FenTiger

@Phantasm Great article - I've added it to my bookmark list - thank you! I'm of the opinion that trying to "block" the "bad people" can never work. It's just not compatible with the way the Fediverse works, at a very basic level. The only access control mechanisms worth building are based on "allowing" the "good people". More here.

Quote of the day:

And it's not really in the spirit of decentralization if you have to reimplement the same feature multiple times across the internet.

Oh, hello Lemmy. Feeling talkative today, are we?

Hi @@mariusor@metalhead.club!

I just managed to make a C2S post to my work-in-progress ActivityPub instance using your BOX client.

I had to make a couple of minor changes to it:

• The authorize command respects $HTTPS_PROXY, but the post command doesn't. I had to change this to get it to talk to services on my test network.
• It doesn't send an OAuth state parameter; the OAuth server library I'm using complains about this so I fixed it.

Are you interested in patches/PRs? What's the best way to submit them?

#ActivityPubDev

Does anyone know of a #WordPress hosting company with a free plan that includes the ActivityPub plugin?

I just gave it a try with my FedIAM single sign-on project, and it seems very close to "just working", but it doesn't like my test network very much, so I'd like to give it a try on the live network.

#WordPress #ActivityPubDev #FediDev #FedIAM

Private threads on Hubzilla I started a private thread between my account and a test actor. The root post was delivered to me (as an Add/Create/Note) and all the objects in the message have:

{
  "context": "https://zotum.net/conversation/2ffbd4e4-6197-4922-98ec-bedd4108679d",
  "contextHistory": "https://zotum.net/conversation/2ffbd4e4-6197-4922-98ec-bedd4108679d",
  "to": [
    "https://zotum.net/lists/17bb4e2e-3149-4803-ad61-b8b8357af703"
  ],
  ...
}

But I can't dereference either of these URLs, or any of the object IDs, not even with a signed request. In particular, I can't dereference the to URL, which means my test actor can't reply to the thread. :(

Should I expect to be able to fetch these? I would have thought a signed GET would work, but it seems not.

Is it worth trying to set up a local Hubzilla instance to test against? I can do this, but I thought asking first might be a lot easier.

#ActivityPubDev #FediDev

@mariusor@metalhead.club That library doesn't look like it's seen much activity recently. I ended up using this one and I've found the maintainer to be very responsive.

@mariusor@metalhead.club I think that's a reasonable position to take, and in fact that's how I'm approaching the OAuth stuff, by following the OAuth WG specs to the letter and if that breaks compatibility with anyone else then that's their problem rather than mine ;) I just find the W3C/SWICG stuff to be very hard to interpret unambiguously, which makes it difficult to use as anything other than a guideline.