Thanks!
Tried to follow a private community, and I have a problem with this Accept activity:
{"@context":["https://join-lemmy.org/context.json","https://www.w3.org/ns/activitystreams"],"actor":"https://voyager.lemmy.ml/c/privfedtest","id":"https://voyager.lemmy.ml/activities/accept/6a08b817-9dc2-498a-a637-9092c8ea15fc","object":{"actor":"https://mitra.social/users/silverpill","id":"https://voyager.lemmy.ml/activities/follow/3c08aca5-9e41-4d15-b134-326c4bd91bd0","object":"https://voyager.lemmy.ml/c/privfedtest","to":["https://voyager.lemmy.ml/c/privfedtest"],"type":"Follow"},"to":["https://mitra.social/users/silverpill"],"type":"Accept"}The id inside Accept.object is not the ID of my Follow activity, it's something different. Its origin is not my server:
https://voyager.lemmy.ml/activities/follow/3c08aca5-9e41-4d15-b134-326c4bd91bd0@silverpill gaaah!! 😱
Thank you.
The log is just telling me the signature failed verification:
err="actor IRI https://mitra.social/users/silverpill: verification failed: invalid signature: crypto/rsa: verification error"
Did you by any chance update your key recently? (I might use a locally cached version that's out of date, version in cache is since May 2025)
This is an activity I received:
{"@context":["https://www.w3.org/ns/activitystreams","https://w3id.org/security/v1","https://www.w3.org/ns/did/v1","https://w3id.org/security/multikey/v1","https://w3id.org/security/data-integrity/v1","https://w3id.org/fep/c390",{"Category":"nomad:Category","Hashtag":"as:Hashtag","Sync":"nomad:Sync","canReply":"toot:canReply","canSearch":"nomad:canSearch","collectionOf":"nomad:collectionOf","contextHistory":{"@container":"@list","@id":"https://w3id.org/fep/171b/contextHistory","@type":"@id"},"copiedTo":"nomad:copiedTo","directMessage":"nomad:directMessage","discoverable":"toot:discoverable","expires":"nomad:expires","gateways":{"@container":"@list","@id":"https://w3id.org/fep/ef61/gateways","@type":"@id"},"indexable":"toot:indexable","joinMode":"https://w3id.org/fep/8a8e/joinMode","manuallyApprovesFollowers":"as:manuallyApprovesFollowers","movedTo":"as:movedTo","nomad":"https://macgirvin.com/apschema#","oauthRegistrationEndpoint":"nomad:oauthRegistrationEndpoint","openWebAuth":"nomad:openWebAuth","owaRedirect":"nomad:owaRedirect","permissions":"nomad:permissions","searchContent":"nomad:searchContent","searchTags":"nomad:searchTags","sensitive":"as:sensitive","timezone":"http://www.w3.org/2006/time#timezone","toot":"http://joinmastodon.org/ns#","webfinger":{"@id":"wf:webfinger","@type":"xsd:string"},"wf":"https://purl.archive.org/socialweb/webfinger#","xsd":"http://www.w3.org/2001/XMLSchema#"}],"actor":"https://macgirvin.com/.well-known/apgateway/did🔑z6MkhPXNfiHDh2qSNjFzZ9yY27C1iHnHVbb1eaxuoiEe4tjk/actor","cc":[],"context":"https://macgirvin.com/.well-known/apgateway/did🔑z6MkhPXNfiHDh2qSNjFzZ9yY27C1iHnHVbb1eaxuoiEe4tjk/conversation/history/3f3e6efe-9bac-425d-9692-4df179937c5f","contextHistory":"https://macgirvin.com/.well-known/apgateway/did🔑z6MkhPXNfiHDh2qSNjFzZ9yY27C1iHnHVbb1eaxuoiEe4tjk/conversation/history/3f3e6efe-9bac-425d-9692-4df179937c5f","directMessage":true,"id":"https://macgirvin.com/.well-known/apgateway/did🔑z6MkhPXNfiHDh2qSNjFzZ9yY27C1iHnHVbb1eaxuoiEe4tjk/activity/3f3e6efe-9bac-425d-9692-4df179937c5f","object":{"attributedTo":"https://macgirvin.com/.well-known/apgateway/did🔑z6MkhPXNfiHDh2qSNjFzZ9yY27C1iHnHVbb1eaxuoiEe4tjk/actor","canReply":["https://macgirvin.com/.well-known/apgateway/did🔑z6MkhPXNfiHDh2qSNjFzZ9yY27C1iHnHVbb1eaxuoiEe4tjk/actor/followers"],"cc":[],"content":"@!<span class=\"h-card\"><a class=\"u-url mention\" href=\"https://mitra.social/users/silverpill\" target=\"_blank\" rel=\"nofollow noopener\" >silverpill@mitra.social</a></span> Here's an activity that should be signed with RFC9421.","context":"https://macgirvin.com/.well-known/apgateway/did🔑z6MkhPXNfiHDh2qSNjFzZ9yY27C1iHnHVbb1eaxuoiEe4tjk/conversation/history/3f3e6efe-9bac-425d-9692-4df179937c5f","contextHistory":"https://macgirvin.com/.well-known/apgateway/did🔑z6MkhPXNfiHDh2qSNjFzZ9yY27C1iHnHVbb1eaxuoiEe4tjk/conversation/history/3f3e6efe-9bac-425d-9692-4df179937c5f","directMessage":true,"id":"https://macgirvin.com/.well-known/apgateway/did🔑z6MkhPXNfiHDh2qSNjFzZ9yY27C1iHnHVbb1eaxuoiEe4tjk/item/3f3e6efe-9bac-425d-9692-4df179937c5f","proof":{"created":"2025-06-09T21:22:04Z","cryptosuite":"eddsa-jcs-2022","proofPurpose":"assertionMethod","proofValue":"zcxM3mfRbyXsbNx3YZypxjMPhVxcBuyo6Lz6ZUz9hmHaEok7mfG9Db9oA8uz9LWzF7EZnHHKKBn5UuM81FNmXPDo","type":"DataIntegrityProof","verificationMethod":"did🔑z6MkhPXNfiHDh2qSNjFzZ9yY27C1iHnHVbb1eaxuoiEe4tjk"},"published":"2025-06-09T21:22:04Z","replies":"https://macgirvin.com/.well-known/apgateway/did🔑z6MkhPXNfiHDh2qSNjFzZ9yY27C1iHnHVbb1eaxuoiEe4tjk/replies/3f3e6efe-9bac-425d-9692-4df179937c5f","source":{"content":"@![url=https://mitra.social/users/silverpill]silverpill[/url] Here's an activity that should be signed with RFC9421.","mediaType":"text/x-multicode"},"tag":[{"href":"https://mitra.social/users/silverpill","name":"@silverpill@mitra.social","type":"Mention"}],"to":["https://mitra.social/users/silverpill"],"type":"Note","url":"https://macgirvin.com/.well-known/apgateway/did🔑z6MkhPXNfiHDh2qSNjFzZ9yY27C1iHnHVbb1eaxuoiEe4tjk/item/3f3e6efe-9bac-425d-9692-4df179937c5f"},"proof":{"created":"2025-06-09T21:22:05Z","cryptosuite":"eddsa-jcs-2022","proofPurpose":"assertionMethod","proofValue":"z5tDnWHWDj2JyaA3CHAcDe3Qy3K77HtSMrAGsucSk6pbp3bsbuUU8cZR5NkQyfE273JgT9FwYaCrtTAXUN4oJocNQ","type":"DataIntegrityProof","verificationMethod":"did🔑z6MkhPXNfiHDh2qSNjFzZ9yY27C1iHnHVbb1eaxuoiEe4tjk"},"published":"2025-06-09T21:22:04Z","tag":[{"href":"https://mitra.social/users/silverpill","name":"@silverpill@mitra.social","type":"Mention"}],"target":{"attributedTo":"https://macgirvin.com/.well-known/apgateway/did🔑z6MkhPXNfiHDh2qSNjFzZ9yY27C1iHnHVbb1eaxuoiEe4tjk/actor","id":"https://macgirvin.com/.well-known/apgateway/did🔑z6MkhPXNfiHDh2qSNjFzZ9yY27C1iHnHVbb1eaxuoiEe4tjk/conversation/history/3f3e6efe-9bac-425d-9692-4df179937c5f","type":"Collection"},"to":["https://mitra.social/users/silverpill"],"type":"Create","url":"https://macgirvin.com/.well-known/apgateway/did🔑z6MkhPXNfiHDh2qSNjFzZ9yY27C1iHnHVbb1eaxuoiEe4tjk/activity/3f3e6efe-9bac-425d-9692-4df179937c5f"}I can verify the activity, but not its object.
Canonicalized object (with proof taken out):
{"attributedTo":"https://macgirvin.com/.well-known/apgateway/did🔑z6MkhPXNfiHDh2qSNjFzZ9yY27C1iHnHVbb1eaxuoiEe4tjk/actor","canReply":["https://macgirvin.com/.well-known/apgateway/did🔑z6MkhPXNfiHDh2qSNjFzZ9yY27C1iHnHVbb1eaxuoiEe4tjk/actor/followers"],"cc":[],"content":"@!<span class=\"h-card\"><a class=\"u-url mention\" href=\"https://mitra.social/users/silverpill\" target=\"_blank\" rel=\"nofollow noopener\" >silverpill@mitra.social</a></span> Here's an activity that should be signed with RFC9421.","context":"https://macgirvin.com/.well-known/apgateway/did🔑z6MkhPXNfiHDh2qSNjFzZ9yY27C1iHnHVbb1eaxuoiEe4tjk/conversation/history/3f3e6efe-9bac-425d-9692-4df179937c5f","contextHistory":"https://macgirvin.com/.well-known/apgateway/did🔑z6MkhPXNfiHDh2qSNjFzZ9yY27C1iHnHVbb1eaxuoiEe4tjk/conversation/history/3f3e6efe-9bac-425d-9692-4df179937c5f","directMessage":true,"id":"https://macgirvin.com/.well-known/apgateway/did🔑z6MkhPXNfiHDh2qSNjFzZ9yY27C1iHnHVbb1eaxuoiEe4tjk/item/3f3e6efe-9bac-425d-9692-4df179937c5f","published":"2025-06-09T21:22:04Z","replies":"https://macgirvin.com/.well-known/apgateway/did🔑z6MkhPXNfiHDh2qSNjFzZ9yY27C1iHnHVbb1eaxuoiEe4tjk/replies/3f3e6efe-9bac-425d-9692-4df179937c5f","source":{"content":"@![url=https://mitra.social/users/silverpill]silverpill[/url] Here's an activity that should be signed with RFC9421.","mediaType":"text/x-multicode"},"tag":[{"href":"https://mitra.social/users/silverpill","name":"@silverpill@mitra.social","type":"Mention"}],"to":["https://mitra.social/users/silverpill"],"type":"Note","url":"https://macgirvin.com/.well-known/apgateway/did🔑z6MkhPXNfiHDh2qSNjFzZ9yY27C1iHnHVbb1eaxuoiEe4tjk/item/3f3e6efe-9bac-425d-9692-4df179937c5f"}Signature base (object and proof config hashes):
3e51edddfe2378d071b6a79f091150b035045e80d053ce180893f000c5fba50197b90ed2cf47016298ae77a9a8572ba32c39e0570aa31c85033f54525af733bb@mapache I can't follow it because instead of Accept activity it sends this (no type property):
{"@context":"https://www.w3.org/ns/activitystreams","actor":"https://badges.vocalcat.com/actors/badges.vocalcat.com/badgefed","id":"https://badges.vocalcat.com/actors/badges.vocalcat.com/badgefed#accepts/follows/https://mitra.social/users/silverpill","object":{"actor":"https://mitra.social/users/silverpill","id":"https://mitra.social/activities/follow/01962b0c-d8db-5c26-f688-c80cd60332a3","object":"https://badges.vocalcat.com/actors/badges.vocalcat.com/badgefed","type":"Follow"}}@julian I sent a Follow activity and received this Accept activity:
{ "@context": "https://www.w3.org/ns/activitystreams", "actor": "https://community.nodebb.org/uid/2", "object": { "actor": "https://mitra.social/users/silverpill", "type": "Follow" }, "type": "Accept" }It doesn't specify what activity has been accepted (the id field is missing).
cc @julian
@arcanicanis The recommended type is still Proposal, but it is not a hard requirement anymore. Flohmarkt is using Note and I think that makes sense. FEP-0837 shouldn't prohibit this.
That being said, other projects might choose to use attachments. Mitra uses Link attachments that contain references to proposals. For example, my actor object (https://mitra.social/users/silverpill) has this attachment:
{ "href": "https://mitra.social/users/silverpill/proposals/monero:418015bb9ae982a1975da7d79277c270", "name": "MoneroSubscription", "rel": [ "payment", "https://w3id.org/valueflows/Proposal" ], "type": "Link" }The href attribute points to FEP--0837 proposal (or a subscription page, depending on the media type in Accept header).
GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.
All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.