FITstagram

generate easily-typable passwords at https://vitapavlik.cz/apps/pwdgen/

I created a small LQIP (low-quality image placeholder) script on https://vitapavlik.cz/fekt_mapa/

Phase 1: ~60 kB of resources are loaded
Phase 2: ~250 kB of resources are loaded
Phase 3: ~8000 kB of resources are loaded

The middle step could be omitted for people with fast internet, but oh well.

Aditionally, I converted all images to webp (previously it was ~12 MB of jpgs and pngs).

Now the page will be usable for people with slow connection. And because that site, just like FITstagram, allows both HTTP/2 and HTTP/3, there is no head-of-line blocking and people with fast connection will likely notice no difference 😎

FITstagram allows you to login with QR code.

The way this works is you scan the code with your phone and open the contained link in your phone's browser, where you're logged in. You then click "yes" and bam, you're logged in on the other machine.

Issues:
When I tested this, aiming my Samsung camera app at the QR code and tapping "open in browser" made it seem I was not logged in even though I was... The solution was to instead tap "copy link" and paste that into the browser. Then it worked as expected. This may be a security feature, I don't know.

How does this work?
The login page opens a websocket and waits for the server's response. Once you scan the QR code and confirm the login, server responds to that new device that the login was confirmed.

Fun fact: this is FITstagram's first use of websockets.