| *** replaceafill has joined #novawebdev | 08:47 | |
| *** jelkner has joined #novawebdev | 09:52 | |
| jelkner | Good morning, replaceafill! | 09:55 |
|---|---|---|
| replaceafill | good morning jelkner | 09:55 |
| jelkner | should i file the issue about having to copy and paste your login / password to vote? | 09:55 |
| jelkner | or did you get that on your list of todos already? | 09:55 |
| jelkner | btw. we are making good progress with both our customer projects | 09:56 |
| jelkner | lelkneralfaro is getting to know the or arlington folks and the aea folks he needs to work with | 09:57 |
| replaceafill | jelkner, file it please | 09:57 |
| jelkner | will do | 09:57 |
| replaceafill | jelkner, but i don't think we'll be able to do anything about it | 09:57 |
| replaceafill | jelkner, at least for the AEA election | 09:57 |
| jelkner | how does the PSF do it? | 09:58 |
| replaceafill | jelkner, they don't | 09:58 |
| jelkner | really? | 09:58 |
| replaceafill | jelkner, according to the emails you shared with me | 09:58 |
| *** mjsir911 has joined #novawebdev | 09:58 | |
| replaceafill | jelkner, you got a username password when they used helios | 09:58 |
| replaceafill | jelkner, evote was able to do that | 09:58 |
| jelkner | ahh | 09:58 |
| replaceafill | jelkner, and helios can, but you need to use a 3rd party auth provider | 09:58 |
| replaceafill | jelkner, like google or facebook, etc | 09:58 |
| jelkner | ahh | 09:58 |
| replaceafill | jelkner, i explained lelkneralfaro that | 09:59 |
| jelkner | are there any free software ones? | 09:59 |
| replaceafill | jelkner, openid iirc | 09:59 |
| replaceafill | jelkner, but i haven't explored it fully yet | 09:59 |
| replaceafill | jelkner, lelkneralfaro is ok with the user/password approach | 09:59 |
| replaceafill | jelkner, i told him about the alternatives | 09:59 |
| replaceafill | jelkner, and that maybe we should ask AEA | 10:00 |
| mjsir911 | replaceafill, is the voter id supposed to be secret? | 10:00 |
| jelkner | ok replaceafill, but let me warn you | 10:00 |
| jelkner | i have a teacher here who doesn't have a personal email | 10:00 |
| replaceafill | mjsir911, voter id? you mean the username you receive? | 10:00 |
| jelkner | since she doesn't know how to set one up | 10:00 |
| mjsir911 | no the very long string | 10:00 |
| jelkner | i am going to help her | 10:00 |
| mjsir911 | fingerprint | 10:01 |
| replaceafill | mjsir911, i don't think so | 10:01 |
| jelkner | but i can almost guarantee she will *not* know how to copy and paste a user name and password | 10:01 |
| replaceafill | mjsir911, you can view everybody's fingerprint in the election page after the voting is done | 10:01 |
| replaceafill | jelkner, yeah it's an usability problem | 10:01 |
| mjsir911 | oh ok | 10:01 |
| mjsir911 | are the passwords one time use? | 10:01 |
| jelkner | i'll file the bug | 10:02 |
| mjsir911 | get regenerated every new election? | 10:02 |
| jelkner | and do whatever you say | 10:02 |
| replaceafill | mjsir911, yep | 10:02 |
| replaceafill | jelkner, we're doomed :( | 10:02 |
| replaceafill | jelkner, :) | 10:02 |
| mjsir911 | hmmm I'm sure there are security problems with vote.example.com/vote/election3?username=marco,password=qwerty | 10:02 |
| replaceafill | mjsir911, are you thinking alternatives to this "problem"? | 10:03 |
| mjsir911 | yea | 10:03 |
| replaceafill | mjsir911, yeah, the GET option is out of the table for sure | 10:03 |
| replaceafill | off/out whatever :D | 10:03 |
| mjsir911 | oh ok but how else would you embed authentication in a url? | 10:03 |
| replaceafill | mjsir911, you need to generate tokens | 10:03 |
| replaceafill | mjsir911, it's kind like the password | 10:04 |
| mjsir911 | http://whatever/election3?token=asdfghjhfds ? | 10:04 |
| replaceafill | mjsir911, http://whatever/election/this-is-marcos-token-23423423 | 10:04 |
| mjsir911 | yea ok I think those are functionally the same, do we need a third party service for generating tokens? | 10:05 |
| jelkner | issue filed | 10:05 |
| replaceafill | mjsir911, no, currently helios uses third party services for auth | 10:05 |
| replaceafill | mjsir911, helios doesn't use tokens | 10:05 |
| jelkner | i assigned it to you, replaceafill, but perhaps if mjsir911 is willing, you could assign it to him? | 10:05 |
| replaceafill | mjsir911, relies on authentication to track who voted | 10:05 |
| jelkner | he can bill for the time | 10:05 |
| mjsir911 | what do you mean? When I put my username and password what does it do? | 10:06 |
| replaceafill | jelkner, sure | 10:06 |
| replaceafill | jelkner, i just asked mjsir911 about his availability to request some help from him | 10:06 |
| jelkner | i don't want to overextend you and we need to get our product polished and ready | 10:06 |
| jelkner | sweet | 10:06 |
| jelkner | ok, let me stop butting in where i'm not needed! ;-) | 10:06 |
| replaceafill | :) | 10:06 |
| mjsir911 | how does it do the authentication? When I put in my username/password, what does it do? | 10:07 |
| replaceafill | mjsir911, for your helios instance you set up auth systems | 10:07 |
| replaceafill | mjsir911, note the helios instance part | 10:07 |
| mjsir911 | yea, thats the voting system and web server? | 10:07 |
| replaceafill | mjsir911, you say, i'll let users to log in with google/facebook/twitter accounts | 10:07 |
| mjsir911 | Oh yea, but right now we're not doing that are we? | 10:08 |
| replaceafill | mjsir911, then, when you create an election, you decide if it's public or private | 10:08 |
| replaceafill | jelkner, if the election is public anyone can vote using those auth systems | 10:08 |
| replaceafill | oops, that was for you mjsir911 | 10:08 |
| mjsir911 | will aeava have to log in through a third party provider eg google? | 10:08 |
| replaceafill | mjsir911, that's the alternative if they don't want *our* username/passwords | 10:09 |
| replaceafill | mjsir911, but then users will need other user/password from these providers | 10:09 |
| replaceafill | mjsir911, right? | 10:09 |
| replaceafill | mjsir911, and at that point, the election is "public" | 10:10 |
| replaceafill | mjsir911, meaning anyone can vote | 10:10 |
| mjsir911 | yea, I think it would be simpler to just give them our own generated ones unless they want to make it public | 10:10 |
| replaceafill | mjsir911, yep | 10:10 |
| replaceafill | mjsir911, the way we extend it is | 10:10 |
| mjsir911 | BUT is the username/password used anywhere else other than logging in for one election? If so can you replace that process with generating a token? | 10:10 |
| replaceafill | mjsir911, you don't replace it | 10:11 |
| replaceafill | mjsir911, you extend it | 10:11 |
| replaceafill | mjsir911, you let helios create the same row in the database to identify user/password | 10:11 |
| mjsir911 | is the username password only used for the one election? | 10:11 |
| replaceafill | mjsir911, yes | 10:11 |
| replaceafill | mjsir911, the password is *like* a token | 10:11 |
| mjsir911 | if theres a token in the url, you don't even need a password & username | 10:12 |
| replaceafill | mjsir911, you just need something unique and hard to guess really | 10:12 |
| mjsir911 | yea, same way the password is generated I would expect | 10:12 |
| mjsir911 | but maybe longer | 10:12 |
| replaceafill | mjsir911, right | 10:12 |
| replaceafill | mjsir911, so instead of checking username/password in a post | 10:13 |
| replaceafill | mjsir911, you check the get data | 10:13 |
| replaceafill | mjsir911, extract the token and know who the user is | 10:13 |
| mjsir911 | so the process would be 1) generate a token for each user in a new column in the db 2) embed that token in the emails sent out 3) authenticate when the url includes a valid token | 10:13 |
| replaceafill | mjsir911, yes, something like that | 10:13 |
| mjsir911 | ok, how complicated is setting up a helios system? | 10:14 |
| replaceafill | mjsir911, proble with that approach is similar to what we just discussed | 10:14 |
| replaceafill | mjsir911, the token gets stored in the user's browser history for instance | 10:14 |
| replaceafill | mjsir911, so you need at some point to expire them | 10:15 |
| replaceafill | mjsir911, invalidate them | 10:15 |
| mjsir911 | can users vote multiple times? | 10:15 |
| replaceafill | mjsir911, in default helios they can cast may ballots | 10:15 |
| replaceafill | mjsir911, and only the last one counts | 10:15 |
| replaceafill | mjsir911, i've changed it that a bit | 10:15 |
| replaceafill | mjsir911, i'm going to deploy that today | 10:16 |
| replaceafill | mjsir911, and ask the team to test it | 10:16 |
| mjsir911 | Would it be reasonable to just have a single use key that only works once? | 10:16 |
| replaceafill | mjsir911, i think it should invalidate the token when you cast your ballot | 10:16 |
| replaceafill | mjsir911, but generate a new one to allow you to see the results | 10:16 |
| mjsir911 | So not when you use it, but when you are done using it | 10:17 |
| mjsir911 | do you need a user/password for viewing the results? | 10:17 |
| replaceafill | mjsir911, yes | 10:17 |
| replaceafill | mjsir911, it's a private election | 10:17 |
| replaceafill | mjsir911, results shouldn't be open | 10:17 |
| mjsir911 | ohhh, would it be alright to expect a user/password for viewing the election? | 10:17 |
| replaceafill | mjsir911, well, it's the same principle of requiring a user/password in the first place | 10:18 |
| mjsir911 | Jeff's argument is most people won't view the election, so It's less of usability issue | 10:18 |
| mjsir911 | Jeff is hopping on now | 10:18 |
| jelkner | i'm using the principle that things everyone does should be easy | 10:19 |
| replaceafill | jelkner, transparency :) | 10:19 |
| jelkner | and things only some people will want to do should be possible | 10:19 |
| replaceafill | jelkner, i'm ok if we push for a feature like this, but i'm not sure we have time for Tuesday demo | 10:20 |
| replaceafill | jelkner, mjsir911 my goal is to have the voter side of things polished/tested by Tuesday | 10:21 |
| replaceafill | jelkner, mjsir911 that's when Louie meet with them | 10:21 |
| replaceafill | jelkner, mjsir911 and shows the system | 10:21 |
| mjsir911 | I think I might be able to get a prototype up by sunday | 10:21 |
| mjsir911 | Although I would need instructions for setup | 10:22 |
| replaceafill | mjsir911, thank you ansible ;) | 10:22 |
| replaceafill | mjsir911, helios is simple to set up than tendenci | 10:22 |
| replaceafill | simpler* | 10:22 |
| mjsir911 | link to instructions? | 10:23 |
| replaceafill | mjsir911, i'm not sure if our instructions are harder than just following helios instructions | 10:24 |
| replaceafill | mjsir911, but in any case | 10:24 |
| replaceafill | mjsir911, https://gitlab.com/novawebdevelopment/ansible-postfix | 10:24 |
| mjsir911 | for helios? | 10:24 |
| replaceafill | mjsir911, you can run that playbook passing only the "helios" tag | 10:24 |
| mjsir911 | oh I see so it's part of the process | 10:25 |
| replaceafill | ansible-playbook --tags "helios" --inventory $SERVER, site.yml | 10:25 |
| mjsir911 | ok thanks I think thats all I need | 10:25 |
| replaceafill | mjsir911, i doubt it ;) | 10:25 |
| replaceafill | mjsir911, you will also need German's branch: https://github.com/gfbot/helios-server/tree/helios-styled-aea | 10:26 |
| replaceafill | mjsir911, well i think you can get started without it | 10:26 |
| mjsir911 | yea what I'm changing he wouldn't have touched | 10:26 |
| replaceafill | mjsir911, but it's good to have all the parts we'll set in production | 10:26 |
| replaceafill | mjsir911, and the playbook allows you to customize that | 10:27 |
| replaceafill | mjsir911, https://gitlab.com/novawebdevelopment/ansible-postfix/blob/master/custom.yml.example#L33-51 | 10:27 |
| replaceafill | mjsir911, helios_version can be a branch name | 10:27 |
| mjsir911 | K, I think I got it | 10:28 |
| replaceafill | mjsir911, if you get stuck and decide the playbook doesn't work | 10:28 |
| mjsir911 | I can look through the ansible playbooks if Im confused about anything else | 10:29 |
| replaceafill | mjsir911, i recommend our shared doc too: https://docs.google.com/document/d/1crQkidp6XfAGMpucGQRRD0gNfeHVviStTJGgNbjRrmw/edit | 10:29 |
| replaceafill | mjsir911, feedback on the playbook is highly appreciated | 10:29 |
| replaceafill | mjsir911, :) | 10:29 |
| mjsir911 | ok, ill keep a look out | 10:29 |
| replaceafill | mjsir911, kk | 10:29 |
| replaceafill | mjsir911, i just uploaded a file i use for local development to the Helios shared doc: https://drive.google.com/drive/folders/1_RfNDM60_V9oQFNe0PzKmr80LWzrN2mH | 10:32 |
| replaceafill | mjsir911, i use a virtualbox vm which i set in my laptop's /etc/hosts as replaceafill.com | 10:33 |
| replaceafill | ok back to filing issues | 10:33 |
| *** mr_german has joined #novawebdev | 10:51 | |
| *** mr_german has joined #novawebdev | 11:54 | |
| mr_german | replaceafill, hi | 11:54 |
| replaceafill | hey mr_german | 11:57 |
| replaceafill | mr_german, i just sent an email about issue triaging | 11:58 |
| mr_german | replaceafill, yes. | 11:58 |
| mr_german | replaceafill, thx, I'll work in that | 11:58 |
| replaceafill | mr_german, could you please check read it | 11:58 |
| replaceafill | mr_german, and let me know if you have questions | 11:58 |
| mr_german | replaceafill, done | 11:58 |
| replaceafill | mr_german, what issue should you start with today? | 11:58 |
| mr_german | replaceafill, I'll start to work | 12:03 |
| replaceafill | mr_german, do you know what issue to start with? | 12:03 |
| replaceafill | mr_german, in case it's not clear it should be this: https://gitlab.com/novawebdevelopment/helios-aea/issues/6 | 12:03 |
| mr_german | that first that u sent | 12:03 |
| replaceafill | mr_german, most of your issues are due tomorrow | 12:04 |
| replaceafill | mr_german, so focus on their weight | 12:04 |
| replaceafill | mr_german, text wrapping is a "9" | 12:04 |
| replaceafill | mr_german, so start with that | 12:04 |
| mr_german | ok | 12:04 |
| replaceafill | mr_german, then this: https://gitlab.com/novawebdevelopment/helios-aea/issues/4 | 12:05 |
| replaceafill | mr_german, or this https://gitlab.com/novawebdevelopment/helios-aea/issues/7 | 12:05 |
| replaceafill | mr_german, and so on | 12:05 |
| *** louisea has joined #novawebdev | 12:06 | |
| mr_german | replaceafill,omg, I just received too many emails, its has too many issues | 12:06 |
| mr_german | :$ | 12:06 |
| replaceafill | mr_german, how much do you plan to work today? | 12:06 |
| replaceafill | mr_german, i mean, how many hours? | 12:06 |
| replaceafill | mr_german, i can help if you don't think you'll make it | 12:06 |
| replaceafill | mr_german, some of them are really simple changes | 12:06 |
| mr_german | replaceafill, I plan to work 6 hours | 12:06 |
| replaceafill | mr_german, like changing the color of a button | 12:07 |
| replaceafill | mr_german, shouldn't take 2 hours | 12:07 |
| mr_german | replaceafill, but, what about admin interface | 12:07 |
| mr_german | ? | 12:07 |
| mr_german | i need to work on that | 12:07 |
| replaceafill | mr_german, no, this is still voter facing issues | 12:07 |
| replaceafill | mr_german, you're not done with it yet | 12:07 |
| replaceafill | mr_german, we can't move to the admin until all of these are sorted out | 12:08 |
| mr_german | replaceafill, ok, Im going to start | 12:09 |
| replaceafill | mr_german, cool | 12:09 |
| replaceafill | mr_german, ping me if you need me to check things | 12:10 |
| mr_german | replaceafill, ok | 12:12 |
| *** mjsir911 has joined #novawebdev | 12:45 | |
| *** zOnny has joined #novawebdev | 12:48 | |
| zOnny | hey replaceafill | 12:49 |
| replaceafill | hey zOnny | 12:49 |
| zOnny | do you want me to clean up the aea's templates directory, replaceafill | 12:52 |
| replaceafill | zOnny, no | 12:53 |
| replaceafill | zOnny, i just asked you what's the status of that | 12:53 |
| replaceafill | zOnny, your comment says *something* is fixed | 12:53 |
| replaceafill | zOnny, i want to understand what was fixed | 12:53 |
| replaceafill | zOnny, because i still see the /templates/ parts in the production site | 12:54 |
| zOnny | the issue was that the php paths were broken because of the files were not responding. such as navigation. | 12:57 |
| zOnny | however, jeff was sugesting that is a simple website and there is not the need of having others directories. replaceafill | 12:59 |
| replaceafill | zOnny, i remember, but the issue says "remove /templates/ from the AEA website URIs" | 13:00 |
| replaceafill | zOnny, so that's not done, right? | 13:00 |
| zOnny | yeah, it can be done in a short time, if you want me to remove the directory and keep all the files in the main directory, replaceafill | 13:02 |
| replaceafill | zOnny, i think your other work has higher priority than this issue | 13:02 |
| zOnny | yep, you right replaceafill | 13:03 |
| replaceafill | zOnny, so i'll remove you as assignee for now | 13:03 |
| replaceafill | zOnny, and we can get back to it once it becomes a top priority | 13:03 |
| replaceafill | zOnny, makes sense? | 13:03 |
| zOnny | ok, replaceafill | 13:03 |
| replaceafill | zOnny, thanks for the update | 13:03 |
| replaceafill | ACTION goes to get lunch, bb in ~45 | 14:13 |
| replaceafill | ACTION is back | 14:39 |
| *** mjsir911 has joined #novawebdev | 15:39 | |
| replaceafill | mr_german, you around? | 15:51 |
| *** mjsir911 has joined #novawebdev | 16:04 | |
| replaceafill | mr_german, mjsir911 labels are set for the helios-ae project | 16:29 |
| replaceafill | mr_german, mjsir911 please use Needs Review when you want someone to check something | 16:29 |
| replaceafill | mr_german, ping | 17:01 |
| mr_german | hello | 17:12 |
| replaceafill | mr_german, could you push your fixes | 17:16 |
| replaceafill | mr_german, the ones you told me you worked on already | 17:16 |
| mr_german | replaceafill, but the "results page" | 17:17 |
| mr_german | is not finish yet | 17:17 |
| replaceafill | mr_german, but you finished some of the others right? | 17:17 |
| replaceafill | mr_german, like the text wrapping one | 17:17 |
| mr_german | replaceafill, yes | 17:20 |
| mr_german | replaceafill, yes. | 17:20 |
| replaceafill | mr_german, do you think you'll finish the results page today? | 17:20 |
| replaceafill | mr_german, by today i mean, before 8 pm our time.... | 17:20 |
| mr_german | replaceafill, yes, im on it | 17:20 |
| mr_german | yeah | 17:21 |
| replaceafill | mr_german, ok, push your fixes after that one yet | 17:21 |
| replaceafill | mr_german, i'll wait | 17:21 |
| mr_german | replaceafill, :o | 17:21 |
| mr_german | ok | 17:21 |
| mr_german | replaceafill, 8pm *our time? | 17:21 |
| replaceafill | mr_german, yeah, i want people to have a new election with fixes by tomorrow morning | 17:21 |
| mr_german | ok | 17:22 |
| replaceafill | mr_german, when they wake up :) | 17:22 |
| replaceafill | mr_german, so i'll set that up tonight | 17:22 |
| replaceafill | mr_german, thanks! | 17:22 |
| mr_german | replaceafill, sure, thanks! | 17:23 |
| mr_german | ACTION goes out to pick up his brother brb 15 mins | 17:48 |
| mr_german | ACTION is back | 17:56 |
| *** nrcerna has joined #novawebdev | 18:22 | |
| mr_german | replaceafill, it should be mobile right? | 19:50 |
| replaceafill | mr_german, hm? | 19:51 |
| mr_german | replaceafill, the "results page" it should be mobile too? | 19:51 |
| replaceafill | mr_german, yes | 19:52 |
| mr_german | ok | 19:52 |
| replaceafill | mr_german, everything should be | 19:52 |
| *** zOnny has joined #novawebdev | 22:46 | |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!