Is there any way to attach an outside hosted service such as Zanata or Transifex to the Fedora's fedmsg bus? Sorry if this is a naive question.
On Wed, Jul 23, 2014 at 10:24:57AM -0400, Paul W. Frields wrote:
Is there any way to attach an outside hosted service such as Zanata or Transifex to the Fedora's fedmsg bus? Sorry if this is a naive question.
Yeah, I looked into it with Transifex. They provide a pubsubhubbub-like interface which would let us bridge nicely. This is exactly how we currently interface with GitHub: https://apps.fedoraproject.org/GitHub2fedmsg Whenever an event would occur in GitHub or Transifex, they would send an http POST to a listening web service on our side. Our web service would then re-broadcast that event as a fedmsg event.
The problem with Transifex, though, is that they do not cryptographically sign their POSTs, which opens us up to.. anybody. (GitHub actually signs each POST so we know its coming from them).
I haven't looked at Zanata yet, though.
On Wed, Jul 23, 2014 at 10:51:04AM -0400, Ralph Bean wrote:
On Wed, Jul 23, 2014 at 10:24:57AM -0400, Paul W. Frields wrote:
Is there any way to attach an outside hosted service such as Zanata or Transifex to the Fedora's fedmsg bus? Sorry if this is a naive question.
Yeah, I looked into it with Transifex. They provide a pubsubhubbub-like interface which would let us bridge nicely. This is exactly how we currently interface with GitHub: https://apps.fedoraproject.org/GitHub2fedmsg Whenever an event would occur in GitHub or Transifex, they would send an http POST to a listening web service on our side. Our web service would then re-broadcast that event as a fedmsg event.
The problem with Transifex, though, is that they do not cryptographically sign their POSTs, which opens us up to.. anybody. (GitHub actually signs each POST so we know its coming from them).
I haven't looked at Zanata yet, though.
ISTM we have an untapped stream of contributions we could recognize if the translation system (whichever it is) would sign those POSTs. I'm not sure whether glezos is on this list, but I'll ask him whether this is an interesting RFE, and do the same for Zanata.
On 2014-07-24 03:02, Paul W. Frields wrote:
On Wed, Jul 23, 2014 at 10:51:04AM -0400, Ralph Bean wrote:
On Wed, Jul 23, 2014 at 10:24:57AM -0400, Paul W. Frields wrote:
Is there any way to attach an outside hosted service such as Zanata or Transifex to the Fedora's fedmsg bus? Sorry if this is a naive question.
Yeah, I looked into it with Transifex. They provide a pubsubhubbub-like interface which would let us bridge nicely. This is exactly how we currently interface with GitHub: https://apps.fedoraproject.org/GitHub2fedmsg Whenever an event would occur in GitHub or Transifex, they would send an http POST to a listening web service on our side. Our web service would then re-broadcast that event as a fedmsg event.
The problem with Transifex, though, is that they do not cryptographically sign their POSTs, which opens us up to.. anybody. (GitHub actually signs each POST so we know its coming from them).
I haven't looked at Zanata yet, though.
ISTM we have an untapped stream of contributions we could recognize if the translation system (whichever it is) would sign those POSTs. I'm not sure whether glezos is on this list, but I'll ask him whether this is an interesting RFE, and do the same for Zanata.
Zanata doesn't integrate with any buses yet, but a concrete use case will help, so please feel free to submit an RFE.
https://bugzilla.redhat.com/enter_bug.cgi?product=Zanata
On Thu, Jul 24, 2014 at 12:12:54PM +1000, Sean Flanigan wrote:
On 2014-07-24 03:02, Paul W. Frields wrote:
On Wed, Jul 23, 2014 at 10:51:04AM -0400, Ralph Bean wrote:
On Wed, Jul 23, 2014 at 10:24:57AM -0400, Paul W. Frields wrote:
Is there any way to attach an outside hosted service such as Zanata or Transifex to the Fedora's fedmsg bus? Sorry if this is a naive question.
Yeah, I looked into it with Transifex. They provide a pubsubhubbub-like interface which would let us bridge nicely. This is exactly how we currently interface with GitHub: https://apps.fedoraproject.org/GitHub2fedmsg Whenever an event would occur in GitHub or Transifex, they would send an http POST to a listening web service on our side. Our web service would then re-broadcast that event as a fedmsg event.
The problem with Transifex, though, is that they do not cryptographically sign their POSTs, which opens us up to.. anybody. (GitHub actually signs each POST so we know its coming from them).
I haven't looked at Zanata yet, though.
ISTM we have an untapped stream of contributions we could recognize if the translation system (whichever it is) would sign those POSTs. I'm not sure whether glezos is on this list, but I'll ask him whether this is an interesting RFE, and do the same for Zanata.
Zanata doesn't integrate with any buses yet, but a concrete use case will help, so please feel free to submit an RFE.
One use case would be for rewarding Fedora translation contributors with badges via the Fedora Badges app[1]. Having translation submissions trigger a message on the fedmsg bus allows the Badges app to record and award those. Our experience has shown community members like receiving these badges and exhibiting them for the accomplishments and contributions they represent.
Ralph, would you be willing to file the RFE with details on signing the POSTs to prevent abuse?
= = = [1] http://badges.fedoraproject.org/
----- Original Message -----
From: "Paul W. Frields" stickster@gmail.com To: infrastructure@lists.fedoraproject.org Sent: Thursday, July 24, 2014 3:14:05 PM Subject: Re: L10n fedmsg integration?
On Thu, Jul 24, 2014 at 12:12:54PM +1000, Sean Flanigan wrote:
On 2014-07-24 03:02, Paul W. Frields wrote:
On Wed, Jul 23, 2014 at 10:51:04AM -0400, Ralph Bean wrote:
On Wed, Jul 23, 2014 at 10:24:57AM -0400, Paul W. Frields wrote:
Is there any way to attach an outside hosted service such as Zanata or Transifex to the Fedora's fedmsg bus? Sorry if this is a naive question.
Yeah, I looked into it with Transifex. They provide a pubsubhubbub-like interface which would let us bridge nicely. This is exactly how we currently interface with GitHub: https://apps.fedoraproject.org/GitHub2fedmsg Whenever an event would occur in GitHub or Transifex, they would send an http POST to a listening web service on our side. Our web service would then re-broadcast that event as a fedmsg event.
The problem with Transifex, though, is that they do not cryptographically sign their POSTs, which opens us up to.. anybody. (GitHub actually signs each POST so we know its coming from them).
I haven't looked at Zanata yet, though.
ISTM we have an untapped stream of contributions we could recognize if the translation system (whichever it is) would sign those POSTs. I'm not sure whether glezos is on this list, but I'll ask him whether this is an interesting RFE, and do the same for Zanata.
Zanata doesn't integrate with any buses yet, but a concrete use case will help, so please feel free to submit an RFE.
One use case would be for rewarding Fedora translation contributors with badges via the Fedora Badges app[1]. Having translation submissions trigger a message on the fedmsg bus allows the Badges app to record and award those. Our experience has shown community members like receiving these badges and exhibiting them for the accomplishments and contributions they represent.
Ralph, would you be willing to file the RFE with details on signing the POSTs to prevent abuse?
= = = [1] http://badges.fedoraproject.org/ -- Paul W. Frields http://paul.frields.org/ gpg fingerprint: 3DA6 A0AC 6D58 FEC4 0233 5906 ACDB C937 BD11 3717 http://redhat.com/ - - - - http://pfrields.fedorapeople.org/ The open source story continues to grow: http://opensource.com _______________________________________________ infrastructure mailing list infrastructure@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/infrastructure
I'd be more than willing to help out with getting Fedmsg integrated and hooking up translation badges. Let me know if there's anything I can do.
-- oddshocks
On Thu, Jul 24, 2014 at 03:14:05PM -0400, Paul W. Frields wrote:
On Thu, Jul 24, 2014 at 12:12:54PM +1000, Sean Flanigan wrote:
On 2014-07-24 03:02, Paul W. Frields wrote:
On Wed, Jul 23, 2014 at 10:51:04AM -0400, Ralph Bean wrote:
On Wed, Jul 23, 2014 at 10:24:57AM -0400, Paul W. Frields wrote:
Is there any way to attach an outside hosted service such as Zanata or Transifex to the Fedora's fedmsg bus? Sorry if this is a naive question.
Yeah, I looked into it with Transifex. They provide a pubsubhubbub-like interface which would let us bridge nicely. This is exactly how we currently interface with GitHub: https://apps.fedoraproject.org/GitHub2fedmsg Whenever an event would occur in GitHub or Transifex, they would send an http POST to a listening web service on our side. Our web service would then re-broadcast that event as a fedmsg event.
The problem with Transifex, though, is that they do not cryptographically sign their POSTs, which opens us up to.. anybody. (GitHub actually signs each POST so we know its coming from them).
I haven't looked at Zanata yet, though.
ISTM we have an untapped stream of contributions we could recognize if the translation system (whichever it is) would sign those POSTs. I'm not sure whether glezos is on this list, but I'll ask him whether this is an interesting RFE, and do the same for Zanata.
Zanata doesn't integrate with any buses yet, but a concrete use case will help, so please feel free to submit an RFE.
One use case would be for rewarding Fedora translation contributors with badges via the Fedora Badges app[1]. Having translation submissions trigger a message on the fedmsg bus allows the Badges app to record and award those. Our experience has shown community members like receiving these badges and exhibiting them for the accomplishments and contributions they represent.
Ralph, would you be willing to file the RFE with details on signing the POSTs to prevent abuse?
Not at all. I sent it up this morning: https://bugzilla.redhat.com/show_bug.cgi?id=1122776
On Jul 23, 2014 5:51 PM, "Ralph Bean" rbean@redhat.com wrote:
The problem with Transifex, though, is that they do not cryptographically sign their POSTs, which opens us up to.. anybody. (GitHub actually signs each POST so we know its coming from them).
Ralph, can you please send an email to support@transifex.com with the info needed to get this on our roadmap?
D
On Wed, Jul 23, 2014 at 10:05:44PM +0300, Dimitris Glezos wrote:
On Jul 23, 2014 5:51 PM, "Ralph Bean" rbean@redhat.com wrote:
The problem with Transifex, though, is that they do not cryptographically sign their POSTs, which opens us up to.. anybody. (GitHub actually signs each POST so we know its coming from them).
Ralph, can you please send an email to support@transifex.com with the info needed to get this on our roadmap?
Sure thing. I asked a question about it previously, but the link doesn't seem to work anymore:
http://support.transifex.com/customer/en/portal/questions/6100078-webhook-si...
I'll email off more info shortly.
infrastructure@lists.fedoraproject.org