This is pretty cool. Thanks for sharing!
Fediverse
A community to talk about the Fediverse and all it's related services using ActivityPub (Mastodon, Lemmy, KBin, etc).
If you wanted to get help with moderating your own community then head over to !moderators@lemmy.world!
Rules
- Posts must be on topic.
- Be respectful of others.
- Cite the sources used for graphs and other statistics.
- Follow the general Lemmy.world rules.
Learn more at these websites: Join The Fediverse Wiki, Fediverse.info, Wikipedia Page, The Federation Info (Stats), FediDB (Stats), Sub Rehab (Reddit Migration)
I'm glad you liked it, thanks for the kind words!
Why not just use an actual federated blogging service like write freely?
That requires the running and maintenance of a federated instance, which is not easy or cheap. Doing it like this allows anyone to make a BlogOnLemmy by serving but a single webpage, no extra server cost at all.
So, schlepping it off on other instance owners, so they host it, which as you say is not easy or cheap.
The open web and API's are designed for this purpose, and don't think any instance would ever follow reddit and close up theirs.
I'm all for donating to your instance owner, altough I'd be surprised if any would mind their API being used this way. Giving credit where credit is due.
I was just thinking about this this morning as we will be going on a 6 week roadrip around NZ and I cant be bothered to stand up my wordpress server again
Feel free to use the code in any way you like, and enjoy your trip!
A blog entry on how it works and what it does at a high level could be nice. I'm not sure what I'm looking at, but there must be some API call to Lemmy and it's probably happening on the server due to CORS; not sure how this would work just in the browser if the Lemmy instance has CORS setup...
Edit: OK the instance 0d.gs does in fact not have CORS 😮 That's a little concerning...
Hold up, neither does programming.dev? Uh... @recursive_recursion@programming.dev and @Ategon@programming.dev is that safe? I'm not a security expert but doesn't this allow for cross site attacks?
I've noticed that a more detailed writeup is warranted! So I'll be working on that.
CORS is enabled on lemmy, you have to send the 'Origin' header in order to get the Access-Control headers. Which allows cross-origin for simple requests. No added headers, cookies or other data. So all API calls are made in JS by your browser.
How come I can't see the Lemmy comments on your blog?
Good question, it's a design choice. Being attached to my name I had no interest in needing to moderate which comments should and shouldn't be showing up under my name. There is a direct link to the posts on lemmy where they can be interacted with.
A second concern is XSS, with my own content I have no worries.