Congratulations!

[Valid RSS] This is a valid RSS feed.

Recommendations

This feed is valid, but interoperability with the widest range of feed readers could be improved by implementing the following recommendations.

Source: http://akrabat.com/feed/

  1. <?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
  2. xmlns:content="http://purl.org/rss/1.0/modules/content/"
  3. xmlns:wfw="http://wellformedweb.org/CommentAPI/"
  4. xmlns:dc="http://purl.org/dc/elements/1.1/"
  5. xmlns:atom="http://www.w3.org/2005/Atom"
  6. xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
  7. xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
  8. >
  9.  
  10. <channel>
  11. <title>Rob Allen</title>
  12. <atom:link href="https://akrabat.com/feed/" rel="self" type="application/rss+xml" />
  13. <link>https://akrabat.com</link>
  14. <description>Pragmatism in today&#039;s world</description>
  15. <lastBuildDate>Tue, 30 Sep 2025 08:45:43 +0000</lastBuildDate>
  16. <language>en-US</language>
  17. <sy:updatePeriod>
  18. hourly </sy:updatePeriod>
  19. <sy:updateFrequency>
  20. 1 </sy:updateFrequency>
  21. <generator>https://wordpress.org/?v=6.8.3</generator>
  22. <item>
  23. <title>mac-volume: A CLI to control device volume</title>
  24. <link>https://akrabat.com/mac-volume-a-cli-to-control-device-volume/</link>
  25. <comments>https://akrabat.com/mac-volume-a-cli-to-control-device-volume/#respond</comments>
  27. <dc:creator><![CDATA[Rob]]></dc:creator>
  28. <pubDate>Tue, 07 Oct 2025 10:00:00 +0000</pubDate>
  29. <category><![CDATA[Mac]]></category>
  30. <category><![CDATA[Swift]]></category>
  31. <guid isPermaLink="false">https://akrabat.com/?p=7512</guid>
  32.  
  33. <description><![CDATA[I've set my Mac up such that video calls such as Zoom use the microphone and earphones attached to my Behringer UMC204HD, which all other audio plays through the my normal speakers which are the default. One issue I have with this is that it's quite hard to change the volume when a call as the volume buttons on the Mac are connected to the default output. This finally annoyed me enough that I looked… <a href="https://akrabat.com/mac-volume-a-cli-to-control-device-volume/">continue reading</a>.]]></description>
  34. <content:encoded><![CDATA[<p>I've set my Mac up such that video calls such as Zoom use the microphone and earphones attached to my <a href="https://www.behringer.com/product.html?modelCode=0805-AAS">Behringer UMC204HD</a>, which all other audio plays through the my normal speakers which are the default.</p>
  35. <p>One issue I have with this is that it's quite hard to change the volume when a call as the volume buttons on the Mac are connected to the default output. This finally annoyed me enough that I looked into how to control the volume of a device and wrote a little command line utility for this, so that I could attach it to buttons on my <a href="https://akrabat.com/controlling-the-streamdeck-via-keyboard-maestro/">StreamDeck using Keyboard Maestro</a>.</p>
  36. <h2>Changing the volume</h2>
  37. <p>The way to control the volume on a Mac programmatically is to use Core Audio, specifically <a href="https://developer.apple.com/documentation/coreaudio/audioobjectsetpropertydata(_:_:_:_:_:_:)?language=objc"><tt>AudioObjectSetPropertyData()</tt></a>. This function takes a <tt>deviceID</tt> and some other properties, including <tt>volume</tt>. The <tt>deviceID</tt> is of type <a href="https://developer.apple.com/documentation/coreaudio/audiodeviceid"><tt>AudioDeviceID</tt></a> and the <tt>volume</tt> is a floating point number between <tt>0</tt> and <tt>1</tt>.</p>
  38. <p>It's not easy to remember device IDs, so I decided to use the device name instead and map the volume to between 0 and 100. This makes it easy to say set the volume to 10%:</p>
  39. <pre>
  40. mac-volume "MacBook Pro Speakers" set 10
  41. </pre>
  42. <p>To get the list of device names, I wrote a <tt>list-devices</tt> command. The list is available from <tt>AudioObjectGetPropertyData()</tt> which returns list of <tt>AudioDeviceID</tt> items. The name is in the <tt>kAudioObjectPropertyName</tt> selector, so that's easy enough.</p>
  43. <p>The main trouble is that CoreAudio is a C API and so dealing with it from Swift involves use of references and <a href="https://developer.apple.com/documentation/swift/unsafemutablepointer">UnsafeMutablePointer</a> which is a bit hairy as it's been a while since I've had to worry about pointers!</p>
  44. <h3>Increment and decrement</h3>
  45. <p>While you can get the current volume, add to it and then set to increase the volume, it's easier to let the app do it, so <tt>mac-volume</tt> also supports incrementing and decrementing by an amount. These are the two command that I bind to StreamDeck keys.</p>
  46. <picture><source  
  47. srcset="https://akrabat.com/wp-content/uploads/2025/09/2025mac-vol-down-dark.png"
  48.        media="(prefers-color-scheme: dark)"
  49.    /><source
  50. srcset="https://akrabat.com/wp-content/uploads/2025/09/2025mac-vol-down-light.png"
  51.        media="(prefers-color-scheme: light), (prefers-color-scheme: no-preference)"
  52.    /><br />
  53.    <img decoding="async" src="https://akrabat.com/wp-content/uploads/2025/09/2025mac-vol-down-light.png" loading="lazy" alt="Keyboard Maestro configuration for mac-volume down" class="border" width="550"/>
  54. </picture>
  55. <p>I found that a step size of 3 was a good choice for raising/lowering the volume with a reasonable number of presses of the key.</p>
  56. <h3>It's on GitHub</h3>
  57. <p>If you need to control the volume of a non-default audio device from the command line, <tt>mac-volume</tt> is on GitHub at <a href="https://github.com/akrabat/mac-volume">akrabat/mac-volume</a>.</p>
  58. ]]></content:encoded>
  60. <wfw:commentRss>https://akrabat.com/mac-volume-a-cli-to-control-device-volume/feed/</wfw:commentRss>
  61. <slash:comments>0</slash:comments>
  64. </item>
  65. <item>
  66. <title>Opening Slack Jira Cloud links in the right browser</title>
  67. <link>https://akrabat.com/opening-slack-jira-cloud-app-links-in-the-right-browser/</link>
  68. <comments>https://akrabat.com/opening-slack-jira-cloud-app-links-in-the-right-browser/#respond</comments>
  70. <dc:creator><![CDATA[Rob]]></dc:creator>
  71. <pubDate>Tue, 30 Sep 2025 10:00:00 +0000</pubDate>
  72. <category><![CDATA[Computing]]></category>
  73. <guid isPermaLink="false">https://akrabat.com/?p=7499</guid>
  74.  
  75. <description><![CDATA[I use OpenIn to open links in a given browser when I click on them in other applications. This is really helpful to keep various work related stuff in different browsers or profiles and I find it very helpful. One thing that's bothered me is that links from the Jira Cloud Slack App ignore my OpenIn rules and always open in Safari and I finally sat down to work out why. The investigation I create… <a href="https://akrabat.com/opening-slack-jira-cloud-app-links-in-the-right-browser/">continue reading</a>.]]></description>
  76. <content:encoded><![CDATA[<p>I use <a href="https://loshadki.app/openin4/">OpenIn</a> to open links in a given browser when I click on them in other applications. This is really helpful to keep various work related stuff in different browsers or profiles and I find it very helpful.</p>
  77. <p>One thing that's bothered me is that links from the <a href="https://slack.com/marketplace/A2RPP3NFR-jira-cloud">Jira Cloud Slack App</a> ignore my OpenIn rules and always open in Safari and I finally sat down to work out why.</p>
  78. <h2>The investigation</h2>
  79. <p>I create a new OpenIn rule and enabled multiple browsers so that OpenIn would present a choice window to me.</p>
  80. <p>It looks like this</p>
  81. <picture><source  
  82. srcset="https://akrabat.com/wp-content/uploads/2025/09/2025slack-app-linkopen-in-choices-dark.png"
  83.        media="(prefers-color-scheme: dark)"
  84.    /><source
  85. srcset="https://akrabat.com/wp-content/uploads/2025/09/2025slack-app-linkopen-in-choices-light.png"
  86.        media="(prefers-color-scheme: light), (prefers-color-scheme: no-preference)"
  87.    /><br />
  88.    <img decoding="async" src="https://akrabat.com/wp-content/uploads/2025/09/2025slack-app-linkopen-in-choices-light.png" loading="lazy" alt="Slack app linkopen in choices light." class="no-border" width="266"/>
  89. </picture>
  90. <p>At the bottom, we can see the link that OpenIn has received.</p>
  91. <p>Even though the presented URL in the Slack app is <tt>https://my-client.atlassian.net/browser/PROJ-123</tt>, and if you right click and copy link, that's what you get in your clipboard, when you <em>click</em> on the link, you get a slack.com link.</p>
  92. <p>Copying that link, it's of the form: <tt>https://slack.com/openid/connect/login_initiate_redirect?login_hint=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.blah.blah</tt>. </p>
  93. <p>That's interesting! I've seen that <tt>eyJhbGci</tt> prefix often enough to know on sight that it's the start of base64 encoded <a href="https://www.rfc-editor.org/rfc/rfc7519">JWT</a> and sure enough, base64 decoding it proved that it was.</p>
  94. <p>The format of JWT is <tt>{header}.{payload}.{signature}</tt> and it's unencrypted, so we can inspect the payload easily enough. This is redacted, but it's of the form:</p>
  95. <pre>
  96. {
  97.  "aud" : "123456789.123456789",
  98.  "auth_time" : 1758615553,
  99.  "exp" : 1758619153,
  100.  "https://slack.com/target_uri" : "https://{my-client}.atlassian.net/browse/PROJ-123",
  101.  "https://slack.com/team_id" : "ABCDEFGHI",
  102.  "https://slack.com/user_id" : "U01AB2CDEF3",
  103.  "iat" : 1758615553,
  104.  "iss" : "https://slack.com",
  105.  "sub" : "rob@{my-client}.com"
  106. }
  107. </pre>
  108. <p>We can see that the URL that we want to go to is in the payload's <tt>"https://slack.com/target_uri"</tt> property, so we <em>just</em> need to set up OpenIn to use that URL and pick the appropriate browser.</p>
  109. <h2>OpenIn's custom scripts</h2>
  110. <p>One really nice feature of OpenIn is that you can write <a href="https://loshadki.app/openin4/080-javascript-for-rule/">custom scripts for a rule</a>, so we can use this to extract the payload and pick the browser.</p>
  111. <p>So I read the web page and wrote some Javascript!</p>
  112. <p>The work we need to do is:</p>
  113. <ol>
  114. <li>Extract the payload from the query parameter</li>
  115. <li>JSON decode it</li>
  116. <li>Read the target_uri</li>
  117. <li>Choose browser based on target_uri</li>
  118. </ol>
  119. <p>This needs a few helper functions</p>
  120. <h3>Helper functions</h3>
  121. <p>Extracting the payload is straightforward JS. We need the text between the two <tt>.</tt>s:</p>
  122. <pre lang="javascript">
  123. function extractJwtPayload(str) {
  124.    const parts = str.split('.');
  125.    return parts.length >= 3 ? parts[1] : '';
  126. }
  127. </pre>
  128. <p>As OpenIn uses WebKit's <a href="https://docs.webkit.org/Deep%20Dive/JSC/JavaScriptCore.html">JavaScriptCore</a>, we can decode base64 using <tt>Uint8Array.fromBase64()</tt>:</p>
  129. <pre lang="javascript">
  130. function base64Decode(str) {
  131.    const uint8Array = Uint8Array.fromBase64(str);
  132.    return String.fromCharCode(...uint8Array);
  133. }
  134. </pre>
  135. <p>We also need to select the browser that we want the link to open in. This is done in OpenIn by setting all the "visible" browsers to false, except the one you want:</p>
  136. <pre lang="javascript">
  137. function selectBrowser(browser) {
  138.    let apps = ctx.getApps()
  139.    apps.forEach(function (app) {
  140.        app.visible = (app.name == browser)
  141.    })
  142. }
  143. </pre>
  144. <h3>Do the work</h3>
  145. <p>Having set everything up, we can now find the <tt>target_uri</tt> and choose the browser. </p>
  146. <p>Firstly we only want to do this work if the source app is Slack and that we have a <tt>login_hint</tt> parameter:</p>
  147. <pre lang="javascript">
  148. if (ctx.getSourceApp().path.startsWith("/Applications/Slack.app")
  149.    && ctx.url.searchParams.has('login_hint')) {
  150. </pre>
  151. <p>Extracting the <tt>target_uri</tt> is a case of using the functions we've written:</p>
  152. <pre lang="javascript">
  153. const login_hint = ctx.url.searchParams.get('login_hint');
  154. const jwtPayload = extractJwtPayload(login_hint);
  155. const payload = base64Decode(jwtPayload).replace(/\0/g, '');
  156. const data = JSON.parse(payload);
  157. const target_uri = data['https://slack.com/target_uri'];
  158. </pre>
  159. <p>Note that I discovered some null bytes during testing, so removed them from the decoded string.</p>
  160. <p>Now we set OpenIn's URI and select the browser we want:</p>
  161. <pre>
  162. // Set OpenIn's URL
  163. ctx.url.href=target_uri;
  164.  
  165. // Select the browser
  166. if (target_uri.includes("my-client-1")) {
  167.    selectBrowser("Firefox");
  168.    return;
  169. }
  170.  
  171. if (target_uri.includes("my-client-2")) {
  172.    selectBrowser("Firefox");
  173.    return;
  174. }
  175.  
  176. // Default to Safari
  177. selectBrowser("Safari");
  178. return;
  179. </pre>
  180. <p>and we're done.</p>
  181. <h2>That's it</h2>
  182. <p>That's it! Whenever I click on a Jira link in Slack, the correct browser opens directly to where I want to go.</p>
  183. <p>The full script is here: <a href="https://akrabat.com/wp-content/uploads/2025-09-openin-slack-app-link.js">openin-slack-app-link.js</a></p>
  184. ]]></content:encoded>
  186. <wfw:commentRss>https://akrabat.com/opening-slack-jira-cloud-app-links-in-the-right-browser/feed/</wfw:commentRss>
  187. <slash:comments>0</slash:comments>
  190. </item>
  191. <item>
  192. <title>Fixing PostgreSQL collation version mismatch</title>
  193. <link>https://akrabat.com/fixing-postgresql-collation-version-mismatch/</link>
  194. <comments>https://akrabat.com/fixing-postgresql-collation-version-mismatch/#respond</comments>
  196. <dc:creator><![CDATA[Rob]]></dc:creator>
  197. <pubDate>Tue, 23 Sep 2025 10:00:00 +0000</pubDate>
  198. <category><![CDATA[PostgreSQL]]></category>
  199. <guid isPermaLink="false">https://akrabat.com/?p=7493</guid>
  200.  
  201. <description><![CDATA[After pulling a new version of the Docker PostgreSQL container, I started getting this warning: WARNING: database "dev" has a collation version mismatch DETAIL: The database was created using collation version 2.36, but the operating system provides version 2.41. HINT: Rebuild all objects in this database that use the default collation and run ALTER DATABASE dev REFRESH COLLATION VERSION, or build PostgreSQL with the right library version. This seems to have occurred because the underlying… <a href="https://akrabat.com/fixing-postgresql-collation-version-mismatch/">continue reading</a>.]]></description>
  202. <content:encoded><![CDATA[<p>After pulling a new version of the Docker PostgreSQL container, I started getting this warning:</p>
  203. <pre>
  204. WARNING:  database "dev" has a collation version mismatch
  205. DETAIL:  The database was created using collation version 2.36, but the operating system provides version 2.41.
  206. HINT:  Rebuild all objects in this database that use the default collation and run ALTER DATABASE dev REFRESH COLLATION VERSION, or build PostgreSQL with the right library version.
  207. </pre>
  208. <p>This seems to have occurred because the underlying OS was changed to Trixie from Bullseye for the default image. i.e. I used:</p>
  209. <pre>
  210. image: postgres:17
  211. </pre>
  212. <p>Rather than:</p>
  213. <pre>
  214. image: postgres:17-bookworm
  215. </pre>
  216. <p>This is on my dev machine, so it's not a major problem as usually I can just blow away the database and recreate it. However, I have some test data that I don't want to lose quite yet, so I took a backup using <tt>pg_dump</tt> and then did this instead:</p>
  217. <pre>
  218. REINDEX DATABASE dev;
  219. ALTER DATABASE dev REFRESH COLLATION VERSION;
  220. </pre>
  221. <p>The warning's now gone. </p>
  222. <p>Of course, in production, you'll want to be a bit more careful and a <tt>pg_dump</tt> and load is more likely to avoid any risks of corruption. As ever, YMMV.</p>
  223. ]]></content:encoded>
  225. <wfw:commentRss>https://akrabat.com/fixing-postgresql-collation-version-mismatch/feed/</wfw:commentRss>
  226. <slash:comments>0</slash:comments>
  229. </item>
  230. <item>
  231. <title>Jumping to the end of bash&#039;s history</title>
  232. <link>https://akrabat.com/jumping-to-the-end-of-bashs-history/</link>
  233. <comments>https://akrabat.com/jumping-to-the-end-of-bashs-history/#respond</comments>
  235. <dc:creator><![CDATA[Rob]]></dc:creator>
  236. <pubDate>Tue, 16 Sep 2025 10:00:00 +0000</pubDate>
  237. <category><![CDATA[Command Line]]></category>
  238. <category><![CDATA[Shell Scripting]]></category>
  239. <guid isPermaLink="false">https://akrabat.com/?p=7490</guid>
  240.  
  241. <description><![CDATA[I use bash's history all the time, via ctrl+r and also with the up and down keys; it's wonderful. Sometimes, I want to get back to the end of my history and I recently discovered that there's a shortcut for this: meta+&#62;. It doesn't matter where you are in your history, pressing meta+&#62; jumps you to the end and you have a blank prompt again. I use iTerm2 on my Mac and have my right… <a href="https://akrabat.com/jumping-to-the-end-of-bashs-history/">continue reading</a>.]]></description>
  242. <content:encoded><![CDATA[<p>I use bash's history all the time, via <tt>ctrl+r</tt> and also with the <a href="https://akrabat.com/context-specific-history-at-the-bash-prompt/"><tt>up and down keys</tt></a>; it's wonderful.</p>
  243. <p>Sometimes, I want to get back to the end of my history and I recently discovered that there's a shortcut for this: <tt>meta+&gt;</tt>. It doesn't matter where you are in your history, pressing <tt>meta+&gt;</tt> jumps you to the end and you have a blank prompt again.</p>
  244. <p>I use <a href="https://iterm2.com">iTerm2</a> on my Mac and have my right hand <tt>option</tt> key set to <tt>meta</tt>. This is done in Settings→Profiles→Keys, setting "Right Option (C) key:" to "Esc+".</p>
  245. <p>However, to press <tt>meta+&gt;</tt>, I need to do <tt>right-option+shift+.</tt> which isn't as easy as <tt>right-option+.</tt>, so let's rebind!</p>
  246. <p>To rebind, I looked up the bash command for this functionality (`end-of-history`),  and then added this to my <tt>.bashrc</tt>:</p>
  247. <pre>
  248. bind '"\e.": end-of-history'
  249. </pre>
  250. <p>All done. Now I just press <tt>right-option+.</tt> and I'm back at the end of history as if I'd never navigated it.</p>
  251. ]]></content:encoded>
  253. <wfw:commentRss>https://akrabat.com/jumping-to-the-end-of-bashs-history/feed/</wfw:commentRss>
  254. <slash:comments>0</slash:comments>
  257. </item>
  258. <item>
  259. <title>Converting JWKS JSON to PEM using Python</title>
  260. <link>https://akrabat.com/converting-jwks-json-to-pem-using-python/</link>
  261. <comments>https://akrabat.com/converting-jwks-json-to-pem-using-python/#respond</comments>
  263. <dc:creator><![CDATA[Rob]]></dc:creator>
  264. <pubDate>Tue, 09 Sep 2025 10:00:00 +0000</pubDate>
  265. <category><![CDATA[Command Line]]></category>
  266. <category><![CDATA[Python]]></category>
  267. <guid isPermaLink="false">https://akrabat.com/?p=7484</guid>
  268.  
  269. <description><![CDATA[Following on from my earlier exploration of JWKS (RFC7517), I found myself needing to convert the JWKS into PEM format. This time I turned to Python with my preference of using uv with inline script metadata and created jwks-to-pem.py. The really nice thing about inline script metadata is that we can use the cryptography package to do all the hard work with RSA and serialisation. We just have to remember that the base64 encoded values… <a href="https://akrabat.com/converting-jwks-json-to-pem-using-python/">continue reading</a>.]]></description>
  270. <content:encoded><![CDATA[<p>Following on from my <a href="https://akrabat.com/creating-jwks-json-file-in-php/">earlier exploration of JWKS</a> (<a href="https://www.rfc-editor.org/rfc/rfc7517">RFC7517</a>), I found myself needing to convert the JWKS into PEM format.</p>
  271. <p>This time I turned to Python with my preference of using <a href="https://github.com/astral-sh/uv">uv</a> with <a href="https://akrabat.com/defining-python-dependencies-at-the-top-of-the-file/">inline script metadata</a> and created <a href="#script"><tt>jwks-to-pem.py</tt></a>.</p>
  272. <p>The really nice thing about inline script metadata is that we can use the <a href="https://pypi.org/project/cryptography/">cryptography package</a> to do all the hard work with RSA and serialisation. We just have to remember that the base64 encoded values are <a href="https://datatracker.ietf.org/doc/html/rfc4648#section-5">base64 URL encoded</a> and account for it.</p>
  273. <p>As a single file python script, I make it executable with <tt>chmod +x jwks-to-pem.py</tt> and made it so that I can pipe the output of a <a href="https://curl.se">curl</a> call to it, or pass in a JSON file. I prefer to use the <tt>curl</tt> solution though with:</p>
  274. <pre>
  275. curl -s https://example.com/.well-known/jwks.json | jwks-to-pem.py
  276. </pre>
  277. <h3>Example</h3>
  278. <p>Here's an example from the <a href="https://developer.api.apps.cam.ac.uk/docs/oauth2/1/routes/.well-known/jwks.json/get">University of Cambridge</a>.</p>
  279. <p>On the day I wrote this article, the JWKS looks like this:</p>
  280. <pre>
  281. $ curl -s https://api.apps.cam.ac.uk/oauth2/v1/.well-known/jwks.json
  282. {
  283.  "keys": [
  284.    {
  285.      "alg": "RS256",
  286.      "e": "AQAB",
  287.      "n": "6kKjjctVPalX0ypJ2irwog8xIXS9JTABqrSnK_n3YJ4q0aH2-1bjGbWz8p1CaCUqDxQSDuqzvOgMdNGvZrxlNJ-G8hfc39jrb_KnB0T3ZsuxFz6X0mDzmHhdiPjSDK3M0syC4qg5_PB7xwKail5VWOcY0SypIYCPD6Ct5DGnQ_XONGXIVG7eaJAHdxJp2BOz0n3BVEFnZUgM5JcfGrSFfGqb0ZotX2AblwjZKQc58E0EVVykJw8gxW1Bob8rbaVXlMHssfY-9Jx0zua7ZrjO5C4OMmt9J6zYbVnGVwf62ehGtcLSP6iCG4_XM2sAMQwqJnPBss0U9WwDERk17FMHvb_FBwxAFxRygd0DclWmQmCYr5uFYck57KGARtyoxrNNAf4AFUHuObjbV24TyInYEgMhKi3SAML_4ke3dbbG-mjchXPN9OqNd4fydnQIP39WFHmFNk_nIlqvYnALI4xPE-w09T9jCvjU8hYHHlVMRvRluBnUzJkFnxLse5W-agC6ITe3wYvKH7SHVp6MYQWVD_0I2rCLV4gqjSpXzKIMs5eejjTQQq0VYumgL_f1ETvzDoewzXLOC8GGu2LZDwDbP0ea6DchReWjZfj4nJx23uQyGAj1h_uPI1jCd9oeJhbN8jFz2ltYgXYBp51qdSzsbtdec9BPPBVeXjI--c0AWU8",
  288.      "kid": "70e0ed3c",
  289.      "kty": "RSA",
  290.      "use": "sig"
  291.    }
  292.  ]
  293. }
  294. </pre>
  295. <p>They very kindly pretty-print it too!</p>
  296. <p>We can then get the PEM version by piping to <tt>jwks-to-pem.py</tt>:</p>
  297. <pre>
  298. $ curl -s https://api.apps.cam.ac.uk/oauth2/v1/.well-known/jwks.json | jwks-to-pem.py
  299. # Key 0 (kid: 70e0ed3c)
  300. -----BEGIN PUBLIC KEY-----
  301. MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA6kKjjctVPalX0ypJ2irw
  302. og8xIXS9JTABqrSnK/n3YJ4q0aH2+1bjGbWz8p1CaCUqDxQSDuqzvOgMdNGvZrxl
  303. NJ+G8hfc39jrb/KnB0T3ZsuxFz6X0mDzmHhdiPjSDK3M0syC4qg5/PB7xwKail5V
  304. WOcY0SypIYCPD6Ct5DGnQ/XONGXIVG7eaJAHdxJp2BOz0n3BVEFnZUgM5JcfGrSF
  305. fGqb0ZotX2AblwjZKQc58E0EVVykJw8gxW1Bob8rbaVXlMHssfY+9Jx0zua7ZrjO
  306. 5C4OMmt9J6zYbVnGVwf62ehGtcLSP6iCG4/XM2sAMQwqJnPBss0U9WwDERk17FMH
  307. vb/FBwxAFxRygd0DclWmQmCYr5uFYck57KGARtyoxrNNAf4AFUHuObjbV24TyInY
  308. EgMhKi3SAML/4ke3dbbG+mjchXPN9OqNd4fydnQIP39WFHmFNk/nIlqvYnALI4xP
  309. E+w09T9jCvjU8hYHHlVMRvRluBnUzJkFnxLse5W+agC6ITe3wYvKH7SHVp6MYQWV
  310. D/0I2rCLV4gqjSpXzKIMs5eejjTQQq0VYumgL/f1ETvzDoewzXLOC8GGu2LZDwDb
  311. P0ea6DchReWjZfj4nJx23uQyGAj1h/uPI1jCd9oeJhbN8jFz2ltYgXYBp51qdSzs
  312. btdec9BPPBVeXjI++c0AWU8CAwEAAQ==
  313. -----END PUBLIC KEY-----
  314.  
  315. </pre>
  316. <h3>The script</h3>
  317. <p>This is the script in case anyone else finds it useful:</p>
  318. <pre lang="python" id="script">
  319. #!/usr/bin/env -S uv run --script --quiet
  320. # /// script
  321. # dependencies = [
  322. #   "cryptography",
  323. # ]
  324. # ///
  325.  
  326. """Convert JWK keys to PEM format.
  327.  
  328. This script reads .well-known/jwks.json and outputs PEM encoded versions
  329. of the public keys in that file.
  330.  
  331. Usage:
  332.    curl -s https://example.com/.well-known/jwks.json | jwks-to-pem.py
  333.    uv run jwks-to-pem.py jwks.json
  334.    uv run jwks-to-pem.py < jwks.json
  335.  
  336. Requirements:
  337.    - uv (https://github.com/astral-sh/uv)
  338.    - cryptography library
  339.  
  340. Author:
  341.    Rob Allen <rob@akrabat.com>
  342.    Copyright 2025
  343.  
  344. License:
  345.    MIT License - https://opensource.org/licenses/MIT
  346. """
  347.  
  348. import json
  349. import base64
  350. import sys
  351. from cryptography.hazmat.primitives import serialization
  352. from cryptography.hazmat.primitives.asymmetric import rsa
  353.  
  354. def base64url_decode(data):
  355.    """Decode base64url to bytes"""
  356.    # Add padding if needed
  357.    padding = 4 - len(data) % 4
  358.    if padding != 4:
  359.        data += '=' * padding
  360.  
  361.    # Replace URL-safe chars
  362.    data = data.replace('-', '+').replace('_', '/')
  363.  
  364.    # Decode
  365.    return base64.b64decode(data)
  366.  
  367. def jwk_to_pem(jwk_key):
  368.    """Convert JWK to PEM format"""
  369.    if jwk_key['kty'] != 'RSA':
  370.        raise ValueError("Only RSA keys are supported")
  371.  
  372.    # Decode the modulus (n) and exponent (e) to int
  373.    n = int.from_bytes(base64url_decode(jwk_key['n']), 'big')
  374.    e = int.from_bytes(base64url_decode(jwk_key['e']), 'big')
  375.  
  376.    # Create RSA public key
  377.    public_key = rsa.RSAPublicNumbers(e, n).public_key()
  378.  
  379.    # Serialize to PEM
  380.    pem = public_key.public_bytes(
  381.        encoding=serialization.Encoding.PEM,
  382.        format=serialization.PublicFormat.SubjectPublicKeyInfo
  383.    )
  384.    return pem.decode()
  385.  
  386. def main():
  387.    if len(sys.argv) > 2:
  388.        print("Usage: jwk_to_pem.py [jwks.json]")
  389.        print("If no file is provided, reads from stdin")
  390.        sys.exit(1)
  391.  
  392.    if len(sys.argv) == 2 and sys.argv[1] != '-':
  393.        # Read from file
  394.        with open(sys.argv[1], 'r') as f:
  395.            jwks = json.load(f)
  396.    else:
  397.        # Read from stdin
  398.        jwks = json.load(sys.stdin)
  399.  
  400.    # Convert each key
  401.    for i, key in enumerate(jwks['keys']):
  402.        kid = key.get('kid', f'key-{i}')
  403.        print(f"# Key {i} (kid: {kid})")
  404.        print(jwk_to_pem(key))
  405.  
  406. if __name__ == "__main__":
  407.    main()
  408. </pre>
  409. ]]></content:encoded>
  411. <wfw:commentRss>https://akrabat.com/converting-jwks-json-to-pem-using-python/feed/</wfw:commentRss>
  412. <slash:comments>0</slash:comments>
  415. </item>
  416. <item>
  417. <title>Stop in-place editing of bash history items</title>
  418. <link>https://akrabat.com/stop-in-place-editing-of-bash-history-items/</link>
  419. <comments>https://akrabat.com/stop-in-place-editing-of-bash-history-items/#comments</comments>
  421. <dc:creator><![CDATA[Rob]]></dc:creator>
  422. <pubDate>Tue, 02 Sep 2025 10:00:00 +0000</pubDate>
  423. <category><![CDATA[Command Line]]></category>
  424. <category><![CDATA[Shell Scripting]]></category>
  425. <guid isPermaLink="false">https://akrabat.com/?p=7480</guid>
  426.  
  427. <description><![CDATA[Recently, since getting a new computer, I've noticed that I've been losing bash history items and it took a while to work out what was going on, though I'm still not completely sure as it never seemed to be so much of a problem. I regularly use the up and down keys with context specific history. For example, I will type ma and then press up to search back through all the make commands I've… <a href="https://akrabat.com/stop-in-place-editing-of-bash-history-items/">continue reading</a>.]]></description>
  428. <content:encoded><![CDATA[<p>Recently, since getting a new computer, I've noticed that I've been losing bash history items and it took a while to work out what was going on, though I'm still not completely sure as it never seemed to be so much of a problem. </p>
  429. <p>I regularly use the up and down keys with <a href="/context-specific-history-at-the-bash-prompt/">context specific history</a>. For example, I will type <tt>ma</tt> and then press up to search back through all the <tt>make</tt> commands I've used recently and then press enter to run it. </p>
  430. <p>Sometimes, I'll realise that I don't actually want this command and edit it and press enter. Sometimes I'll decide halfway through editing that really I should use a <tt>docker compose</tt> command instead and I'll just back out of my edit via some key stroke that works. I'm not sure what I do here though, probably up/down, or maybe ctrl+c. Whatever I do, sometimes, the history for that line is now my edited mess and not the original command. Then later, when I go to try and find it via the up arrow, it's missing.</p>
  431. <p>This happened infrequently enough that I thought I was misremembering what was in the history, or that maybe it was another tab I was thinking about.</p>
  432. <p>I never want the bash history to be editable; if I cancel out, then I want it back to what it was.</p>
  433. <h2>Fixing with revert-all-at-newline</h2>
  434. <p>This finally annoyed me enough that I sat down with the Internet to work out how to fix it with the <tt>revert-all-at-newline</tt> setting.</p>
  435. <p>The revert-all-at-newline option in bash controls whether readline reverts any changes made to a history line when you press Enter. Note that this is part of readline's behavior, so it affects command line editing in bash and other programs that use <a href="https://en.wikipedia.org/wiki/GNU_Readline">readline</a>.</p>
  436. <p>The simplest thing is to add this to <tt>.bashrc</tt>:</p>
  437. <pre lang="bash">
  438. bind 'set revert-all-at-newline on'
  439. </pre>
  440. <p>Alternatively, you can create a <tt>.inputrc</tt> file with this in it:</p>
  441. <pre>
  442. $include /etc/inputrc
  443. set revert-all-at-newline on
  444. </pre>
  445. <p>To view the current value of <tt>revert-all-at-newline</tt>, use: </p>
  446. <pre>
  447. bind -V | grep revert-all-at-newline
  448. </pre>
  449. <p>It solved my problem, and I've not yet found a case when I want it set the other way.</p>
  450. ]]></content:encoded>
  452. <wfw:commentRss>https://akrabat.com/stop-in-place-editing-of-bash-history-items/feed/</wfw:commentRss>
  453. <slash:comments>1</slash:comments>
  456. </item>
  457. <item>
  458. <title>Extending an OpenAPI Component Schema</title>
  459. <link>https://akrabat.com/extending-an-openapi-component-schema/</link>
  460. <comments>https://akrabat.com/extending-an-openapi-component-schema/#respond</comments>
  462. <dc:creator><![CDATA[Rob]]></dc:creator>
  463. <pubDate>Tue, 26 Aug 2025 10:00:00 +0000</pubDate>
  464. <category><![CDATA[OpenAPI]]></category>
  465. <guid isPermaLink="false">https://akrabat.com/?p=7477</guid>
  466.  
  467. <description><![CDATA[One project that I'm working on uses RFC 9457 Problem Details for HTTP APIs for its error responses. In the OpenAPI spec, we can define this as a component and use in the relevant paths as appropriate: components: schemas: ProblemDetails: type: object properties: type: type: string format: uri-reference description: A URI reference that identifies the problem type default: about:blank example: https://example.com/probs/out-of-credit title: type: string description: A short, human-readable summary of the problem type example: You… <a href="https://akrabat.com/extending-an-openapi-component-schema/">continue reading</a>.]]></description>
  468. <content:encoded><![CDATA[<p>One project that I'm working on uses <a href="https://www.rfc-editor.org/rfc/rfc9457.html">RFC 9457 Problem Details for HTTP APIs </a> for its error responses.</p>
  469. <p>In the OpenAPI spec, we can define this as a component and use in the relevant paths as appropriate:</p>
  470. <pre lang="yaml">
  471. components:
  472.  schemas:
  473.    ProblemDetails:
  474.      type: object
  475.      properties:
  476.        type:
  477.          type: string
  478.          format: uri-reference
  479.          description: A URI reference that identifies the problem type
  480.          default: about:blank
  481.          example: https://example.com/probs/out-of-credit
  482.        title:
  483.          type: string
  484.          description: A short, human-readable summary of the problem type
  485.          example: You do not have enough credit.
  486.        status:
  487.          type: integer
  488.          format: int32
  489.          description: The HTTP status code for this occurrence of the problem
  490.          minimum: 100
  491.          maximum: 599
  492.          example: 403
  493.        detail:
  494.          type: string
  495.          description: A human-readable explanation specific to this occurrence of the problem
  496.          example: Your current balance is 30, but that costs 50.
  497.        instance:
  498.          type: string
  499.          format: uri-reference
  500.          description: A URI reference that identifies the specific occurrence of the problem
  501.          example: /account/12345/msgs/abc
  502.      additionalProperties: true
  503. </pre>
  504. <p>When we return a validation error, we add an <tt>errors</tt> property. Rather than repeating the <tt>ProblemDetails</tt> properties into <tt>ValidationError</tt>, we can add the <tt>errors</tt> using <a href="https://json-schema.org/understanding-json-schema/reference/combining#allOf"><tt>allOf</tt></a>:</p>
  505. <pre lang="yaml">
  506.    ValidationError:
  507.      allOf:
  508.        - $ref: '#/components/schemas/ProblemDetails'
  509.        - type: object
  510.          properties:
  511.            errors:
  512.              type: object
  513.              description: Field-specific validation error messages
  514.              additionalProperties:
  515.                type: string
  516.              example:
  517.                name: "name must be provided"
  518.                dateOfBirth: "date must be in the past"
  519. </pre>
  520. <p>This is quite handy!</p>
  521. ]]></content:encoded>
  523. <wfw:commentRss>https://akrabat.com/extending-an-openapi-component-schema/feed/</wfw:commentRss>
  524. <slash:comments>0</slash:comments>
  527. </item>
  528. <item>
  529. <title>Saving the current URL to a Note</title>
  530. <link>https://akrabat.com/saving-the-current-url-to-a-note/</link>
  531. <comments>https://akrabat.com/saving-the-current-url-to-a-note/#respond</comments>
  533. <dc:creator><![CDATA[Rob]]></dc:creator>
  534. <pubDate>Tue, 19 Aug 2025 10:00:00 +0000</pubDate>
  535. <category><![CDATA[Mac]]></category>
  536. <category><![CDATA[Shortcuts]]></category>
  537. <guid isPermaLink="false">https://akrabat.com/?p=7467</guid>
  538.  
  539. <description><![CDATA[Inspired by John Gruber mentioning on the Cortex podcast that he has a shortcut that saves links to a note in Tot, I thought I'd do something similar for saving to a note in Apple Notes. I want to store as a bullet item containing the name of the page, the link and the date. Something like this: (Funny that the spellchecker doesn't know that Thu is the short form for Thursday) The Save Links… <a href="https://akrabat.com/saving-the-current-url-to-a-note/">continue reading</a>.]]></description>
  540. <content:encoded><![CDATA[<p>Inspired by John Gruber mentioning on the <a href="https://www.relay.fm/cortex/169">Cortex podcast</a> that he has a shortcut that saves links to a note in <a href="https://tot.rocks">Tot</a>, I thought I'd do something similar for saving to a note in Apple Notes.</p>
  541. <p>I want to store as a bullet item containing the name of the page, the link and the date. Something like this:</p>
  542. <picture><source  
  543. srcset="https://akrabat.com/wp-content/uploads/2025/07/2025saved-link-text-dark.png"
  544.        media="(prefers-color-scheme: dark)"
  545.    /><source
  546. srcset="https://akrabat.com/wp-content/uploads/2025/07/2025saved-link-text-light.png"
  547.        media="(prefers-color-scheme: light), (prefers-color-scheme: no-preference)"
  548.    /><br />
  549.    <img decoding="async" src="https://akrabat.com/wp-content/uploads/2025/07/2025saved-link-text-light.png" loading="lazy" alt="Saved link text light." class="border" width="408"/>
  550. </picture>
  551. <p>(Funny that the spellchecker doesn't know that Thu is the short form for Thursday)</p>
  552. <h2>The <em>Save Links to Notes</em> Shortcut</h2>
  553. <p>This is the shortcut that I created to do it:
  554. <picture><source  
  555. srcset="https://akrabat.com/wp-content/uploads/2025/07/2025save-links-to-notes-shortcut-dark.png"
  556.        media="(prefers-color-scheme: dark)"
  557.    /><source
  558. srcset="https://akrabat.com/wp-content/uploads/2025/07/2025save-links-to-notes-shortcut-light.png"
  559.        media="(prefers-color-scheme: light), (prefers-color-scheme: no-preference)"
  560.    /><br />
  561.    <img decoding="async" src="https://akrabat.com/wp-content/uploads/2025/07/2025save-links-to-notes-shortcut-light.png" loading="lazy" alt="Save links to notes shortcut light." class="noborder" width="558"/>
  562. </picture>
  563. <p>You can download it here:<br />
  564. <a href="https://www.icloud.com/shortcuts/6c12e888f9da431d9977985b229d636b">https://www.icloud.com/shortcuts/6c12e888f9da431d9977985b229d636b</a></p>
  565. <h2>Breaking down the actions</h2>
  566. <p>To get the URL into the shortcut, we want:</p>
  567. <ul>
  568. <li><em>Show in Share Sheet</em> so that it's available on iOS/iPadOS</li>
  569. <li><em>Receive What's Onscreen</em> so that when a browser is focussed on Mac, it finds the URL</li>
  570. <li><em>Use as a Quick Action</em> so that we can assign a keyboard shortcut (<tt style="font-family: sans-serif">⌃⌥⌘U</tt> in case)</li>
  571. </ul>
  572. <p>We can then use <em>Get Contents of web page</em> along with <em>Get Details of Safari Web Page</em> to get the pages's title which Shortcuts calls <em>Name</em> for some reason.</p>
  573. <p>There's an action for <em>Current Date</em>, so we add that to get the variable.</p>
  574. <p>Creating formatted text in a note is a little involved. Firstly we use a <em>Text</em> action to set out the Markdown that we want. I used the date format <tt>EEE, dd MMM yyyy</tt> as it's short and clear to me.</p>
  575. <p>There's a <em>Make Rich Text from Markdown</em> action which processes the Markdown for us, but if you just append it to the note, it doesn't work. The workaround is to add it to a <em>List</em> action and then append the list to the note. </p>
  576. <h2>That's it</h2>
  577. <p>All we need to do now is show a notification including the <tt>Shortcut Input</tt> variable as that's the URL that we've just saved.
  578. <picture><source  
  579. srcset="https://akrabat.com/wp-content/uploads/2025/07/2025save-links-to-notes-notification-dark.png"
  580.        media="(prefers-color-scheme: dark)"
  581.    /><source
  582. srcset="https://akrabat.com/wp-content/uploads/2025/07/2025save-links-to-notes-notification-light.png"
  583.        media="(prefers-color-scheme: light), (prefers-color-scheme: no-preference)"
  584.    /><br />
  585.    <img decoding="async" src="https://akrabat.com/wp-content/uploads/2025/07/2025save-links-to-notes-notification-light.png" loading="lazy" alt="Save links to notes notification light." class="noborder" width="376"/>
  586. </picture>
  587. <p>With this shortcut, I can add a new entry to my note from both my Mac, iPad and iPhone with minimal effort. </p>
  588. <p>I like it.</p>
  589. ]]></content:encoded>
  591. <wfw:commentRss>https://akrabat.com/saving-the-current-url-to-a-note/feed/</wfw:commentRss>
  592. <slash:comments>0</slash:comments>
  595. </item>
  596. <item>
  597. <title>Accessing Longplay info for SwiftBar</title>
  598. <link>https://akrabat.com/accessing-longplay-info-for-swiftbar/</link>
  599. <comments>https://akrabat.com/accessing-longplay-info-for-swiftbar/#respond</comments>
  601. <dc:creator><![CDATA[Rob]]></dc:creator>
  602. <pubDate>Tue, 12 Aug 2025 10:00:00 +0000</pubDate>
  603. <category><![CDATA[Mac]]></category>
  604. <guid isPermaLink="false">https://akrabat.com/?p=7447</guid>
  605.  
  606. <description><![CDATA[One app that I find incredibly useful is SwiftBar and one use I have is to display track info for the currently playing song in Apple Music. SwiftBar plugins work as shell scripts that execute on a timer and echo specially formatted text which SwiftBar then turns into an item on the menu bar with an attached menu I use a heavily modified Now Playing plugin that was originally written by Adam Kenyon, so all… <a href="https://akrabat.com/accessing-longplay-info-for-swiftbar/">continue reading</a>.]]></description>
  607. <content:encoded><![CDATA[<p>One app that I find incredibly useful is <a href="https://github.com/swiftbar/SwiftBar">SwiftBar</a> and one use I have is to display track info for the currently playing song in Apple Music.</p>
  608. <p>SwiftBar plugins work as shell scripts that execute on a timer and echo specially formatted text which SwiftBar then turns into an item on the menu bar with an attached menu</p>
  609. <p>I use a heavily modified <a href="https://github.com/matryer/xbar-plugins/blob/main/Music/nowplaying.5s.sh">Now Playing plugin</a> that was originally written by Adam Kenyon, so all the hard work was done by them.</p>
  610. <p>Recently, I've been using <a href="https://longplay.rocks">Longplay</a> to play albums and wanted the same functionality.</p>
  611. <p>Now Playing uses AppleScript to determine if a music player is playing and what the track info is:</p>
  612. <pre>
  613. app_playing=$(osascript -e "tell application \"$i\" to player state as string")
  614. </pre>
  615. <p>And</p>
  616. <pre>
  617. track=$(osascript -e "tell application \"$app\" to name of current track")
  618. artist=$(osascript -e "tell application \"$app\" to artist of current track")
  619. </pre>
  620. <p>When looking at adding Longplay, I was pleased to discover that it has AppleScript support, but perusing the Dictionary, I discovered that it doesn't support the features I need here.</p>
  621. <p>Upon emailing the developer, they very helpfully pointed out that Longplay also has Shortcuts support and that I could probably use that instead. They were right.</p>
  622. <p>I knocked up a couple of shortcuts:</p>
  623. <picture><source  
  624. srcset="https://akrabat.com/wp-content/uploads/2025/07/2025longplay-status-dark.png"
  625.        media="(prefers-color-scheme: dark)"
  626.    /><source
  627. srcset="https://akrabat.com/wp-content/uploads/2025/07/2025longplay-status-light.png"
  628.        media="(prefers-color-scheme: light), (prefers-color-scheme: no-preference)"
  629.    /><br />
  630.    <img decoding="async" src="https://akrabat.com/wp-content/uploads/2025/07/2025longplay-status-light.png" loading="lazy" alt="Longplay status Apple Shortcut" class="noborder" width="431"/>
  631. </picture>
  632. <p>and</p>
  633. <picture><source  
  634. srcset="https://akrabat.com/wp-content/uploads/2025/07/2025longplay-now-playing-dark.png"
  635.        media="(prefers-color-scheme: dark)"
  636.    /><source
  637. srcset="https://akrabat.com/wp-content/uploads/2025/07/2025longplay-now-playing-light.png"
  638.        media="(prefers-color-scheme: light), (prefers-color-scheme: no-preference)"
  639.    /><br />
  640.    <img decoding="async" src="https://akrabat.com/wp-content/uploads/2025/07/2025longplay-now-playing-light.png" loading="lazy" alt="Longplay now playing light." class="noborder" width="431"/>
  641. </picture>
  642. <p>With these set-up, I can now run them from the command line using <tt>shortcuts</tt>:</p>
  643. <pre>
  644. app_playing=$(shortcuts run "Longplay status");
  645. </pre>
  646. <p>This will set <tt>$app_playing</tt> to either "Yes" or "No" as strings as it is defined as boolean in Shortcuts.</p>
  647. <pre>
  648. track=$(shortcuts run "Longplay now playing");
  649. </pre>
  650. <p>This simply sets <tt>$track</tt> to the string of the currently playing track.</p>
  651. <h2>Updated Now Playing script</h2>
  652. <p>With the ability to get the info I needed from the command line, I <s>hacked</s> updated my copy of the Now Playing script and all is good.</p>
  653. <p>I've updated it a bit over the years, so I've uploaded my version to Gist: <a href="https://gist.github.com/akrabat/8bcfac9dfef5fd4e9b67ac5bb504ea7a">nowplaying.5s.sh</a>.</p>
  654. ]]></content:encoded>
  656. <wfw:commentRss>https://akrabat.com/accessing-longplay-info-for-swiftbar/feed/</wfw:commentRss>
  657. <slash:comments>0</slash:comments>
  660. </item>
  661. <item>
  662. <title>Responding to StreamDeck buttons with Keyboard Maestro</title>
  663. <link>https://akrabat.com/controlling-the-streamdeck-via-keyboard-maestro/</link>
  664. <comments>https://akrabat.com/controlling-the-streamdeck-via-keyboard-maestro/#respond</comments>
  666. <dc:creator><![CDATA[Rob]]></dc:creator>
  667. <pubDate>Tue, 05 Aug 2025 10:00:00 +0000</pubDate>
  668. <category><![CDATA[AppleScript]]></category>
  669. <category><![CDATA[Keyboard Maestro]]></category>
  670. <category><![CDATA[Mac]]></category>
  671. <guid isPermaLink="false">https://akrabat.com/?p=7440</guid>
  672.  
  673. <description><![CDATA[I run Apple Music on my Mac desktop and send the output to my HomePod minis. To control the volume, you need to manipulate the Apple Music volume slider rather than the global volume controls for the Mac. It's easier to press buttons than use a mouse, so I used Keyboard Maestro to respond to two buttons on my Stream Deck instead. This is possible because Keyboard Maestro has a Stream Deck Plugin, so you… <a href="https://akrabat.com/controlling-the-streamdeck-via-keyboard-maestro/">continue reading</a>.]]></description>
  674. <content:encoded><![CDATA[<p>I run Apple Music on my Mac desktop and send the output to my HomePod minis. To control the volume, you need to manipulate the Apple Music volume slider rather than the global volume controls for the Mac.</p>
  675. <p>It's easier to press buttons than use a mouse, so I used <a href="https://www.keyboardmaestro.com/">Keyboard Maestro</a> to respond to two buttons on my <a href="https://www.elgato.com/uk/en/p/stream-deck">Stream Deck</a> instead.</p>
  676. <p>This is possible because Keyboard Maestro has a <a href="https://marketplace.elgato.com/product/keyboard-maestro-35c7590b-b7fb-4be0-9e5d-9fd4b4c0f013">Stream Deck Plugin</a>, so you need to install that first.</p>
  677. <h2>Setting up the Stream Deck button</h2>
  678. <p>You can now assign Keyboard Maestro to a button in the Stream Deck software:</p>
  679. <p><img fetchpriority="high" decoding="async" src="https://akrabat.com/wp-content/uploads/2025/07/2025streamdeck-km-button.png" alt="Keyboard Maestro automation configuration interface showing a button setup with a speaker/volume icon. The interface displays fields for Title (empty), Button ID (R3C1), Virtual Row (3), and Virtual Column (1). The left side shows a black square button with white speaker and minus icons." title="streamdeck-km-button.png" border="0" width="500" height="239" /></p>
  680. <p>This is the configuration for my volume down button, as you can tell by the icon I chose. The Button ID defaults to the row and column number of where you have placed it on the Stream Deck.</p>
  681. <h2>Responding to the button in Keyboard Maestro</h2>
  682. <p>On the Keyboard Maestro side, we need a macro that is trigged by the Stream Deck button. This is easy to do as it looks like a USB device key and you can press the button the Stream Deck and Keyboard Maestro will recognise it and fill in the correct details.</p>
  683. <p><img decoding="async" src="https://akrabat.com/wp-content/uploads/2025/07/2025streamdeck-km-control.png" alt="Screenshot of an Keyboard Maestro automation interface showing a "Music volume down" macro. The trigger is a Stream Deck R3C1 button press with modifiers. The action executes AppleScript code that decreases the Music app's volume by 1, with a minimum volume of 0." title="streamdeck-km-control.png" border="0" width="500" height="529" /></p>
  684. <p>Upon clicking the button, we simply run some AppleScript to control the Music app's volume.</p>
  685. <h2>That's it</h2>
  686. <p>That's all there is to responding to a button on the Stream Deck on a Mac. In this case, I'm using AppleScript, but Keyboard Maestro lets you do practically anything on the computer!</p>
  687. ]]></content:encoded>
  689. <wfw:commentRss>https://akrabat.com/controlling-the-streamdeck-via-keyboard-maestro/feed/</wfw:commentRss>
  690. <slash:comments>0</slash:comments>
  693. </item>
  694. </channel>
  695. </rss>
  696.  

If you would like to create a banner that links to this page (i.e. this validation result), do the following:

  1. Download the "valid RSS" banner.

  2. Upload the image to your own server. (This step is important. Please do not link directly to the image on this server.)

  3. Add this HTML to your page (change the image src attribute if necessary):

If you would like to create a text link instead, here is the URL you can use:

http://www.feedvalidator.org/check.cgi?url=http%3A//akrabat.com/feed/

Home · About · News · Docs · Terms

 
Copyright © 2002-9 Sam Ruby, Mark Pilgrim, Joseph Walton, and Phil Ringnalda