Chat bot migration from OpenID

Simon Forsberg

12:39

171

Q: Support for OpenID ends on July 1, 2018

Stack Overflow was an early and strong supporter of OpenID. We built our sign up/log in flow around it. We were idealistic and had high hopes, but these hopes weren't realized. Over the years people have wondered if OpenID is dead. We've had to remove support as OpenID providers pulled support or...

github.com/SOBotics/SwiftChatSE/issues/8

github.com/Zomis/Duga/issues/140

Petter Friberg

13:07

I'm joining in, we got multiple bot's in SOBotics running chatexchange any solutions to this issue are welcome github.com/Tunaki/chatexchange/issues/6 specially considering that Tunaki is not very active anymore

NobodyNada

14:29

(making myself pingable here)

thesecretmaster

o/

IIRC there was a conversation in CHQ a while back about the possibility of a bot creating a stackapps profile then just always logging in with that.

Around here

Bhargav Rao

19:42

I think Sam might have solved the issue for C# chatexchange.

Sam

Yeah, I've just switched to directly logging in with the account's email/pwd for each community.

Simon Forsberg

19:58

@Sam Do you have any code for that? :)

Petter Friberg

He is posting an answer in SOBotics channel, when done if he agree we can migrate it here

Simon Forsberg

My bot does have a pure Stack Exchange account with email/pwd, but I noticed I had a reference to openid.stackexchange.com in my code

Petter Friberg

Are you using @NobodyNada lib?

Simon Forsberg

I have Java code, not using any lib

Petter Friberg

Oh your not using Tunas chatexchange, shame on you :D

Just for info with java bots we use this github.com/Tunaki/chatexchange but Tuna is not very active anymore so we need to fix that

rene

20:09

U fix Tuna?

Petter Friberg

Let's start phishing with some luck... we will find him

Bhargav Rao

@PetterFriberg Duga was written before TunaLib, I remember speaking to Tuna about Duga, so Simon couldn't have used that :p

Simon Forsberg

@PetterFriberg I sort of built my own library I guess :P

Bhargav Rao

Tuna did mention that Duga didn't have an explicit library, so we couldn't be using that.

Simon Forsberg

@BhargavRao I split it up and created a duga-core part a while ago which can be used as a library

Bhargav Rao

20:20

Interesting, do you have a link to that?

Simon Forsberg

@BhargavRao github.com/Zomis/Duga/tree/develop/duga-core

Link, yes. Documentation, no.

Example usage can be seen here: github.com/Zomis/factorio-posts/blob/master/…

Sam

@SimonForsberg Yeah. The library is still far from complete though.

Simon Forsberg

That's using Groovy and Ivy though, but Maven works as well.

Bhargav Rao

Nice, I'll take a look at that, thanks!

Simon Forsberg

@Sam As every library :)

Sam

20:23

:)

Simon Forsberg

@BhargavRao And submit a PR to fix the openID thing? :)

Bhargav Rao

Hah, don't be that optimistic :p

Petter Friberg

oooh Simon maybe can fix Tuna lib also :).... this is relevant code in that lib.. github.com/Tunaki/chatexchange/blob/master/src/main/java/fr/…

Simon Forsberg

Don't get your hopes up

Petter Friberg

ping me if you do some stuff, worse case scenario, I will need to code some...

Bhargav Rao

20:26

@Sam will fix it for us

Sam

:p

quartata

20:40

hi

So are we going for specific-site login then?

Sam

It's the simplest solution I've come across so far.

(Our bots need to be able to interact with chat, so the SE API isn't an option here.)

2

Simon Forsberg

@Sam @quartata Can you explain the solution? Or even better: Code it ;)

quartata

Basically if the OpenID login goes away then the global StackExchange login (I.e. when you log in from stackexchange.com) goes away

now if you know your bot has a profile on a specific site you can log in there and get the cookies you need for chat.stackexchange

(basically the same way you log in for cSO and cMSE)

Sam

@SimonForsberg Uh, the link I posted earlier was my solution. :)

Too many loc to post here.

quartata

the trouble is which site :P we figured that making people need a StackApps account would be all right philosophically

so we'd do stackapps.com/login or whatever

Jeremy figured out how to do the "create a new profile" thing when you log into a site where you don't have a site profile

so it's not like you have to do it manually but people might find it odd we have to make a profile

Oh also we know the route to hide the profile

people might prefer that to be default behavior if the bot didn't have a StackApps profile and we had to make one

in Charcoal HQ, Mar 7 at 2:30, by Jeremy Banks

Which is posting to /users/hidecommunities/$USERID/hide with { siteId, fkey }. If we don't already have the siteId this would require calling the API or something, and maybe not worth it.

(@Sam)

@thesecretmaster if you move ChatX off of GL there is a fairly good chance I'll fix the auth for you

;P

Sam

21:01

@quartata I'll keep that in mind, thanks.

Petter Friberg

now we only need to get Sam to program in java also

quartata

haha

You know that's actually one upside to Inferno making you give the cookies directly: you write the auth route for your bot and it can log into whatever site it knows the bot account will have

thesecretmaster

@quartata I'll do it when I get around to it. Right now I've got my hands full with writing tests for another thing.

Simon Forsberg

22:02

@Sam Huh, that solution doesn't look so complicated. Looks even simpler than my current code.

Sam

@SimonForsberg Yeah. However, as I've just found out, it appears to only work for SO.

SE still uses openid when authenticating with an email/pwd.

SO does not.

Simon Forsberg

22:24

That's madness

quartata

@Sam even when logging into a specific site?

(e.g. codereview.stackexchange.com/users/login)

Sam

@quartata Haven't tested that case yet.

quartata

I thought that's the only option we had :P

I guess I'm confused what you're doing

Sam

AKAIK, you have to login to SE if you want to access SE chat rooms.

Or rather, you had to do that. I'm not sure if they've changed that.

quartata

yes

that is, you can't login into SO for it to work

Sam

22:32

Yes

quartata

although.. that gives me an idea

Smokey already has to log into MSE separately for chat.MSE

that should net you both chat.SE and chat.MSE cookies

Sam

hmm

@quartata Yeah, that does indeed work.

Transcript for

Chat bot migration from OpenID