From f5063a0de71a7ac072fa23447ec095b8d41c6d47 Mon Sep 17 00:00:00 2001
From: Andrea Vos <andrea@avris.it>
Date: Sat, 23 Apr 2022 01:48:40 +0200
Subject: [PATCH 1/4] [user] indieauth

---
 components/SocialConnection.vue  |  13 +++----
 components/SocialLogin.vue       |   7 ++--
 package.json                     |   1 +
 server/routes/grantOverrides.js  |  56 +++++++++++++++++++++++++++++--
 server/social.js                 |  10 ++++++
 src/socialProviders.js           |  16 +++++++++
 static/img/indieauth-inverse.png | Bin 0 -> 5553 bytes
 static/img/indieauth.png         | Bin 0 -> 5505 bytes
 yarn.lock                        |  10 ++++++
 9 files changed, 101 insertions(+), 12 deletions(-)
 create mode 100644 static/img/indieauth-inverse.png
 create mode 100644 static/img/indieauth.png

diff --git a/components/SocialConnection.vue b/components/SocialConnection.vue
index 5b9737ce2..4b087eaad 100644
--- a/components/SocialConnection.vue
+++ b/components/SocialConnection.vue
@@ -1,13 +1,14 @@
 <template>
     <div class="d-flex flex-column flex-md-row justify-content-between align-items-center">
         <span class="my-2">
-            <Icon :v="providerOptions.icon || provider" set="b"/>
+            <Icon :v="providerOptions.icon || provider" set="b"
+                  :class="[providerOptions.icon && providerOptions.icon.endsWith('.png') ? 'mx-1 invertible' : '']"/>
             {{ providerOptions.name }}
         </span>
         <span v-if="connection === undefined">
             <template v-if="providerOptions.instanceRequired">
                 <form v-if="formShown"
-                      :action="`${homeUrl}/api/user/social-redirect/${provider}/${config.locale}`"
+                      :action="providerOptions.redirectViaHome ? `${homeUrl}/api/user/social-redirect/${provider}/${config.locale}` : `/api/connect/${provider}`"
                       class="input-group input-group-sm">
                     <input type="text" name="instance" class="form-control" autofocus required
                            :placeholder="$t('user.login.instancePlaceholder')"/>
@@ -20,20 +21,20 @@
                     <T>user.socialConnection.connect</T>
                 </button>
             </template>
-            <a v-else :href="`${homeUrl}/api/user/social-redirect/${provider}/${config.locale}`" class="badge bg-light text-dark border">
+            <a v-else :href="providerOptions.redirectViaHome ? `${homeUrl}/api/user/social-redirect/${provider}/${config.locale}` : `/api/connect/${provider}`" class="badge bg-light text-dark border">
                 <Icon v="link"/>
                 <T>user.socialConnection.connect</T>
             </a>
         </span>
         <span v-else class="text-center">
-            <span class="mr-3">
-                <a href="#" @click.prevent="$emit('setAvatar', provider)">
+            <span class="me-2">
+                <a v-if="providerOptions.avatars && connection.avatar" href="#" @click.prevent="$emit('setAvatar', provider)">
                     <Avatar :src="connection.avatar" :user="$user()" dsize="2rem"/>
                 </a>
                 {{connection.name}}
             </span>
             <br class="d-md-none"/>
-            <a :href="`${homeUrl}/api/user/social-redirect/${provider}/${config.locale}` + (providerOptions.instanceRequired ? '?instance=' + connection.name.split('@')[1] : '')"
+            <a :href="(providerOptions.redirectViaHome ? `${homeUrl}/api/user/social-redirect/${provider}/${config.locale}` : `/api/connect/${provider}`) + (providerOptions.instanceRequired ? '?instance=' + connection.name.split('@')[1] : '')"
                     class="badge bg-light text-dark border">
                 <Icon v="sync"/>
                 <T>user.socialConnection.refresh</T>
diff --git a/components/SocialLogin.vue b/components/SocialLogin.vue
index d11bcf2c9..1d2386345 100644
--- a/components/SocialLogin.vue
+++ b/components/SocialLogin.vue
@@ -3,7 +3,7 @@
         <Icon :v="options.icon || provider" set="b"/>
         {{ options.name }}
 
-        <form :action="`${homeUrl}/api/user/social-redirect/${provider}/${config.locale}`"
+        <form :action="options.redirectViaHome ? `${homeUrl}/api/user/social-redirect/${provider}/${config.locale}` : `/api/connect/${provider}`"
               v-if="options.instanceRequired" class="input-group my-2">
             <input type="text" name="instance" class="form-control" autofocus required ref="instance"
                    :placeholder="$t('user.login.instancePlaceholder')">
@@ -15,10 +15,11 @@
     <button v-else-if="options.instanceRequired && !formShown"
             class="btn btn-outline-primary"
             @click="showForm">
-        <Icon :v="options.icon || provider" set="b"/>
+        <Icon :v="options.icon || provider" set="b"
+              :class="[options.icon && options.icon.endsWith('.png') ? 'mx-1 invertible' : '']"/>
         {{ options.name }}
     </button>
-    <a v-else :href="`${homeUrl}/api/user/social-redirect/${provider}/${config.locale}`"
+    <a v-else :href="options.redirectViaHome ? `${homeUrl}/api/user/social-redirect/${provider}/${config.locale}` : `/api/connect/${provider}`"
        class="btn btn-outline-primary">
         <Icon :v="options.icon || provider" set="b"/>
         {{ options.name }}
diff --git a/package.json b/package.json
index 5377a63e2..2363d3f32 100644
--- a/package.json
+++ b/package.json
@@ -42,6 +42,7 @@
     "nuxt": "^2.15.2",
     "pageres": "^6.2.3",
     "qrcode": "^1.5.0",
+    "query-string": "^7.1.1",
     "rtlcss": "^3.1.2",
     "sha1": "^1.1.1",
     "speakeasy": "^2.0.0",
diff --git a/server/routes/grantOverrides.js b/server/routes/grantOverrides.js
index 268fe51c5..43906d187 100644
--- a/server/routes/grantOverrides.js
+++ b/server/routes/grantOverrides.js
@@ -6,17 +6,25 @@ import SQL from 'sql-template-strings';
 import fetch from 'node-fetch';
 import assert from 'assert';
 import { handleErrorAsync } from "../../src/helpers";
+import queryString from 'query-string';
 
 const normalizeDomainName = (domain) => {
-    const url = new URL('https://' + domain);
+    const url = new URL('https://' + domain.replace(/^https?:\/\//, ''));
     assert(url.port === '');
     return url.hostname;
 }
 
+const baseUrl = process.env.HOME_URL || 'https://pronouns.page';
+
 const config = {
     mastodon: {
         scopes: ['read:accounts'],
-        redirect_uri: `${process.env.HOME_URL || 'https://pronouns.page'}/api/user/social/mastodon`,
+        redirect_uri: `${baseUrl}/api/user/social/mastodon`,
+    },
+    indieauth: {
+        server_uri: 'https://indieauth.com/auth',
+        client_id: baseUrl,
+        redirect_uri: `${baseUrl}/api/user/social/indieauth`,
     },
 };
 
@@ -52,6 +60,7 @@ const mastodonGetOAuthKeys = async (db, instance) => {
     `);
     return keys;
 };
+
 router.get('/connect/mastodon', handleErrorAsync(async (req, res) => {
     assert(req.query.instance);
     const instance = normalizeDomainName(req.query.instance);
@@ -64,6 +73,7 @@ router.get('/connect/mastodon', handleErrorAsync(async (req, res) => {
         response_type: 'code',
     }));
 }));
+
 router.get('/user/social/mastodon', handleErrorAsync(async (req, res, next) => {
     if (!req.session.grant || !req.session.grant.instance || !req.query.code) {
         next();
@@ -99,7 +109,47 @@ router.get('/user/social/mastodon', handleErrorAsync(async (req, res, next) => {
     response.instance = instance;
     req.session.grant.response = response;
     next();
-    return;
+}));
+
+router.get('/connect/indieauth', handleErrorAsync(async (req, res) => {
+    assert(req.query.instance);
+    const instance = normalizeDomainName(req.query.instance);
+    req.session.grant = { instance };
+    res.redirect(`${config.indieauth.server_uri}?` + new URLSearchParams({
+        me: `https://${instance}`,
+        client_id: config.indieauth.client_id,
+        redirect_uri: config.indieauth.redirect_uri,
+    }));
+}));
+
+router.get('/user/social/indieauth', handleErrorAsync(async (req, res, next) => {
+    if (!req.session.grant || !req.session.grant.instance || !req.query.code) { next(); return; }
+
+    const response = await fetch(config.indieauth.server_uri, {
+        method: 'POST',
+        body: new URLSearchParams({
+            code: req.query.code,
+            client_id: config.indieauth.client_id,
+            redirect_uri: config.indieauth.redirect_uri,
+        }).toString(),
+        headers: {
+            'Content-Type': 'application/x-www-form-urlencoded',
+            'User-Agent': 'pronouns.page',
+        },
+    }).then(res => res.text());
+
+    const profile = queryString.parse(response);
+
+    if (!profile || !profile.me) { next(); return; }
+
+    profile.domain = normalizeDomainName(profile.me);
+
+    req.session.grant.response = {
+        profile,
+        instance: req.session.grant.instance,
+        access_token: true,
+    };
+    next();
 }));
 
 export default router;
diff --git a/server/social.js b/server/social.js
index 4d0a89635..9f3713e95 100644
--- a/server/social.js
+++ b/server/social.js
@@ -32,6 +32,7 @@ module.exports.config = {
     },
     // non-grant, but things break if it's not there
     mastodon: {},
+    indieauth: {},
 }
 
 module.exports.handlers = {
@@ -84,6 +85,15 @@ module.exports.handlers = {
             name: acct,
             avatar: r.profile.avatar,
             access_token: r.access_token,
+            instance: r.instance,
         };
     },
+    indieauth(r) {
+        return {
+            id: r.profile.me,
+            email: 'indieauth@' + r.profile.domain,
+            name: r.profile.domain,
+            instance: r.instance,
+        }
+    },
 };
diff --git a/src/socialProviders.js b/src/socialProviders.js
index 8a6343d23..36250a6d7 100644
--- a/src/socialProviders.js
+++ b/src/socialProviders.js
@@ -3,18 +3,34 @@ export const socialProviders = {
         name: 'Mastodon',
         instanceRequired: true,
         linkRegex: (p) => `^https?://(?:www.)?${p.name.split('@')[1]}/(?:(?:web/)?@|users/)?${p.name.split('@')[0]}/?$`,
+        avatars: true,
+    },
+    indieauth: {
+        name: 'IndieAuth',
+        instanceRequired: true,
+        icon: 'indieauth.png',
+        iconMargin: true,
+        avatars: false,
     },
     twitter: {
         name: 'Twitter',
         linkRegex: (p) => `^https?://(?:www.)?twitter.com/${p.name}/?$`,
+        redirectViaHome: true,
+        avatars: true,
     },
     discord: {
         name: 'Discord',
+        redirectViaHome: true,
+        avatars: true,
     },
     facebook: {
         name: 'Facebook',
+        redirectViaHome: true,
+        avatars: false,
     },
     google: {
         name: 'Google',
+        redirectViaHome: true,
+        avatars: true,
     },
 }
diff --git a/static/img/indieauth-inverse.png b/static/img/indieauth-inverse.png
new file mode 100644
index 0000000000000000000000000000000000000000..5a48219bdba12cbee39cf52b4a88e6c1459ccd8b
GIT binary patch
literal 5553
zcmeHKX;@NQ7d~j2nnRi8SR!g=1so7WP!eY;F|SxTG=OkWN&x`{$sD>_HaJ(}P?lOY
znl@Q^D=UY(<t@G1ZL%yY%}+DS%JP=q0d0D|`={sm?!VwUn{)PF>s@QT``zo|YzpxA
z(bqNC1pq*w?&}!{|I$>KwiY}d<i|V!0F8b{P_Q(REklaLLLNT~LQ3OB5E7E}c>o~4
z+n2Xo+>X>seHh}Emu$PfP7EsZU+litj~F4mo0(59kAHrhh+~;qrObEBsT}!0zGS#8
zXkKdBvolXDWA^6gE|t2>Sh}28f1)RL@9U|%ta=|MUIcYQ$up?Moml5~4IgInpCtDO
zf0*3s+#*)6l8hdgW|K?r^p^*aQ`cvjNOfB|Avlxj>V>!8miGO%;P2Cy59hf054Rt;
zRxE$yqm)^1+8@$_L*$bt9O$-fm3KhyuJjde#ha~>R`vGh^B2qaiQjck8J=Q%btAR*
zrRnvAYOA~S;@)yruytZ*$lbp87X{)Px%R8y8oOsS+|F!k+cvo+0n-!udk?!~L)Ntq
z^GZzxUJsYp&z_NWPXEf9s2C4^P+AHUP~yK`tM5>BD_CFWY!Ujb;aC)=A+@j$Q1Yjl
zM+KH``87;)MauU6GdEv_?WplKXxs_r=!8o<y87*lb<=UoU9&$-pL=~v*S=c9%rhYz
z<K&yCU->RgKKd$wQK7N!?4{mdR{A~bD*K&hh_8L8MP8(Nt?4BmOVmYrzC5DT)6uT;
zE7@jmetfcZhQa))?iq~B7L&5($gbz)`f6ErJ-2vhdZg-bf-;7OSRZa-cGLI(i)iTh
zB-75vVDVJO!GgBdlaWn1%v(jrpT-X@p0aS?j;8BJf@24s^xSEp$_GMEYa95W&jb$y
zE;u3z-Lq^UwmvzO^nkmtP!NB-srp#khC%)T{<WrpjY~rN?(gj^>OK?pZiS+q?=z>5
z{};9Y)bNV8l&n=A-sY57m5)ldDww4r*4m}#{nIh4e)DZgiDO<a=jDxS>hzrDFsaiM
zDaZwk3T7Se-e$CMlK{UZwQBA*+`^qA3L_k;j0>MGJwEL5A|=fCdGYB1FN~k`p&L9D
zXRW!>r@3nFr&Ii2E};n3kMvd<N4e@9>>aw;Uv{+mk<eAHb8h_#ckG_Ln+v<`1|Mo)
zt+g^7DhL183X3VpGVZ#3761^x@;y8P=pG)Qr4I|fXl*vt_cG10e&vPzzV&;?ds*Ux
zW=$+XWrU`pg0xS%A2OJkm*|$e!M48s7ZKWNs46&C6mzTX;^Il;Txpg&i;S0-)s5Jt
zPQ%TxeAn52uCd*@_TgcCn_h<IL7rKDP~erPOH*IYU6+Phj~KG$^+-yT8@h(hZp=I?
z)7kZO?TZ`D<;H$mL*pKY?6a6QpfxbKZ?ELRtc<E-Ws{1hWSU9c9{W^W!(52LkbArG
zaW;kdvoa=6+>6;!quj2)UB20=V!!#*VF_k#QMJ>dHp=RUxfj5|n@e__@t2s|&kNT<
zjk~hHblseJwvlbVxa>V2%Qhxm8QAh9=jvjFO{2!D0BdsMOV^?HBOygaqFfXmIT(J=
z%7!L4i6ll158pl&HjCC_cDjY~DRheRz3sW?=Epv?5l2x>d-D@&hj@Z%LW`Y;xC~$<
zRcZfL+)R3!(v7}Z^X%=d2aV4)v-VcBkZLblgP|q8v6-@W(sytB^W&0S2bPE>wV77G
z!yU?!4|k$qh989^jK;9J!f*&9j~2n53IJSO<svp`H6%rbLlJxd71dvJ0fppqsi>ty
z2FMV3K#_c3g&1Ng{DU}()f_Sx<vL&2MNWYMq9G|8DUXg4NGNhDN{vf_?^V-S6jE&>
zT}?#=GXjtvLNSCSU<eox?Iq{O;ZgH-kuG8`j}qwVJq7_kQBjdnsfdEb%49N(%mE`5
zM__SeG8qfvv3NWhwm?hb1yZ&gEs)r#AVx7fAqhv!7fJa-0aAs@4j0BssVEe@j{KZo
zw1~m@0xyt^u>kXdm9s@y90tTjM`OSBkVw7aV34td{?S7c1UGbSAS4mSiaC&193+t1
zd<((leDN2>ilfx!a5-2g3W|nJC2&;ScOiY~jDRm5DheX_(IT}MO!jw{Qa<l1S>NTR
zT2YttZ6dJy7u@fxKi94{hOHP3il>kht4fdVNkysRQ@BD7pG#5ShC6{gG7s;7#yNzO
z&;$r1pveRx8%@Fy@Z@kjk4ypy-$2m?5-D52fmBd1IED}75IH0w2M0Uy2zUrhAQNE-
zHqQ|avK`qZ0>^>lfG2+gu}I8^RmqO}HY*hr7lv}+5@0VL8%@L$VJMK~h$cIc9MC)x
z7w<?QLm)h;p|~81w@@6-hPRU+&5nSuB0+?DK}9&lEr3o%;W6OXnSdy^lm|OdQ4BT*
zxrq67C5RslF{Nx3oj6A#=;#PKkU%2nKqQVvQUfl5#1dGFDo`AV!H+Vc+7}934a_WC
zB~%zd4GR}T@eo67sZbmw6h=`|DhQ;?Q>|~L%jmB7@+GiEyh`$8qGv)eqfet}Ad0VE
zLL$|=rLZ}pK_u)rh^r0+`;9JfBH4ln2tMFriuydy|A*ZoL*Y0GBy-RXkOL9kaIO>D
z3375klN}%eo5SU?og7CC|AH<N@}x4h7;=k%D}}3p6{M~PIeU~#`|p#HMM5f~K=^dS
zn!w|O@OTQrk%9x~f_MrDqOfBXV^!z+bIC5){~^UiZSYMafc-}2;06QtE9{qsHAb3>
z$A9rNwi*9o1Q_~fkRRgrCtW}3`XL5>$oQwae$w?r4E&JsPj&s@=+gcA$^!}Dzd<ti
zg@zVbcOHHj(h6Vb;|YwYzPrzr=fX2OBHs`R08E^sx)4A?ktsYmK}u(MO?WnLnlVN<
zp}_<N0GeCro^C<%yH5+xWHNrSY;^51u)*^hg7K&-&xZLA3ZI_KkDt70oj<{yQ1a){
zM1m2)Xfj1%x82<)ZEs6jT6CIcknuX}y0>lj7l>|%^CXSc^ZSRL-$|0X?mrCKWgS7M
zOzcG%ZEl{>QHgs-siL=NZ7;nS|AyRO-D<xnmKkVdlN?6}6e%Zh8p=5_b?M&YX@Q2|
zGE{Q*Z9Hq7G7OcxBnqHxJLDY&%v_*V8Psxc#Egb{O~U}T=m|>}1FU&F^dgz*>k!wk
z9<a&H=qm<HQr6U3u)vQM{o`-d1g)<+jHn2^_424)UoQ94<6Pgn*yrh&&$23eHumQX
zJ}4<&WOwAm;4<{{e7oeGi#1J8bw61{_sBT^AKRv2xzz!M(TM{inHHQ~HA-{NzLY7@
z_Bv}b(fm&RCf}YngD-LiahH?M_UK)ilOi<d@DjGB<E)aM&6+mYzFDe)TzkCGp@6D8
z?r(6*l*+va^-RZ~#otZP**b9Yiu*i!r;mso;~Og9|3NyW!D1o=6SuNo4|n9;mKn&Q
zki&k855kj!BQyDlcMLCF+OzE3qqAEIchpx~hM%}LLj!}T)@-!=xX8(%c;J{rM_FS^
z1E1b*cD_C554pT}u0<{S26LxRj)8B_aMRJ1EpGHo>e_zA)Ufk&X&uumk;#u_Ec2ml
z9}er^FCNkxG~=AlL+nP}pEaMj6=(Rna-4IWeV3xvgytLwG#vx{ymf2epSU95I+ECd
zu3w(4-R#WD#(8`3YJ<xR4J#*^&QWOBQ4osg?Dv2&&9XMK8MvFRX^PdODa>nJx(t#I
zy<#eZwtccnnOJME+wivjGE~B_9xI?_bICMXxkkmQk6BXm@|T03>XT?K*7Rz-k9uh*
z56uQ-F3!^WH~3%6h&dIC2Iqp|Nm&Gw5vFpuL7C@2wE%}rp0I16VY5<mL&}VvJ-o>P
zrPb$<9r~&Ttx$0wpOk#H0AYGVKe-HXzoMd*$H;QJ>9<OYMOXwdTNnK&>V@5P9-uR=
z@!2ULw3T^;1?1df$vl@|TeOFv<rlCreWV|7Tu@-5yPL@Y+PU}H3-Ap|q^kRk=txs8
zMAKBRlmJbWfayI)muM&7ng@VIGrHCwlm+7f#ix^53qRoyn3?5C5#GBuEYdn$_gbUg
z>PgMJ5n|&!QEnMI2UC9Uj<o`Fbv4$lWhNb~(do*#_TII}#M`P&-zPh<5I(8^-OJyz
I!kxA5zn}PmcmMzZ

literal 0
HcmV?d00001

diff --git a/static/img/indieauth.png b/static/img/indieauth.png
new file mode 100644
index 0000000000000000000000000000000000000000..9a5b7cc2b78feed87dd6f83ff5614af3e82ee8cb
GIT binary patch
literal 5505
zcmeHKdpwi-AAe>D>EKunqSjnW>}s2BSw<79=DIGV!?W!f!!EYDbqbL#DxBydIw9Rl
zs#7Y7E=sqbOG&44Ns3ZY2_2Q+v(fGKJOA{0{my@FuWirsxx7E$&-?rSeqMXl`T2NF
zFt9WL0AK>gn;iiEveX|vUHJQeIHnZ<w0f8E7OMilc(hz06N#fCv?@^!p`iq^2mli9
zz1XrevvY=FdRtJ96XL#k{$t~$l8Us7_rIa{&tDW<PTrNb)p3De3avBjy~TkGLxVdl
zlG=;;4z`p!yRNm4n|Y^-AH6#Jtkhx8(q6}<NBZ6ijRwcB=G0$%*Zt0Nr0f<}PMyg7
zfbM*;EXK8Jdb8nkyvK6tG1uS^N&1`Tc@Hgj-^yZcov4f%KDA0vAW1%Sscz<>8SjqY
z-}%RchMtVXRf&2W_RUQ`<Ag0%CB->@k5-oJf3VF6PR9|oI}g%ojDAgDG$TIi+|er5
z@5}EY4eQR|h#%g)qrWCef3<aok@LKY@T6n;4+33v5?hpUM#@ZOECpIc4qd;@2^u8y
zv1*~@E&hh(#j*+%%BZ$gx087?p^!Y|QZ>oJfA8F!%hE}dQ`-{CiXf@e{U`j8QyjyT
zyoE(q?LE)XPEpz?E`B$VK5!QDZLTH8Oxqw#HQzDxt~Xbf{v^b~7xf`?;`@#h4(*pQ
z<&hh-jJIdGHd?oPC03d(Lb$hpaZY8IALY_=OCJO$+D`g2tgx6lXc<(cZH&2bSiV|Y
zn{V%b4Yl#FwZ>lKb{b5*vgaXE&wKOCvz@k^5LXg!Zj@~pSiEr7P1^AR`)hnwU`c8d
z<8HRw7Arb$0eOGq!ocQY$~>PS<$ty`KU~Ch$_u7Cm-Cxyat?;O47S%qJ;czgPIU5X
z<~f|;HyS+7IO3>#ds*L9FGhdu8tbIoUDOiadE6z^JFb5=Mt0$>yV!LtX9gR43Rm(h
z#oe_RS7(u)u@7+b#LsTr+EYjB;cmRJ?rq?^*vS6E%lWr0BU~uUBL}hzV+*?Zy8HsY
zOA-^7#~Z%cj)0D`daURuAugSC_O{O6TNvF`v2jmHev7Zd_kqXU<Vzc;bYAcnbg4~G
ze>q99^YjY$!$(5%&FrE*q9&CV&N)ADG3DXr%F-z(LZugbllsh-jjv2^^^g^n*DvWF
zu_3?eDr)!rI~lX0_+06+sbK(sNE6SV?Z=rt`;+ux!56Ifo#}m%WmOYewa>ezNXOHP
z#G5w07?T;Cj^XK@@HqIB{njM+oYl59HU4reZRqIYSb5Byrt=GowcS`&I|@)sOD>Jr
zrJE5aTMa&Hsl3uMv%2jNsmU-Cc|c^5#|x-^yePfTF?B6w6=KL%^h{a2ZFSesnKfBQ
z;`RS{yy9hD!(P;U-68Fcpgoh!Ug^H--?LlUIxX|)u@d8*rdbv$_YSYp>$s{I9Q}D$
z9?>R0Z(63w_}#cI727sX*qo3-E8S=Lcvy*ZEGVZPY+^*U<x~*@>KAS~?V~hzaN_G@
zv}^b6N}b_k8`0!V{JrQy$(rQaSL-`BU0r~%xuO;6H<g~$=Qh-GIH;gNo`d0_`}y~$
z*sv0QiJ(Le58pkxWE!j8;#4E!W3cJAcea%c4IN&r5vn|<rJ<AAt{7*&ywPs9q6FY3
zAJsd%v%%%@%5H3Z#gl<Mtyi8Rvv-#^x>TQ^N(e4~9-9?Es2UvT&5KKRd$mxZtj?Np
z4W3X|Vt5iQ=FVpbWD*=Gl<^^4f<z8aDgbbGOOS(tC`g6oL*Zg66VqE!g+YsjOw1w*
zm%x?Jh9bn?%M?)HG9R8`S(Jb-#JJ5ea7|#q01`+Aq7x+1QY9mSiP7LP;A^!Rk3nlf
zR8dUKVy+*0woCz`$v85Ofb~oe$B{6z4A8C$p@<Q{o-+mk-!U-}DwUjp$H&LV<Kmrh
zGDSF^NT<{B1QMP^!om?)WujCCCSavX8#Tlz1{+ce6k@qbER&+um>^#kt72j>upj+t
zeG)mB`x#!U9Ag3I1D^oO@kAT}FOlHC&QPj6<6w}n1^r`&k_QiTd;p}B#VQ1lXB;F|
z*?bKl6nxH?$10*V?Fa>UC>oN$p-Q+a@tcxf9IoHz3^fJeVu@Un1(W?vq)IIMLe@8H
zQ+qV+e7z7j{WI=2(Vu$P1jA8WE`u!-#HyFaVKXu6`V65=AQmz-mk>$7r-}$<EWw2e
zV#z{hXDkgA@Ubp5XV67Nq6o=C;a5-`sZs?>1&|sF2FHnE9EdI?(gY$h76d6U1d#+`
zX(S;HOQcfi1dvK5(Lupi5WWgAtV%HY>s6_tgc>Ljfj|MtSRtL_f+a&#7>Z1Rk)5dm
zGDxS<NHn4bN+@8=ktrk~yq#hR7!Kj((r}GKO*q5dkHf@}aD*=wzi3b;f)kh+E+|0z
z27dAI#1be_1*+*JQYi!~mEcSv(dbl~Gv!OrLP(*6rKkoa5^yB4#-rXB2HXwIET|SL
z44|>Y%`j#wAW$V!@MN-RCPuv`v^rCxZ?x;^u6T=;a73b7@?)Y8gknbTM$bUBSmQ#Y
zHM(Vhg3%&MFb*2s5;$+vC5Ql};ShYl#}xI+F8-(8qCo-*O(?_?$OIymOrR67Gz!Sa
zl4w+jKoz>U5aD_7O<|=>q>2X>kb5}XDclXLAWb*u>7!gad>bAg0jY^1z^5CQ6^X<n
zkr-qOgF<p7kQf9420zv@UVW}Vwd{)jA5vU30bdOQIB(Pj4;Xk};Xe<oG1AmL{)?|M
zPX5ITF!YZi-^K3_x_;30T?~9z@DFwUpzFIB_^#j|>iWOYW$@*Z2a>{ngW}-_nzWbK
z%ixD0UH&{THZY=o7gp}gfi3!S?;s@rj5k$(5Ww~VbJ#de#o>C6d!lWI!jiXS1kD8i
zWC(}t&P%xWIKLu_=Z;!aRcUXsE@q<<#$&R!X=sm>ntxMtw8_T_RWs+gZF^{#05sM%
zdGTjC&xy@8wqZL?TE{07_4vEYHf>wG=~Bc|o3-7oiEXE^8lAjX87?}PH&gkayyF(n
zduGT{YvsG})fQp7z=`ogPanRyyKs%9E}+S@JN59n`?`Ju+J!pZ`X<%cSDFu-Tc(K6
zT_&v12;lFOIaz?N2hy+R$m=46dB0(pWBuvvh{b=6i$>g)3aI4UQw&l_S8L5#X}dFd
zsN@mLQ~IvRSqMo-h@0+nUcX*i{k{^T5fj=^!e@tSO|>$jL+ZEmw>JaFf41JC&9Ifk
zA!N1)tNE5JpW>Y3)jxSwR8|+PdU2d1OC^0ANel~ac!?r(T(_e(yxnH8-LxS;lM1{c
z4(#2eOPGA?e8uX4-Ya)Qb&qi>wXoH#+uG)vpL|7nGHh6ecK|$N3~t|wzeqI;Vet0=
zLQJ(}wWPM-%{n@}+%9wfBKT$qS(l^L_iJO&{)l^RcyY4H;;!HNUKqT5X0x#wt92Q5
zuWxd;wL5mJTXDolYVilK4ZsyA6~$OYWE{P(9nw&?;-*Uqv0oZ%pOSOo`fy-Sd+uFw
z?DJVo7VOJttpdcINkGWY(&vl7y;lfsuehwGuZhEn?;juzB;_(amU`938$1ZgnEwll
z?g!|E0y9=>`JKZy{-u4qI{d*z*0u=UyS4+!aK}Qo`t!(W9=GzTq3!JnevY1dkYNNl
z;MojZTZx>0n%w%dIx(m$x;O3m#IUG$bx4;K<b@SX!w1K*XASRgkBmQ|g|oPE!>GMT
zFX7`>dzp?;pkvw+YD7=ABj8J(sWN)o^G4dfQuJF_$XTt8-E9{(AbU|e6UU#GTbu3!
zYW)vt&r37F0X$CDnH20vL@sBm!AS%!K(|n6%5sd{?YMuPK1OG||1|(5(K5%Zc;;D*
z1MQG&v%NQ6(=tczuq;Cq<^yvZLaftCfG+3A+=JHD(y+r0DUlfnvPs}Y6vupewsiA+
zpp#Sh`a;(n^TX|r@v*2m_C|Zz^k=!RYY^ta@agH%QM?7BFE>^>BmI6I#~SzdMBC&j
z|2L;~)*oaAO{lhxd>WmzK0}-qa$$1hRsWoUY3VaZd_QQ}xpo0E6aSC!(E~W1KI~GD
Hu+;woj!0ln

literal 0
HcmV?d00001

diff --git a/yarn.lock b/yarn.lock
index 743a8346f..73714abe5 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -8467,6 +8467,16 @@ query-string@^6.13.8:
     split-on-first "^1.0.0"
     strict-uri-encode "^2.0.0"
 
+query-string@^7.1.1:
+  version "7.1.1"
+  resolved "https://registry.yarnpkg.com/query-string/-/query-string-7.1.1.tgz#754620669db978625a90f635f12617c271a088e1"
+  integrity sha512-MplouLRDHBZSG9z7fpuAAcI7aAYjDLhtsiVZsevsfaHWDS2IDdORKbSd1kWUA+V4zyva/HZoSfpwnYMMQDhb0w==
+  dependencies:
+    decode-uri-component "^0.2.0"
+    filter-obj "^1.1.0"
+    split-on-first "^1.0.0"
+    strict-uri-encode "^2.0.0"
+
 querystring-es3@^0.2.0:
   version "0.2.1"
   resolved "https://registry.yarnpkg.com/querystring-es3/-/querystring-es3-0.2.1.tgz#9ec61f79049875707d69414596fd907a4d711e73"

From 186f0e58f93846715dbf84c8f3f4ae3015ab371e Mon Sep 17 00:00:00 2001
From: Andrea Vos <andrea@avris.it>
Date: Sat, 23 Apr 2022 11:20:17 +0200
Subject: [PATCH 2/4] [user] indieauth - fix

---
 server/routes/grantOverrides.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/server/routes/grantOverrides.js b/server/routes/grantOverrides.js
index 43906d187..741bd0b9d 100644
--- a/server/routes/grantOverrides.js
+++ b/server/routes/grantOverrides.js
@@ -14,7 +14,7 @@ const normalizeDomainName = (domain) => {
     return url.hostname;
 }
 
-const baseUrl = process.env.HOME_URL || 'https://pronouns.page';
+const baseUrl = process.env.BASE_URL || process.env.HOME_URL || 'https://pronouns.page';
 
 const config = {
     mastodon: {

From 95e3a409bcbd1fc63acfc7ec366161f2cc06fc6a Mon Sep 17 00:00:00 2001
From: Andrea Vos <andrea@avris.it>
Date: Sat, 23 Apr 2022 13:02:20 +0200
Subject: [PATCH 3/4] [social] deprecate facebook

---
 components/SocialConnection.vue             | 59 ++++++++++++---------
 components/SocialLogin.vue                  | 25 +++++++--
 locale/_base/translations.suml              |  6 +++
 locale/de/translations.suml                 |  7 +++
 locale/en/blog/facebook-login-deprecated.md | 23 ++++++++
 locale/en/translations.suml                 |  6 +++
 locale/eo/translations.suml                 |  7 +++
 locale/es/translations.suml                 |  7 +++
 locale/fr/translations.suml                 |  7 +++
 locale/gl/translations.suml                 |  7 +++
 locale/it/translations.suml                 |  7 +++
 locale/ja/translations.suml                 |  7 +++
 locale/ko/translations.suml                 |  7 +++
 locale/lad/translations.suml                |  7 +++
 locale/nl/translations.suml                 |  7 +++
 locale/no/translations.suml                 |  7 +++
 locale/pl/translations.suml                 |  6 +++
 locale/pt/translations.suml                 |  7 +++
 locale/ru/translations.suml                 |  7 +++
 locale/sv/translations.suml                 |  7 +++
 locale/ua/translations.suml                 |  7 +++
 locale/yi/translations.suml                 |  7 +++
 locale/zh/translations.suml                 |  7 +++
 src/socialProviders.js                      | 11 ++--
 24 files changed, 220 insertions(+), 35 deletions(-)
 create mode 100644 locale/en/blog/facebook-login-deprecated.md

diff --git a/components/SocialConnection.vue b/components/SocialConnection.vue
index 4b087eaad..bebe3dd26 100644
--- a/components/SocialConnection.vue
+++ b/components/SocialConnection.vue
@@ -4,6 +4,10 @@
             <Icon :v="providerOptions.icon || provider" set="b"
                   :class="[providerOptions.icon && providerOptions.icon.endsWith('.png') ? 'mx-1 invertible' : '']"/>
             {{ providerOptions.name }}
+            <button v-if="providerOptions.deprecated" class="badge bg-light text-dark border border-warning" @click="depreciationNotice(providerOptions.deprecated)">
+                <Icon v="exclamation-triangle"/>
+                <T>user.login.deprecated</T>
+            </button>
         </span>
         <span v-if="connection === undefined">
             <template v-if="providerOptions.instanceRequired">
@@ -35,7 +39,7 @@
             </span>
             <br class="d-md-none"/>
             <a :href="(providerOptions.redirectViaHome ? `${homeUrl}/api/user/social-redirect/${provider}/${config.locale}` : `/api/connect/${provider}`) + (providerOptions.instanceRequired ? '?instance=' + connection.name.split('@')[1] : '')"
-                    class="badge bg-light text-dark border">
+               class="badge bg-light text-dark border">
                 <Icon v="sync"/>
                 <T>user.socialConnection.refresh</T>
             </a>
@@ -49,31 +53,34 @@
 </template>
 
 <script>
-    export default {
-        props: {
-            provider: { required: true },
-            providerOptions: { required: true },
-            connection: {},
-        },
-        data() {
-            return {
-                disconnecting: false,
-                homeUrl: process.env.HOME_URL,
-                formShown: false,
+export default {
+    props: {
+        provider: { required: true },
+        providerOptions: { required: true },
+        connection: {},
+    },
+    data() {
+        return {
+            disconnecting: false,
+            homeUrl: process.env.HOME_URL,
+            formShown: false,
+        }
+    },
+    methods: {
+        async disconnect() {
+            await this.$confirm(this.$t('user.socialConnection.disconnectConfirm', {email: this.$user().email}), 'danger');
+
+            this.disconnecting = true;
+            try {
+                const response = await this.$post(`/user/social-connection/${this.provider}/disconnect`);
+                this.$emit('disconnected', response);
+            } finally {
+                this.disconnecting = false;
             }
         },
-        methods: {
-            async disconnect() {
-                await this.$confirm(this.$t('user.socialConnection.disconnectConfirm', {email: this.$user().email}), 'danger');
-
-                this.disconnecting = true;
-                try {
-                    const response = await this.$post(`/user/social-connection/${this.provider}/disconnect`);
-                    this.$emit('disconnected', response);
-                } finally {
-                    this.disconnecting = false;
-                }
-            },
-        },
-    }
+        async depreciationNotice(link) {
+            await this.$alert(this.$t('user.login.depreciationNotice', {link}), 'warning');
+        }
+    },
+}
 </script>
diff --git a/components/SocialLogin.vue b/components/SocialLogin.vue
index 1d2386345..7738e0514 100644
--- a/components/SocialLogin.vue
+++ b/components/SocialLogin.vue
@@ -3,7 +3,7 @@
         <Icon :v="options.icon || provider" set="b"/>
         {{ options.name }}
 
-        <form :action="options.redirectViaHome ? `${homeUrl}/api/user/social-redirect/${provider}/${config.locale}` : `/api/connect/${provider}`"
+        <form :action="link"
               v-if="options.instanceRequired" class="input-group my-2">
             <input type="text" name="instance" class="form-control" autofocus required ref="instance"
                    :placeholder="$t('user.login.instancePlaceholder')">
@@ -19,8 +19,16 @@
               :class="[options.icon && options.icon.endsWith('.png') ? 'mx-1 invertible' : '']"/>
         {{ options.name }}
     </button>
-    <a v-else :href="options.redirectViaHome ? `${homeUrl}/api/user/social-redirect/${provider}/${config.locale}` : `/api/connect/${provider}`"
-       class="btn btn-outline-primary">
+    <a v-else-if="options.deprecated" :href="link"
+       class="btn btn-outline-secondary btn-sm"
+       @click.prevent="depreciationNotice(options.deprecated)"
+    >
+        <Icon :v="options.icon || provider" set="b"/>
+        {{ options.name }}
+    </a>
+    <a v-else :href="link"
+       class="btn btn-outline-primary"
+    >
         <Icon :v="options.icon || provider" set="b"/>
         {{ options.name }}
     </a>
@@ -38,11 +46,20 @@ export default {
             formShown: false,
         };
     },
+    computed: {
+        link() {
+            return this.options.redirectViaHome ? `${this.homeUrl}/api/user/social-redirect/${this.provider}/${this.config.locale}` : `/api/connect/${this.provider}`
+        }
+    },
     methods: {
         showForm() {
             this.formShown = true;
             this.$nextTick(() => this.$refs.instance.focus());
-        }
+        },
+        async depreciationNotice(link) {
+            await this.$confirm(this.$t('user.login.depreciationNotice', {link}), 'warning');
+            window.location.href = this.link;
+        },
     }
 };
 </script>
diff --git a/locale/_base/translations.suml b/locale/_base/translations.suml
index 66c7894f9..9f1303653 100644
--- a/locale/_base/translations.suml
+++ b/locale/_base/translations.suml
@@ -497,6 +497,12 @@ user:
             Registering lets you manage your cards ({/@example=like this one}).
         passwordless: 'The website doesn''t store any passwords. {https://avris.it/blog/passwords-are-passé=More info.}'
         instancePlaceholder: 'Instance'
+        domainPlaceholder: 'Domain'
+        deprecated: 'Deprecated'
+        depreciationNotice: >
+            This is not a reliable authentication provider.
+            <a href="%link%" target="_blank" rel="noopener">Check out this link for more details</a>.
+            We highly recommend making sure that you have a different login method available.
     code:
         action: 'Validate'
         invalid: 'Invalid code.'
diff --git a/locale/de/translations.suml b/locale/de/translations.suml
index e1e2b97a7..9205d1ca5 100644
--- a/locale/de/translations.suml
+++ b/locale/de/translations.suml
@@ -421,6 +421,13 @@ user:
             Mit der Registrierung kannst du deine Visitenkarten verwalten ({/@example=wie diese}).
         passwordless: 'Die Website speichert keine Passwörter. {https://avris.it/blog/passwords-are-passé=Weitere Infos.}'
         instancePlaceholder: 'Instanz'
+        # TODO
+        domainPlaceholder: 'Domain'
+        deprecated: 'Deprecated'
+        depreciationNotice: >
+            This is not a reliable authentication provider.
+            <a href="%link%" target="_blank" rel="noopener">Check out this link for more details</a>.
+            We highly recommend making sure that you have a different login method available.
     code:
         action: 'Validieren'
         invalid: 'Ungültiger Code.'
diff --git a/locale/en/blog/facebook-login-deprecated.md b/locale/en/blog/facebook-login-deprecated.md
new file mode 100644
index 000000000..aa513b9ab
--- /dev/null
+++ b/locale/en/blog/facebook-login-deprecated.md
@@ -0,0 +1,23 @@
+# We don't recommend using Facebook login
+
+<small>2022-04-23 | [@andrea](/@andrea)</small>
+
+We all know that Meta/Facebook is a company that couldn't give a shit about morality or users' privacy.
+But did you know they're also unfriendly towards developers and try to impose their prudish, conservative views on independent websites?
+
+This morning they've disabled two apps of mine whose whole purpose was simply to let people log in to a website using their Facebook account.
+Nothing more, no actual dependency on Facebook, just the “log in with” button.
+
+Why? One of them, [NakedAdventure](https://naked-adventure.eu/), is a map of nude beaches and contains small amounts of non-sexual nudity.
+The other, [OurSong](https://oursong.eurovote.eu/), is a harmless game where people vote for their favourite songs
+– but it's only accessible for members, so Facebook didn't like the fact that they cannot sniff around.
+They have blocked the apps without notice, making independent websites inaccessible for some users on a whim.
+
+If they think it's okay to suddenly cut people off other websites just because there was some non-sexual nudity present
+or because they weren't able to snoop around, who knows if one day they won't block Pronouns.page because of the queer content?
+After all, in countries like Russia distributing information about LGBTQ+ issues is already considered adult content.
+
+Users of Pronouns.page seem to dislike Facebook anyway – only 2.76% of you has login with Facebook set up
+(compared for example to 38,95% of people using login with Twitter).
+But to those who use it as their primary login option –
+**we strongly recommend setting up a different login method and ditching Facebook**.
diff --git a/locale/en/translations.suml b/locale/en/translations.suml
index 5e33a0f70..70c103e98 100644
--- a/locale/en/translations.suml
+++ b/locale/en/translations.suml
@@ -521,6 +521,12 @@ user:
             Registering lets you manage your cards ({/@example=like this one}).
         passwordless: 'The website doesn''t store any passwords. {https://avris.it/blog/passwords-are-passé=More info.}'
         instancePlaceholder: 'Instance'
+        domainPlaceholder: 'Domain'
+        deprecated: 'Deprecated'
+        depreciationNotice: >
+            This is not a reliable authentication provider.
+            <a href="%link%" target="_blank" rel="noopener">Check out this link for more details</a>.
+            We highly recommend making sure that you have a different login method available.
     code:
         action: 'Validate'
         invalid: 'Invalid code.'
diff --git a/locale/eo/translations.suml b/locale/eo/translations.suml
index 072ec40ab..c8c0236fc 100644
--- a/locale/eo/translations.suml
+++ b/locale/eo/translations.suml
@@ -482,6 +482,13 @@ user:
             Registering lets you manage your cards ({/@example=like this one}).
         passwordless: 'The website doesn''t store any passwords. {https://avris.it/blog/passwords-are-passé=More info.}'
         instancePlaceholder: 'Instance'
+        # TODO
+        domainPlaceholder: 'Domain'
+        deprecated: 'Deprecated'
+        depreciationNotice: >
+            This is not a reliable authentication provider.
+            <a href="%link%" target="_blank" rel="noopener">Check out this link for more details</a>.
+            We highly recommend making sure that you have a different login method available.
     code:
         action: 'Validate'
         invalid: 'Nevalida kodo.'
diff --git a/locale/es/translations.suml b/locale/es/translations.suml
index 2f8760cd2..44f89af0f 100644
--- a/locale/es/translations.suml
+++ b/locale/es/translations.suml
@@ -506,6 +506,13 @@ user:
             Registrarte te permite manejar tus tarjetas ({/@example=como esta}).
         passwordless: 'Este sitio web no guarda las contraseñas. {https://avris.it/blog/passwords-are-passé=Más información.}'
         instancePlaceholder: 'Instancia'
+        # TODO
+        domainPlaceholder: 'Domain'
+        deprecated: 'Deprecated'
+        depreciationNotice: >
+            This is not a reliable authentication provider.
+            <a href="%link%" target="_blank" rel="noopener">Check out this link for more details</a>.
+            We highly recommend making sure that you have a different login method available.
     code:
         action: 'Validar'
         invalid: 'Código inválido.'
diff --git a/locale/fr/translations.suml b/locale/fr/translations.suml
index 4391c329c..d50c33aa0 100644
--- a/locale/fr/translations.suml
+++ b/locale/fr/translations.suml
@@ -424,6 +424,13 @@ user:
             S’inscrire vous permet de gérer vos cartes ({/@example=comme celle-ci}).
         passwordless: 'Ce site ne stocke aucun mot de passe. {https://avris.it/blog/passwords-are-passé=Plus d’infos.}'
         instancePlaceholder: 'Instance'
+        # TODO
+        domainPlaceholder: 'Domain'
+        deprecated: 'Deprecated'
+        depreciationNotice: >
+            This is not a reliable authentication provider.
+            <a href="%link%" target="_blank" rel="noopener">Check out this link for more details</a>.
+            We highly recommend making sure that you have a different login method available.
     code:
         action: 'Valider'
         invalid: 'Code invalide.'
diff --git a/locale/gl/translations.suml b/locale/gl/translations.suml
index e7a537111..8140bae3f 100644
--- a/locale/gl/translations.suml
+++ b/locale/gl/translations.suml
@@ -405,6 +405,13 @@ user:
             Registrar-se te permite dirigir os cartões ({/@example=como esta}).
         passwordless: 'O site não grava qualquer senha. {https://avris.it/blog/passwords-are-passé=More info.}'
         instancePlaceholder: 'Instance' # TODO
+        # TODO
+        domainPlaceholder: 'Domain'
+        deprecated: 'Deprecated'
+        depreciationNotice: >
+            This is not a reliable authentication provider.
+            <a href="%link%" target="_blank" rel="noopener">Check out this link for more details</a>.
+            We highly recommend making sure that you have a different login method available.
     code:
         action: 'Validar'
         invalid: 'Código inválido.'
diff --git a/locale/it/translations.suml b/locale/it/translations.suml
index 22f071757..5d538411d 100644
--- a/locale/it/translations.suml
+++ b/locale/it/translations.suml
@@ -498,6 +498,13 @@ user:
             Registering lets you manage your cards ({/@example=like this one}).
         passwordless: 'The website doesn''t store any passwords. {https://avris.it/blog/passwords-are-passé=More info.}'
         instancePlaceholder: 'Instance'
+        # TODO
+        domainPlaceholder: 'Domain'
+        deprecated: 'Deprecated'
+        depreciationNotice: >
+            This is not a reliable authentication provider.
+            <a href="%link%" target="_blank" rel="noopener">Check out this link for more details</a>.
+            We highly recommend making sure that you have a different login method available.
     code:
         action: 'Validate'
         invalid: 'Invalid code.'
diff --git a/locale/ja/translations.suml b/locale/ja/translations.suml
index d3391b5e7..6f1366489 100644
--- a/locale/ja/translations.suml
+++ b/locale/ja/translations.suml
@@ -426,6 +426,13 @@ user:
             ご登録いただいた方は、カードの設定を行うことができます。({/@example=カードの例}).
         passwordless: 'このウェブサイトはパスワードを保存しません。 {https://avris.it/blog/passwords-are-passé=詳細はこちら。}'
         instancePlaceholder: 'サーバー'
+        # TODO
+        domainPlaceholder: 'Domain'
+        deprecated: 'Deprecated'
+        depreciationNotice: >
+            This is not a reliable authentication provider.
+            <a href="%link%" target="_blank" rel="noopener">Check out this link for more details</a>.
+            We highly recommend making sure that you have a different login method available.
     code:
         action: '確認'
         invalid: '無効なコード'
diff --git a/locale/ko/translations.suml b/locale/ko/translations.suml
index e5e2100d8..e25f72fa2 100644
--- a/locale/ko/translations.suml
+++ b/locale/ko/translations.suml
@@ -495,6 +495,13 @@ user:
             등록하면 카드를 ({/@example=이렇게}) 관리할 수 있습니다.
         passwordless: '웹사이트는 비밀번호를 저장하지 않습니다. {https://avris.it/blog/passwords-are-passé=추가 정보.}'
         instancePlaceholder: '사례'
+        # TODO
+        domainPlaceholder: 'Domain'
+        deprecated: 'Deprecated'
+        depreciationNotice: >
+            This is not a reliable authentication provider.
+            <a href="%link%" target="_blank" rel="noopener">Check out this link for more details</a>.
+            We highly recommend making sure that you have a different login method available.
     code:
         action: '확인'
         invalid: '유효하지 않은 코드'
diff --git a/locale/lad/translations.suml b/locale/lad/translations.suml
index 3fca1c472..e58fb2301 100644
--- a/locale/lad/translations.suml
+++ b/locale/lad/translations.suml
@@ -402,6 +402,13 @@ user:
             Rejistrarte te permete kontentarte tus kartas ({/@example=komo esta}).
         passwordless: 'Este sitio gueb no guadra las kontrasenyas. {https://avris.it/blog/passwords-are-passé=Mas informasion.}'
         instancePlaceholder: 'Instansia'
+        # TODO
+        domainPlaceholder: 'Domain'
+        deprecated: 'Deprecated'
+        depreciationNotice: >
+            This is not a reliable authentication provider.
+            <a href="%link%" target="_blank" rel="noopener">Check out this link for more details</a>.
+            We highly recommend making sure that you have a different login method available.
     code:
         action: 'Balidar'
         invalid: 'Kodiche enfirmo.'
diff --git a/locale/nl/translations.suml b/locale/nl/translations.suml
index 561dec557..e4dd88c66 100644
--- a/locale/nl/translations.suml
+++ b/locale/nl/translations.suml
@@ -424,6 +424,13 @@ user:
             Door te registreren kun je een kaart ({/@example=zoals deze}) maken.
         passwordless: 'De website slaat geen wachtwoorden op. {https://avris.it/blog/passwords-are-passé=Meer info.}'
         instancePlaceholder: 'Instantie'
+        # TODO
+        domainPlaceholder: 'Domain'
+        deprecated: 'Deprecated'
+        depreciationNotice: >
+            This is not a reliable authentication provider.
+            <a href="%link%" target="_blank" rel="noopener">Check out this link for more details</a>.
+            We highly recommend making sure that you have a different login method available.
     code:
         action: 'Valideer'
         invalid: 'Ongeldige code.'
diff --git a/locale/no/translations.suml b/locale/no/translations.suml
index f79a7e707..7e3e9ff15 100644
--- a/locale/no/translations.suml
+++ b/locale/no/translations.suml
@@ -401,6 +401,13 @@ user:
             Å registrere seg lar deg redigere kortene dine ({/@example=sånn som denne}).
         passwordless: 'Denne nettsiden lagrer ingen passord. {https://avris.it/blog/passwords-are-passé=More info.}'
         instancePlaceholder: 'Forekomst'
+        # TODO
+        domainPlaceholder: 'Domain'
+        deprecated: 'Deprecated'
+        depreciationNotice: >
+            This is not a reliable authentication provider.
+            <a href="%link%" target="_blank" rel="noopener">Check out this link for more details</a>.
+            We highly recommend making sure that you have a different login method available.
     code:
         action: 'Gyldig'
         invalid: 'Ugyldig kode.'
diff --git a/locale/pl/translations.suml b/locale/pl/translations.suml
index 5fa9e2df5..bfb42c013 100644
--- a/locale/pl/translations.suml
+++ b/locale/pl/translations.suml
@@ -1196,6 +1196,12 @@ user:
             Założenie konta pozwala na zarządzanie swoimi wizytówkami ({/@example=takimi jak ta}).
         passwordless: 'Strona nie zapisuje żadnych haseł. {https://avris.it/blog/passwords-are-passé=Więcej info.}'
         instancePlaceholder: 'Instancja'
+        domainPlaceholder: 'Domena'
+        deprecated: 'Odradzane'
+        depreciationNotice: >
+            Ten dostawca uwierzytelniania nie jest godny zaufania.
+            <a href="%link%" target="_blank" rel="noopener">Więcej szczegółów pod tym linkiem</a>.
+            Mocno polecamy włączenie innej metody uwierzytelniania.
     code:
         action: 'Sprawdź'
         invalid: 'Kod nieprawidłowy.'
diff --git a/locale/pt/translations.suml b/locale/pt/translations.suml
index fe3382d75..deb505c49 100644
--- a/locale/pt/translations.suml
+++ b/locale/pt/translations.suml
@@ -427,6 +427,13 @@ user:
             Registrar-se te permite dirigir os cartões ({/@example=como esta}).
         passwordless: 'O site não grava qualquer senha. {https://avris.it/blog/passwords-are-passé=More info.}'
         instancePlaceholder: 'Instância'
+        # TODO
+        domainPlaceholder: 'Domain'
+        deprecated: 'Deprecated'
+        depreciationNotice: >
+            This is not a reliable authentication provider.
+            <a href="%link%" target="_blank" rel="noopener">Check out this link for more details</a>.
+            We highly recommend making sure that you have a different login method available.
     code:
         action: 'Validar'
         invalid: 'Código inválido.'
diff --git a/locale/ru/translations.suml b/locale/ru/translations.suml
index 9642c176a..a22abc972 100644
--- a/locale/ru/translations.suml
+++ b/locale/ru/translations.suml
@@ -518,6 +518,13 @@ user:
             Регистрация позволяет вам управлять своими аккаунтами/карточками ({/@exemple=как, например, этой}).
         passwordless: 'Сайт не хранит пароли. {https://avris.it/blog/passwords-are-passé=Больше информации}'
         instancePlaceholder: 'инстанция'
+        # TODO
+        domainPlaceholder: 'Domain'
+        deprecated: 'Deprecated'
+        depreciationNotice: >
+            This is not a reliable authentication provider.
+            <a href="%link%" target="_blank" rel="noopener">Check out this link for more details</a>.
+            We highly recommend making sure that you have a different login method available.
     code:
         action: 'Подтвердить'
         invalid: 'Неверный код.'
diff --git a/locale/sv/translations.suml b/locale/sv/translations.suml
index a7ff0ff87..1fe66762f 100644
--- a/locale/sv/translations.suml
+++ b/locale/sv/translations.suml
@@ -476,6 +476,13 @@ user:
             Registering låter dig hantera dina kort ({/@andrea=som det här}).
         passwordless: 'Webbplatsen lagrar inga lösenord. {https://avris.it/blog/passwords-are-passé=Mer information.}'
         instancePlaceholder: 'Instans'
+        # TODO
+        domainPlaceholder: 'Domain'
+        deprecated: 'Deprecated'
+        depreciationNotice: >
+            This is not a reliable authentication provider.
+            <a href="%link%" target="_blank" rel="noopener">Check out this link for more details</a>.
+            We highly recommend making sure that you have a different login method available.
     code:
         action: 'Bekräfta'
         invalid: 'Ogiltig kod.'
diff --git a/locale/ua/translations.suml b/locale/ua/translations.suml
index 643fd8dc0..11ddd9de4 100644
--- a/locale/ua/translations.suml
+++ b/locale/ua/translations.suml
@@ -541,6 +541,13 @@ user:
             Реєстрація дозволяє вам управляти своїми акаунтами/картками ({/@exemple=як, наприклад, цією}).
         passwordless: 'Сайт не зберігає паролі. {https://avris.it/blog/passwords-are-passé=Більше інформації}'
         instancePlaceholder: 'інстанція'
+        # TODO
+        domainPlaceholder: 'Domain'
+        deprecated: 'Deprecated'
+        depreciationNotice: >
+            This is not a reliable authentication provider.
+            <a href="%link%" target="_blank" rel="noopener">Check out this link for more details</a>.
+            We highly recommend making sure that you have a different login method available.
     code:
         action: 'Підтвердити'
         invalid: 'Невірний код.'
diff --git a/locale/yi/translations.suml b/locale/yi/translations.suml
index 371a3b0bf..d52dd6fb6 100644
--- a/locale/yi/translations.suml
+++ b/locale/yi/translations.suml
@@ -395,6 +395,13 @@ user:
             Registering lets you manage your cards ({/@example=like this one}).
         passwordless: 'The website doesn''t store any passwords. {https://avris.it/blog/passwords-are-passé=More info.}'
         instancePlaceholder: 'Instance' # TODO
+        # TODO
+        domainPlaceholder: 'Domain'
+        deprecated: 'Deprecated'
+        depreciationNotice: >
+            This is not a reliable authentication provider.
+            <a href="%link%" target="_blank" rel="noopener">Check out this link for more details</a>.
+            We highly recommend making sure that you have a different login method available.
     code:
         action: 'Validate'
         invalid: 'Invalid code.'
diff --git a/locale/zh/translations.suml b/locale/zh/translations.suml
index addc05810..90066f29e 100644
--- a/locale/zh/translations.suml
+++ b/locale/zh/translations.suml
@@ -380,6 +380,13 @@ user:
             註冊可以讓你管理你的卡（{/@example=像這個}）。
         passwordless: '該網站不存儲任何密碼。 {https://avris.it/blog/passwords-are-passé=更多信息。}'
         instancePlaceholder: 'Instance' # TODO
+        # TODO
+        domainPlaceholder: 'Domain'
+        deprecated: 'Deprecated'
+        depreciationNotice: >
+            This is not a reliable authentication provider.
+            <a href="%link%" target="_blank" rel="noopener">Check out this link for more details</a>.
+            We highly recommend making sure that you have a different login method available.
     code:
         action: '證實'
         invalid: '不對代碼'
diff --git a/src/socialProviders.js b/src/socialProviders.js
index 36250a6d7..0cfd51ca9 100644
--- a/src/socialProviders.js
+++ b/src/socialProviders.js
@@ -23,14 +23,15 @@ export const socialProviders = {
         redirectViaHome: true,
         avatars: true,
     },
-    facebook: {
-        name: 'Facebook',
-        redirectViaHome: true,
-        avatars: false,
-    },
     google: {
         name: 'Google',
         redirectViaHome: true,
         avatars: true,
     },
+    facebook: {
+        name: 'Facebook',
+        redirectViaHome: true,
+        avatars: false,
+        deprecated: 'https://en.pronouns.page/blog/facebook-login-deprecated',
+    },
 }

From 4cdbf32e7e0733d156fd3a9e242f12f8ad41cc92 Mon Sep 17 00:00:00 2001
From: Andrea Vos <andrea@avris.it>
Date: Sat, 23 Apr 2022 13:04:06 +0200
Subject: [PATCH 4/4] [social] indieauth use "domain", not "instance"

---
 components/SocialConnection.vue | 2 +-
 components/SocialLogin.vue      | 2 +-
 src/socialProviders.js          | 1 +
 3 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/components/SocialConnection.vue b/components/SocialConnection.vue
index bebe3dd26..e1ca5d614 100644
--- a/components/SocialConnection.vue
+++ b/components/SocialConnection.vue
@@ -15,7 +15,7 @@
                       :action="providerOptions.redirectViaHome ? `${homeUrl}/api/user/social-redirect/${provider}/${config.locale}` : `/api/connect/${provider}`"
                       class="input-group input-group-sm">
                     <input type="text" name="instance" class="form-control" autofocus required
-                           :placeholder="$t('user.login.instancePlaceholder')"/>
+                           :placeholder="$t(providerOptions.domain ? 'user.login.domainPlaceholder' : 'user.login.instancePlaceholder')"/>
                     <button type="submit" class="btn btn-outline-secondary">
                         <Icon v="link"/>
                     </button>
diff --git a/components/SocialLogin.vue b/components/SocialLogin.vue
index 7738e0514..bc47743ce 100644
--- a/components/SocialLogin.vue
+++ b/components/SocialLogin.vue
@@ -6,7 +6,7 @@
         <form :action="link"
               v-if="options.instanceRequired" class="input-group my-2">
             <input type="text" name="instance" class="form-control" autofocus required ref="instance"
-                   :placeholder="$t('user.login.instancePlaceholder')">
+                   :placeholder="$t(options.domain ? 'user.login.domainPlaceholder' : 'user.login.instancePlaceholder')"/>
             <button type="submit" class="btn btn-outline-primary">
                 <Icon v="arrow-right"/>
             </button>
diff --git a/src/socialProviders.js b/src/socialProviders.js
index 0cfd51ca9..9c8a1e620 100644
--- a/src/socialProviders.js
+++ b/src/socialProviders.js
@@ -8,6 +8,7 @@ export const socialProviders = {
     indieauth: {
         name: 'IndieAuth',
         instanceRequired: true,
+        domain: true,
         icon: 'indieauth.png',
         iconMargin: true,
         avatars: false,