activity pub enhancements

[maybeanerd]

Or just use fedify as noted in a comment https://fedify.dev/

---

TODOs to make AP support better

• add nodeinfo (which should point to the instance endpoint then?) https://github.com/jhass/nodeinfo/blob/main/PROTOCOL.md
• look into HTTP signing! This is necessary to federate with most other platforms, like mastodon
• fix actor (and general) retrieval by changing/adding content type https://www.w3.org/TR/activitypub/#retrieving-objects
• support activitypub content-type headers in fastify: maybe use https://fastify.dev/docs/latest/Reference/ContentTypeParser/#content-type-parser
• send content-type headers in signed request util when passing a body
• make outbox GET an ordered collection https://www.w3.org/TR/activitystreams-vocabulary/#dfn-orderedcollection
• make inbox POST allow a single object. Maybe even force that? Might make delivery "easier" https://www.w3.org/TR/activitypub/#delivery
• get verify.funfedi to clear (getting stuff with signatures). Signing is still weird, read into it here: https://funfedi.dev/testing_tools/http_signatures/ . Most likely sending the digest on non-post requests is the issue
• remove versioning from ActivityPub controller. They won't be able to be changed, as they are used as IDs
• test signing acceptance with services like mastodon
• send back "Accept" activities for follows, to allow other platforms to follow game servers. Game servers themselves do NOT wait for follow accepts, as they will only form a treaty on mutual follow anyways -> doing this, but it doesnt work. Might be that mastodon expects the entire activity object to be inline instead of just referencing the objectId
• look into exposing followers and following collections. This might make mastodon actually reflect accepted follows #741
• validate signing from others (game as well as other AP instances) - this is necessary for the last verify.funfedi test https://docs.joinmastodon.org/spec/security/#http-sign
• on outbox posting, target servers better (e.g. follow/unfollow only to the respective servers, as well as likes) Only things that belong to own trades (create, delete) should be shared to all
• when starting to follow/a treaty, query the outbox to backfill previous activities. Prob necessary to add pagination and date markers for that
• adjust outbox: only include create activities of notes that have not also been deleted already

[maybeanerd]

Maybe also interesting (e.g. for nodeinfo)

https://fedidb.org/crawler.html

[maybeanerd]

test actor and inbox:

https://verify.funfedi.dev/?actor_uri=https%3A%2F%2Ftest.game.diluz.io%2Fapi%2Fv1%2Fcrossroads%2Factors%2F755032cc-8df3-49cf-aa07-066b337c33d4

[maybeanerd]

@all-contributors please add @maybeanerd

[allcontributors]

@maybeanerd

I couldn't determine any contributions to add, did you specify any contributions?
Please make sure to use valid contribution names.

[maybeanerd]

@all-contributors please add @maybeanerd for code

[allcontributors]

@maybeanerd

@maybeanerd already contributed before to code

[maybeanerd]

@all-contributors add @tiborpilz for testing

[allcontributors]

@maybeanerd

I've put up a pull request to add @tiborpilz! 🎉

[maybeanerd]

Let's add @tiborpilz for testing again @all-contributors

[maybeanerd]

"Natural language support" my ass

@all-contributors add @tiborpilz for testing