A Chrome/Firefox extension that simplifies follow and post interactions on Mastodon servers other than your own.
 
 
 
 
Go to file
lartsch fdc0ea1b7b add setting for auto-action 2022-11-22 14:30:39 -05:00
firefox bump version 2022-11-22 14:12:50 -05:00
img Add files via upload 2022-11-21 18:10:58 -05:00
src add setting for auto-action 2022-11-22 14:30:39 -05:00
.gitignore remove firefox.zip, update gitignore 2022-11-22 09:53:21 -05:00
LICENSE Update LICENSE 2022-11-17 15:09:19 +01:00
README.md Update README.md 2022-11-22 16:10:00 +01:00
manifest.json bump version 2022-11-22 14:12:50 -05:00

README.md

FediFollow (Beta)

A Chrome/Firefox extension that simplifies following and post interactions on other Mastodon instances than your own by intelligently redirecting you to your instance and utilizing the local API to resolve the content.

Should work for all updated Chromium browsers, updated Firefox, as well as Kiwi browser on Android. Currently only Mastodon 3 + 4 in different flavors are supported as far as I tested. Support for other Fediverse software / versions / flavors might be added in the future. Feel free to create pull requests / issues. This is my first proper browser extension so please bear with my awful JS skills.

Important: Your data will never leave your machine by using this addon.

Installation

Right now, this needs to be installed in debugging / developer mode. Soon it will be available on Chrome Webstore / Firefox addon store.

  1. Download the latest release for your browser (chrome or firefox)

Chrome

  1. Unzip the downloaded file somewhere
  2. Go to your Chrome extension page (URL: chrome://extensions) and enable developer mode
  3. Click the "Load unpacked" button and then select the unzipped folder (should be "fedifollow-X.X.X-chrome")

Firefox

  1. Open the debugging page (URL: about:debugging)
  2. Select "This Firefox"
  3. Click the "Load Temporary Add-on" button and then select the downloaded Firefox ZIP file

Setup

You might need to allow popups if your browser asks for it.

  • Required: Click the extension icon to set your Mastodon instance
    • Only set the domain name (like "infosec.exchange") without http/https or URL)
  • Optional: Change whether to redirect in current or new tab
  • Optional: Change the mode (all sites except those on blacklist (default) / no sites but those on whitelist)
  • Optional: Add domain names to the blacklist/whitelist textarea, one per line, for ex.
    mastodon.social
    bbq.snoot.com
    
  • Required: Hit "Submit" to update your settings

Note

  1. Currently supports different flavours of Mastodon 3 + 4
  2. The whitelist mode can be useful if you do not want the extension to run basic checks on every site (since it needs to determine if it is a Mastodon site). Not sure if the blacklist feature is good for anything but I still included it.
  3. It can have several reasons why a redirection/instance might not work:
    • You are not logged in to your home instance
    • There are instances that use custom layouts/flavours (additional identifiers need to be added to extension)
    • Instance chose to hide the follow button when not logged in (not supported yet)
    • It's not a Mastodon instance (not supported yet)
    • Element identifiers might change over time (extension needs to be updated)

So please be aware, that this extension can fail in some cases. Feel free to submit pull requests / issues.

Screenshots / GIFs

Extension Popup        Follow Redirect Follow Redirect

How it works

Some basic explanations how the addon works...

General

  • Addon performs basic checks on the URL and site content to determine if and what scripts to run
  • On external instances, depending on the interaction, a search string is built for the content you wish to interact with
  • You are then redirected to your local instance with the search string as value for an URL parameter that the addon checks for
  • If the home instance is opened with this parameter...
    • Your authorization token is extracted from the DOM
    • Then the parameter value is used to perform a search for it with the search API endpoint (with resolving, so auth is needed)
    • If a match for a user or post was found, you are then redirected to the content
    • Using the search API gives best compatibility for resolving content (for ex. Toot IDs differ on instances for the same toot)

Follow interactions

  • Addon uses a list of DOM identifiers of follow buttons (for different views / flavors)
  • All default actions for clicking the button are prevented
  • Addon extracts the handle and handle domain from the profile view
  • The handle domain is then searched for with the external instance's search API endpoint (without resolving, so no authorization needed)
    • This is to ensure we grab the correct instance URL for this user, since it can differ from the domain handle (also, the domain handle does not always resolve)
  • If all worked out, we build our search string and redirect to your home instance with the value as URL parameter then continue as explained in "General"

Post interactions

  • Addon uses a list of allowed URLs and DOM identifiers for interaction buttons
  • It then grabs the Toot ID using different methods, depending on the Mastodon version / flavor
  • The Toot ID is then searched for using the external instance's status API
    • This gives us the actual URL of the post on its home instance for using as the search string (even if the post is from another external instance than the external instance it is viewed on)
  • If all worked out, we build our search string and redirect to your home instance with the value as URL parameter then continue as explained in "General"

Todos / Planned features

  • Add support for post interactions (DONE)
  • Support executing the intended action after redirect
  • Add support for other implementations (Plemora, GNU Social, ...)
  • Publish to Chrome Webstore (IN PROGRESS)
  • Publish to Firefox addon store (IN PROGRESS)
  • Find additional layouts/flavours to add identifiers for
  • Support for profiles views with follow button disabled
  • Add support for Firefox (DONE)
  • Fix some rare cases where an instance runs on a subdomain but the handle uses the domain without subdomain (need to get the handle directly from the profile instead of URL + domain name) (DONE)
  • Add support for whitelist/blacklist (DONE)
  • Add feature to indicate if you are already following a user when browsing his profile on another instance (this requires calls to the home instance, will look into it soon)
  • Review if permissions in current manifest are actually needed like that (DONE)
  • If I find myself to be bored, probably more

Thanks to...

@raikasdev because I stole his fix for cross-browser storage API support