacy-friendly, proprietary and monopolist. This > > > is something that we think goes against the value of KDE. But at > > > the same time, making it possible to register an account directly > > > from NeoChat is something that is quite important in the user > > > experience. > > > So my questions to the community would be to know if there are > > > already some precedent of KDE apps adding supports for ReCaptcha > > > and if this is a good idea to support it? > > > Thanks in advance for your answers, > > > Cheers, > > > Carl and Tobias > > > > Does Matrix really require "recaptcha"? I thought it had a protocol > > for "whatever login/security mechanism the homeserver gives you, as a > > webpage link". > > Basically from that, I read in this GitHub issue[1] is that recaptcha is > not mendatory but it is the only service supported by synapse. Making > all the big matrix servers require to talk with recaptcha to create new > accounts. > > This is not about login (that works fine with NeoChat) but more about > account registration. > > [1]: https://github.com/matrix-org/matrix-doc/issues/1281 > > > > --- > > > > Nicolás > > >
Re: ReCaptcha integration in an KDE application
Le samedi, novembre 7, 2020 10:46 PM, Nicolás Alvarez a écrit : > El sáb., 7 de nov. de 2020 a la(s) 18:22, Carl Schwan > (c...@carlschwan.eu) escribió: > > > Hello folks, > > Tobias and I are developing a KDE matrix client using Kirigami > > and other KDE frameworks called NeoChat. This is a fork of another > > QML and now unmaintained Matrix client named Spectral. > > Tobias is currently implementing the account registration API > > and we found out that even if it isn't mandatory in the matrix > > spec, it is required to add ReCaptcha for connecting to most > > of the Matrix server (including kde.org, matrix.org and other > > major matrix servers). > > From a technical point of view, this would be quite painful to > > implement (adding a dependency to QtWebEngine) but most > > importantly this would require adding integration into a service > > that is not privacy-friendly, proprietary and monopolist. This > > is something that we think goes against the value of KDE. But at > > the same time, making it possible to register an account directly > > from NeoChat is something that is quite important in the user > > experience. > > So my questions to the community would be to know if there are > > already some precedent of KDE apps adding supports for ReCaptcha > > and if this is a good idea to support it? > > Thanks in advance for your answers, > > Cheers, > > Carl and Tobias > > Does Matrix really require "recaptcha"? I thought it had a protocol > for "whatever login/security mechanism the homeserver gives you, as a > webpage link". Basically from that, I read in this GitHub issue[1] is that recaptcha is not mendatory but it is the only service supported by synapse. Making all the big matrix servers require to talk with recaptcha to create new accounts. This is not about login (that works fine with NeoChat) but more about account registration. [1]: https://github.com/matrix-org/matrix-doc/issues/1281 > > --- > > Nicolás
Re: ReCaptcha integration in an KDE application
Yeah, I didn't realize most servers require this. I'm guessing that this is part of the OAuth2 flow? If so, it's fine to kick it to the system web browser and add a URL listener (be it a small Web server locally with one endpoint or registering a URL handler to use as the callback URL). This bit of OAuth2 solutions is something I'm familiar with so I can pair if needed On Sat, Nov 7, 2020, at 13:46, Nicolás Alvarez wrote: > El sáb., 7 de nov. de 2020 a la(s) 18:22, Carl Schwan > (c...@carlschwan.eu) escribió: > > > > Hello folks, > > Tobias and I are developing a KDE matrix client using Kirigami > > and other KDE frameworks called NeoChat. This is a fork of another > > QML and now unmaintained Matrix client named Spectral. > > > > Tobias is currently implementing the account registration API > > and we found out that even if it isn't mandatory in the matrix > > spec, it is required to add ReCaptcha for connecting to most > > of the Matrix server (including kde.org, matrix.org and other > > major matrix servers). > > > > From a technical point of view, this would be quite painful to > > implement (adding a dependency to QtWebEngine) but most > > importantly this would require adding integration into a service > > that is not privacy-friendly, proprietary and monopolist. This > > is something that we think goes against the value of KDE. But at > > the same time, making it possible to register an account directly > > from NeoChat is something that is quite important in the user > > experience. > > > > So my questions to the community would be to know if there are > > already some precedent of KDE apps adding supports for ReCaptcha > > and if this is a good idea to support it? > > > > Thanks in advance for your answers, > > Cheers, > > Carl and Tobias > > > > Does Matrix really require "recaptcha"? I thought it had a protocol > for "whatever login/security mechanism the homeserver gives you, as a > webpage link". > > -- > Nicolás >
Re: ReCaptcha integration in an KDE application
El sáb., 7 de nov. de 2020 a la(s) 18:22, Carl Schwan (c...@carlschwan.eu) escribió: > > Hello folks, > Tobias and I are developing a KDE matrix client using Kirigami > and other KDE frameworks called NeoChat. This is a fork of another > QML and now unmaintained Matrix client named Spectral. > > Tobias is currently implementing the account registration API > and we found out that even if it isn't mandatory in the matrix > spec, it is required to add ReCaptcha for connecting to most > of the Matrix server (including kde.org, matrix.org and other > major matrix servers). > > From a technical point of view, this would be quite painful to > implement (adding a dependency to QtWebEngine) but most > importantly this would require adding integration into a service > that is not privacy-friendly, proprietary and monopolist. This > is something that we think goes against the value of KDE. But at > the same time, making it possible to register an account directly > from NeoChat is something that is quite important in the user > experience. > > So my questions to the community would be to know if there are > already some precedent of KDE apps adding supports for ReCaptcha > and if this is a good idea to support it? > > Thanks in advance for your answers, > Cheers, > Carl and Tobias > Does Matrix really require "recaptcha"? I thought it had a protocol for "whatever login/security mechanism the homeserver gives you, as a webpage link". -- Nicolás
ReCaptcha integration in an KDE application
Hello folks, Tobias and I are developing a KDE matrix client using Kirigami and other KDE frameworks called NeoChat. This is a fork of another QML and now unmaintained Matrix client named Spectral. Tobias is currently implementing the account registration API and we found out that even if it isn't mandatory in the matrix spec, it is required to add ReCaptcha for connecting to most of the Matrix server (including kde.org, matrix.org and other major matrix servers). >From a technical point of view, this would be quite painful to implement (adding a dependency to QtWebEngine) but most importantly this would require adding integration into a service that is not privacy-friendly, proprietary and monopolist. This is something that we think goes against the value of KDE. But at the same time, making it possible to register an account directly from NeoChat is something that is quite important in the user experience. So my questions to the community would be to know if there are already some precedent of KDE apps adding supports for ReCaptcha and if this is a good idea to support it? Thanks in advance for your answers, Cheers, Carl and Tobias