-
Release 0.6.1: IndieAuth Client Discovery Hotfix
released this
2025-11-19 19:46:53 +01:00 Critical Hotfix Release
This patch release fixes a critical production bug that prevented IndieAuth
authentication from working on public-facing deployments.Bug Fixed
Production IndieAuth authentication failed with error:
'This client_id is not registered (https://starpunk.thesatelliteoflove.com)'Root Cause
StarPunk was missing IndieAuth client discovery metadata required by
IndieLogin.com to verify the client_id. No h-app microformats markup
was present in the application HTML.Solution
Added h-app microformats markup to base.html template footer:
- Provides client identification (u-url, p-name)
- Hidden from visual display but parseable by IndieAuth servers
- Complies with IndieWeb h-app microformats specification
Changes in v0.6.1
-
Add h-app microformats for IndieAuth client discovery
-
IndieAuth authentication now works on production deployments
-
6 comprehensive tests for h-app markup (100% passing)
-
ADR-016: IndieAuth Client Discovery
-
Comprehensive analysis and implementation reports
-
Updated base.html template with h-app markup in footer
Test Results
- Total: 455/456 tests passing (99.78%)
- New: 6 tests for h-app microformats
- Regressions: None
Standards Compliance
✓ IndieAuth client discovery (h-app microformats)
✓ Microformats2 h-app specification
✓ HTML5 hidden attribute standard
✓ ARIA accessibility standardBreaking Changes
None
Migration Notes
No migration required. The fix is backward compatible and requires no
configuration changes. Simply rebuild and redeploy the container.Upgrade from v0.6.0
- Pull latest code (git pull origin main)
- Rebuild container (docker/podman build)
- Restart container
- Test IndieAuth login
Bug Classification
- Severity: Critical
- Type: Phase 3/4 regression
- Affects: All production deployments using IndieAuth
🤖 Generated with Claude Code
Co-Authored-By: Claude noreply@anthropic.comDownloads