Ryan Barrett
de1bd693dd
OAuth logins: catch and flash errors
...
for #1680
2025-05-21 10:53:52 -07:00
Ryan Barrett
6263504d15
add Pixelfed OAuth login
...
for #1680
2025-05-21 10:53:52 -07:00
Ryan Barrett
e772a24df6
finish first pass at web UI, login + settings
...
for #1680
2025-05-21 10:53:52 -07:00
Ryan Barrett
0801f2c624
start on OAuth login, web UI for Bluesky and Mastodon
...
for #1680
2025-05-21 10:53:51 -07:00
Ryan Barrett
7ce90a24cb
activitypub: stop serving featured collection
...
this triggered a 4-6kqps (!) flood of inbound requests from Pleroma/Akkoma, https://github.com/snarfed/bridgy-fed/issues/1374#issuecomment-2891993190
2025-05-19 12:36:03 -07:00
Ryan Barrett
cc5a61eed4
AP: serve actors' featured collection separately
...
for #1374
2025-05-18 20:33:54 -07:00
Ryan Barrett
cb2bc0a698
ActivityPub._fetch: hydrate featured collection when it's a bare id
...
adds a new _hydrate method and hoists _get out of _fetch to be a classmethod
for #1374
2025-05-18 10:51:10 -07:00
Ryan Barrett
d14ad89960
AP: add split domain support via full webfinger resolution
...
implemented in ActivityPub.reload_profile, based on https://www.w3.org/community/reports/socialcg/CG-FINAL-apwf-20240608/#reverse-discovery and https://correct.webfinger-canary.fietkau.software/#developers . thanks @jfietkau! for #1031
2025-05-16 11:12:15 -07:00
Ryan Barrett
37096e2ed2
Revert "use Protocol.create_for for all protocols, not just HAS_COPIES ones"
...
This reverts commit 9f9ecce187
.
Not 100% sure but I suspect this caused #1929 . Reverting while I debug more.
2025-05-13 13:43:08 -07:00
Ryan Barrett
9f9ecce187
use Protocol.create_for for all protocols, not just HAS_COPIES ones
...
we can now use create_for for all protocol-specific setup for new users, eg creating AP keypairs. for #1881
2025-05-10 09:03:38 -07:00
Ryan Barrett
6ea5a7aea8
activitypub._load_key: test when key fetch fails
...
trying to repro https://console.cloud.google.com/errors/detail/COLzgISI47vpMg?project=bridgy-federated but I couldn't :/
2025-04-29 17:33:35 -07:00
Ryan Barrett
0433422100
ActivityPub.postprocess_as2_actor: set manuallyApprovesFollowers to false
...
for Pixelfed interop, prevents them interpreting our actors as "private." #1893
2025-04-21 16:34:06 -07:00
Ryan Barrett
7737dfc50c
bug fix for reload profile: prefer handle for AP users in user_page_path()
2025-03-30 12:26:41 -07:00
Ryan Barrett
14f5dc8e10
noop: drop deprecated User.readable_id property
2025-03-19 13:24:45 -07:00
Ryan Barrett
b09c8cdd6b
move common.FlashErrors to oauth_dropins.webutil.flask_util
2025-03-18 11:27:10 -07:00
Ryan Barrett
b50b5b42fb
ActivityPub.migrate_out: fail if user is ActivityPub
2025-03-07 15:17:06 -08:00
Ryan Barrett
83fe2d5c3f
noop: activitypub.migrate_out: add logging
2025-03-05 13:08:04 -08:00
Ryan Barrett
e39fa43e38
ActivityPub.migrate_to: mark bridged AP account with movedTo
...
https://swicg.github.io/miscellany/#movedTo
https://docs.joinmastodon.org/spec/activitypub/#as
for #330 , snarfed/bounce#17
2025-03-05 12:13:10 -08:00
Ryan Barrett
f7f03602b7
activitypub: handle granary as2 adding https://purl.archive.org/miscellany to @context
...
for https://swicg.github.io/miscellany/
2025-03-05 11:53:00 -08:00
Ryan Barrett
78cbe2c44b
add Protocol.migrate_out, implement in ActivityPub
...
for #330 , snarfed/bounce#17 , cc @anujahooja
2025-03-05 11:38:28 -08:00
Ryan Barrett
880cb487c0
activitypub.postprocess_as2: use as2.set_content to keep contentMap in sync
...
for #1609
2025-02-07 12:30:01 -08:00
Ryan Barrett
6be749e386
activitypub.postprocess_as2: when adding <p> to content, also add to contentMap
...
for #1609
2025-02-06 21:59:04 -08:00
Ryan Barrett
234ceb72b5
activitypub: noop: suppress a couple log messages
2025-02-05 14:57:53 -08:00
Ryan Barrett
8043d474d7
misc doc updates
...
* simplify cross-reference links in design doc
* add docstrings to most class attrs/constants
* revise sphinx config
2025-01-31 09:34:38 -08:00
Ryan Barrett
60d594bd84
AP: add newsmast.community, channel.org to age req't exempt list
...
cc @anujahooja
2025-01-31 08:52:28 -08:00
Ryan Barrett
4611551140
add common.CACHE_CONTROL_VARY_ACCEPT
2025-01-29 11:57:50 -08:00
Ryan Barrett
899a6dd405
remove a bunch of old deprecated URL endpoints
...
looked at requests to these endpoints over the last 30d, they all have either none, or all errors, or requests for just my account (snarfed.org web)
* /ap/web/...
* /inbox
* /render
* /user/...
2025-01-26 19:40:29 -08:00
Ryan Barrett
23e07b6a2e
activitypub: stop checking whether instance domain is in Web.manual_opt_out
...
we do something like 10qpm of the initial query that loads the manual_opt_out Web domains, I guess due to spinning up new frontend instances
2025-01-24 10:36:40 -08:00
Ryan Barrett
d863add480
first pass at not storing CRUD activities any more
...
for #1360
good! but not done yet, need to fix populating Object.notify/feed, handling user vs profile ids
2025-01-20 13:45:12 -08:00
Ryan Barrett
a48ce4f7aa
temporarily exempt pixelfed.social from the 2w account age req't
...
cc @anujahooja
2025-01-15 11:50:03 -08:00
Ryan Barrett
202d43c25d
temporarily stop handling newsmast's undos of reposts
...
they've been sending 1-2qps of them to us for a while now, pretty much all spurious, or valid but older than we'd know about. cc #1686
2025-01-13 18:14:27 -08:00
Ryan Barrett
207ac48e80
noop: dms: tweak logging
2025-01-11 15:22:50 -08:00
Ryan Barrett
e8b201dc33
extract memcache logic out into new memcache.py file
2025-01-09 17:10:05 -08:00
Ryan Barrett
cf6446e76a
activitypub.postprocess_as2: handle Link objects using href field instead of url
...
for #1637 , bug fix to match snarfed/granary@14c965340f
2024-12-19 09:48:39 -08:00
Ryan Barrett
6ba481c99a
activitypub.actor: put sharedInbox on actor id's domain
...
for #1570
2024-12-15 10:16:56 -08:00
Ryan Barrett
b600f82c2d
AP inbox: start returning 403 when actor and activity/object domains don't match
...
for https://github.com/snarfed/bridgy-fed/security/advisories/GHSA-37r7-jqmr-3472
2024-12-09 14:15:37 -08:00
Ryan Barrett
a386aac45c
AP.inbox: bug fix for same-domain check
2024-12-06 15:31:21 -08:00
Ryan Barrett
e658f10369
ActivityPub.inbox: start on same-domain check for actors and activity/object ids
...
for https://github.com/snarfed/bridgy-fed/security/advisories/GHSA-37r7-jqmr-3472
2024-12-06 14:51:40 -08:00
Ryan Barrett
65d4f78ae2
Web.get_or_create: re-verify more often
...
fixes https://github.com/snarfed/bridgy-fed/discussions/1601
2024-12-05 14:09:55 -08:00
Ryan Barrett
94a0c2618e
prune down misc logging
...
for #1149
2024-12-02 22:20:12 -08:00
Ryan Barrett
2eca1c074c
AP: strip internal content_is_html field before sending activities
...
for #1584 , maybe
2024-12-02 12:44:26 -08:00
Ryan Barrett
df505c1c0a
activitypub.postprocess_as2: handle attachments with list-valued url field
...
fixes https://console.cloud.google.com/errors/detail/CIDK5t6OiZvM4QE;time=P7D;locations=global?project=bridgy-federated&inv=1&invt=AbjA2Q
2024-12-01 20:11:19 -08:00
Ryan Barrett
20dc814c80
add 2m delay to receive tasks for deletes
...
for #1361
2024-11-28 21:39:30 -08:00
Ryan Barrett
538065792e
User.get_or_create: don't propagate if the user is blocked
...
ie for web sites that don't have RSS or Atom feed or webmentions
for #1458
2024-11-27 09:04:38 -08:00
Ryan Barrett
55a3d4a9ab
activitypub.postprocess_as2_actor: bug fix for PropertyValue attachment without value
...
fixes https://console.cloud.google.com/errors/detail/CPmj9e-Oh5PNfQ;locations=global;time=P30D?project=bridgy-federated&inv=1&invt=AbhrPA
2024-11-18 14:39:12 -08:00
Ryan Barrett
d95a5f6753
ActivityPub.actor: add Vary: Accept header
...
...since it now does conneg. for #1493
2024-11-16 13:11:18 -08:00
Ryan Barrett
3ffe589e96
AP: put Accept activity id on same BF domain as actor
...
for #1093
2024-11-01 21:29:51 -07:00
Ryan Barrett
fa04b2ea44
AP actor endpoint: check conneg, redirect to profile if not an AS2 request
...
hopefully fixes #1009
2024-10-31 18:09:30 -07:00
Ryan Barrett
b4ac98c84e
move common.add, remove to webutil.util
...
in snarfed/webutil@46ef97e4fe
2024-10-31 09:41:28 -07:00
Ryan Barrett
ad910e9724
DMs: set inReplyTo when replying
2024-10-28 15:49:15 -07:00