Remove verify_token from subscribing to hub feeds

[pstuifzand]

hub.verify_token is not used any more in the latest websub specification. It's not needed anymore and it can be removed.

[coveralls]

Coverage decreased (-0.05%) to 88.129% when pulling 0796101 on pstuifzand:pstuifzand-websub into cc7aaeb on feedbin:master.

[benubois]

Hi @pstuifzand,

Thanks for starting work on this! I think I'd like to follow the WebSub recommendation of using an unguessable URL for the subscription. As it is now, Feedbin's callback urls are guessable.

Is that something you're interested in working on?

Thanks!

[pstuifzand]

It would be great to implement the new improvements to the WebSub protocol. I have some experience with Ruby, but not much with Rails. I can try and see how far I get.

[benubois]

Ok great! Take a look at MessageVerifier. I think signing the feed_id would be a good way to make urls unguessable http://api.rubyonrails.org/classes/ActiveSupport/MessageVerifier.html

…

On Feb 1, 2018, at 10:59 PM, Peter Stuifzand ***@***.***> wrote: It would be great to implement the new improvements to the WebSub protocol. I have some experience with Ruby, but not much with Rails. I can try and see how far I get. — You are receiving this because you commented. Reply to this email directly, view it on GitHub, or mute the thread.