I often struggle with working on non-trivial, long standing projects because when I sit down to do the work after some hiatus, I can't seem to find the pain points I wanted to fix quickly enough.
-
I often struggle with working on non-trivial, long standing projects because when I sit down to do the work after some hiatus, I can't seem to find the pain points I wanted to fix quickly enough.
It feels like trying to get a bandaid off when you can't find an edge where it comes unstuck easily enough.
The largest piece of bandaid that I wasn't able to get unstuck from the ActivityPub adjacent work is getting the HTTP-signatures working well with the rest of the fediverse (by which I mean Mastodon).
Today I might have got the corner of another little bit of bandaid unstuck which hopefully will help in the long run.
-
@mariusor are you aware of Authorized Fetch and doing it that way?
I'm not a programmer or dev, so I'm not sure how HTTP signatures normally work, but I have seen multiple devs doing the same sort of work that were completely unaware of Mastodon's proprietary "Authorized Fetch" feature that deals with http signatures in some way that's important.
Thought I'd mention it, just in case there's another way to do them that isn't the Mastodon "Authorized Fetch" way, possibly causing issues.
️ -
@BeAware I have not gone over the details, but to the best of my knowledge Authorized Fetch is just the name Mastodon uses for a similar mechanism to what I'm doing in FedBOX. In their case I think they don't allow any C2S get request on collections if they're not authorized, in mine I just filter out non Public activities/objects.
But, I'm pretty sure that my work on having the collections filtered based on recipients predates Mastodon's by quite some time.
-
@mariusor of course it probably does!
Mastodon isn't exactly known for considering other things outside of their bubble.
-
@BeAware in fairness I don't think I advertised the feature anywhere where the Mastodon devs might have looked.
I didn't create a FEP for it sadly.
-
@mariusor well...even if you did create an FEP, Mastodon doesn't look at those. They usually don't work on AP directly, only take the parts that they want to use and ignore the others.
To have it integrated into Mastodon, you'd have to go to their GitHub or something, I think.
-
@BeAware I know, I know... I have two or three issues that they have been ignoring for over three years.
-
@mariusor
meanwhile, Eugen seems contempt with a career in photography instead...
️
