RE: https://colours.bots.edent.tel/posts/68d87379-8e35-18be-b901-2730376a090d.jsonOk, I need some #ActivityPub help, please
Technical Discussion
6
Posts
3
Posters
20
Views
-
RE: https://colours.bots.edent.tel/posts/68d87379-8e35-18be-b901-2730376a090d.json
Ok, I need some #ActivityPub help, please.
The reply to this will have links to the QuoteRequest the bot received, the QuoteAuthorization which it saves, and the Accept message it returns.
Can anyone figure out why the Quote permissions aren't showing on external servers?
-
RE: https://colours.bots.edent.tel/posts/68d87379-8e35-18be-b901-2730376a090d.json
Ok, I need some #ActivityPub help, please.
The reply to this will have links to the QuoteRequest the bot received, the QuoteAuthorization which it saves, and the Accept message it returns.
Can anyone figure out why the Quote permissions aren't showing on external servers?
Here's the Quote Request Mastodon sends me.
https://colours.bots.edent.tel/data/inbox/68d979af-145daa4fe72cf333caba16effb8419ee85f7ed100b15c7ec16b0394629a309bb.jsonThis is the Stamp my bot generates.
https://colours.bots.edent.tel/quotes/68d979af-3a15-f520-ac6e-13b2d6d96d1b.jsonThis is the Accept my bot sends Mastodon.
https://colours.bots.edent.tel/quotes/68d979af-aeb1-83c3-a66c-fcb359e1ff90.jsonThe Mastodon.Social server shows the quote toot. External servers don't.
Please, someone explain what bone-headed mistake I've made.
(Edit: Updated the links)
#ActivityPub #MastodonAPI -
undefined julian@activitypub.space shared this topic on
-
Here's the Quote Request Mastodon sends me.
https://colours.bots.edent.tel/data/inbox/68d979af-145daa4fe72cf333caba16effb8419ee85f7ed100b15c7ec16b0394629a309bb.jsonThis is the Stamp my bot generates.
https://colours.bots.edent.tel/quotes/68d979af-3a15-f520-ac6e-13b2d6d96d1b.jsonThis is the Accept my bot sends Mastodon.
https://colours.bots.edent.tel/quotes/68d979af-aeb1-83c3-a66c-fcb359e1ff90.jsonThe Mastodon.Social server shows the quote toot. External servers don't.
Please, someone explain what bone-headed mistake I've made.
(Edit: Updated the links)
#ActivityPub #MastodonAPIIf you'd like to help answer this #ActivityPub question about #QuoteToot implementation - all the details are at https://socialhub.activitypub.rocks/t/quote-post-implementation-issues/8032
-
Here's the Quote Request Mastodon sends me.
https://colours.bots.edent.tel/data/inbox/68d979af-145daa4fe72cf333caba16effb8419ee85f7ed100b15c7ec16b0394629a309bb.jsonThis is the Stamp my bot generates.
https://colours.bots.edent.tel/quotes/68d979af-3a15-f520-ac6e-13b2d6d96d1b.jsonThis is the Accept my bot sends Mastodon.
https://colours.bots.edent.tel/quotes/68d979af-aeb1-83c3-a66c-fcb359e1ff90.jsonThe Mastodon.Social server shows the quote toot. External servers don't.
Please, someone explain what bone-headed mistake I've made.
(Edit: Updated the links)
#ActivityPub #MastodonAPIedent@mastodon.social I would suggest you contact claire@social.sitedethib.com about these questions. I'm sure she can help!
Great thing is you're already on fedi, no need to post the question elsewhere 😊
-
@julian @Edent hi! it seems like the issue is that the
idproperty of https://colours.bots.edent.tel/quotes/68d90651-06f1-c230-9d85-01b54be44fca.json does not match the document! it seems to reuse that of the request -
@julian @Edent hi! it seems like the issue is that the
idproperty of https://colours.bots.edent.tel/quotes/68d90651-06f1-c230-9d85-01b54be44fca.json does not match the document! it seems to reuse that of the request -
System shared this topic on
Gli ultimi otto messaggi ricevuti dalla Federazione
-
I feel like that being explicit is more advantageous. There are some subtle edge cases that it helps work around.
Thanks nutomic@lemmy.ml for your attention :)
-
Token revocation and userinfo endpoint are also implemented. iss indication on redirects is also recommended, but not planned yet
-
I believe CIMD is planned, and at some point expiring access tokens & refresh tokens will also land, and maybe in a distant future DPoP too.
DCR has a client registration proliferation problem, which is why Mastodon want CIMD.
-
So, as far as I can tell, Mastodon supports:
Authorization code flow PKCE Authorization server metadataIt doesn't seem to support:
OAuth Dynamic Client Registration Client ID Metadata DocumentsIt instead uses a proprietary endpoint.
thisismissem is that about right? Is there work underway to support CIMD (preferred) or dynamic registration (less good but a more established standard)?
-
@julian Nice workaround. They should describe it in the FEP
-
This way, @DailyRucks gives out permission slips which are “shaped” in a way that is instantly verifiable, no database and no internal state required.
The only problem is that the ID of the quoting post is an arbitrary URI, and passing full URIs as query string parameters is brittle. It seems to work for Mastodon post IDs, but other platforms might have more complex URI schemas.
I guess we'll see what happens! 😀
Project website with link to the git repository: https://fietkau.software/daily_rucks
🧵 6/6
-
That's why it's not possible to simply reply “ya sure” to every quote verification request. The response has to affirmatively state which quote it is for.
So I thought, instead of keeping a list of prior quotes in a local database, why not embed them in the ID (URI) of the verification stamp? That way the code could simply echo them back out for any future request.
Turns out this works! You can see an example here: https://fietkau.software/daily_rucks/ap/quoteAuth?stamp=2025-11-08;https%3A%2F%2Fexample.com%2Fsome-post
🧵 5/6
-
While reading FEP-044f, I had an idea for getting around that requirement. It's difficult to explain without getting extremely technical, but I think it could be interesting for platform implementers who want to offer blanket quotability to Mastodon users, but who have shied away from FEP-044f for its state management requirements.
Basically, a quote authorization stamp payload (see https://codeberg.org/fediverse/fep/src/branch/main/fep/044f/fep-044f.md#example-of-quoteauthorization) has to contain the IDs of the quoting post and the quoted post.
🧵 4/6
