Conversation

Notices

1. Embed this notice
   marius (mariusor@metalhead.club)'s status on Saturday, 07-Sep-2024 01:31:34 JST marius

   I often struggle with working on non-trivial, long standing projects because when I sit down to do the work after some hiatus, I can't seem to find the pain points I wanted to fix quickly enough.

   It feels like trying to get a bandaid off when you can't find an edge where it comes unstuck easily enough.

   The largest piece of bandaid that I wasn't able to get unstuck from the ActivityPub adjacent work is getting the HTTP-signatures working well with the rest of the fediverse (by which I mean Mastodon).

   Today I might have got the corner of another little bit of bandaid unstuck which hopefully will help in the long run.

   #ActivityPub #fedidev #GoActivityPub

   • Embed this notice
     BeAware :fediverse: (beaware@social.beaware.live)'s status on Saturday, 07-Sep-2024 02:13:57 JST BeAware :fediverse:

     in reply to

     @mariusor are you aware of Authorized Fetch and doing it that way?

     I'm not a programmer or dev, so I'm not sure how HTTP signatures normally work, but I have seen multiple devs doing the same sort of work that were completely unaware of Mastodon's proprietary "Authorized Fetch" feature that deals with http signatures in some way that's important.

     Thought I'd mention it, just in case there's another way to do them that isn't the Mastodon "Authorized Fetch" way, possibly causing issues.🤷♂️

   • Embed this notice
     BeAware :fediverse: (beaware@social.beaware.live)'s status on Saturday, 07-Sep-2024 03:09:20 JST BeAware :fediverse:

     in reply to

     @mariusor of course it probably does!😂

     Mastodon isn't exactly known for considering other things outside of their bubble.😅

   • Embed this notice
     marius (mariusor@metalhead.club)'s status on Saturday, 07-Sep-2024 03:09:22 JST marius

     in reply to

     • BeAware :fediverse:

     @BeAware I have not gone over the details, but to the best of my knowledge Authorized Fetch is just the name Mastodon uses for a similar mechanism to what I'm doing in FedBOX. In their case I think they don't allow any C2S get request on collections if they're not authorized, in mine I just filter out non Public activities/objects.

     But, I'm pretty sure that my work on having the collections filtered based on recipients predates Mastodon's by quite some time. :P

   • Embed this notice
     BeAware :fediverse: (beaware@social.beaware.live)'s status on Saturday, 07-Sep-2024 03:16:52 JST BeAware :fediverse:

     in reply to

     @mariusor well...even if you did create an FEP, Mastodon doesn't look at those. They usually don't work on AP directly, only take the parts that they want to use and ignore the others.

     To have it integrated into Mastodon, you'd have to go to their GitHub or something, I think.

   • Embed this notice
     marius (mariusor@metalhead.club)'s status on Saturday, 07-Sep-2024 03:16:53 JST marius

     in reply to

     • BeAware :fediverse:

     @BeAware in fairness I don't think I advertised the feature anywhere where the Mastodon devs might have looked.

     I didn't create a FEP for it sadly.

   • Embed this notice
     BeAware :fediverse: (beaware@social.beaware.live)'s status on Saturday, 07-Sep-2024 03:26:51 JST BeAware :fediverse:

     in reply to

     @mariusor 😔meanwhile, Eugen seems contempt with a career in photography instead...🤦♂️

   • Embed this notice
     marius (mariusor@metalhead.club)'s status on Saturday, 07-Sep-2024 03:26:52 JST marius

     in reply to

     • BeAware :fediverse:

     @BeAware I know, I know... I have two or three issues that they have been ignoring for over three years. :)