31 commits

Author	SHA1	Message	Date
alemi	267840a317	fix: not all keys are #main-key	2024-04-16 19:19:49 +02:00
alemi	f1ff946245	fix: also store public addrs for remote activities ... oopsss thank you @prefetcher	2024-04-15 21:29:30 +02:00
alemi	b1b0aee2f9	feat: process some Undo activities, small refactor	2024-04-14 16:47:36 +02:00
alemi	b99ca9fa7e	feat: ignore deletions for GONE users ... mastodon is quite spammy omg	2024-04-14 16:05:44 +02:00
alemi	8a14600311	fix: proper addressing creation for likes	2024-04-14 05:53:36 +02:00
alemi	c9a20b4e65	feat: node.fetch() is now signed	2024-04-13 22:13:36 +02:00
alemi	2e8d4323ee	fix: don't repeat (request-target)	2024-04-13 21:35:53 +02:00
alemi	027040604c	feat: improved http signatures code	2024-04-13 21:22:19 +02:00
alemi	9c9b5ec380	fix: standard base64	2024-04-13 06:06:05 +02:00
alemi	5d3c222774	fix: verify_oneshot, maybe makes a difference?	2024-04-13 06:02:50 +02:00
alemi	652af15771	fix: include method in request target	2024-04-13 05:36:29 +02:00
alemi	437859008c	feat: reimplemented from scratch http sig verify	2024-04-13 05:26:50 +02:00
alemi	72774d01ed	fix: also in case of digest	2024-04-13 04:31:50 +02:00
alemi	80d324ae03	fix: use method, don't hardcode "post"	2024-04-13 04:24:22 +02:00
alemi	1caaa08f78	fix: fetcher specifies application/json	2024-04-13 04:21:33 +02:00
alemi	861cd2297b	fix: why is it throwing 500???	2024-04-13 03:47:04 +02:00
alemi	b4e82b551b	fix: going back to manual http signatures ... at least those worked, what the fuck is up with this lib technology...	2024-04-13 03:41:36 +02:00
alemi	d60d29bf98	fix: continue as anon if can't fetch user	2024-04-13 03:31:37 +02:00
alemi	bb16a5b7d2	fix: return response rather than parsing ... so that deliveries work	2024-04-13 03:21:25 +02:00
alemi	855434ee12	fix: try using again the new lib?	2024-04-13 03:09:47 +02:00
alemi	3a48e91655	fix: force overrule signature algorithm ... really what?????	2024-04-13 03:03:54 +02:00
alemi	70c978caa0	fix: having more fun with http signatures	2024-04-13 02:55:10 +02:00
alemi	ff55d2fea4	fix: mastodon compat	2024-04-13 02:35:18 +02:00
alemi	46bbeea3ab	feat: verify inbox http signatures	2024-04-13 01:49:23 +02:00
alemi	d66f09d130	feat: inbox requests remote server auth	2024-04-13 01:49:04 +02:00
alemi	5863bdf04e	feat: signed fetches, improved signatures code ... should make sure that it still works	2024-04-13 00:44:53 +02:00
alemi	ca59c30e70	fix: auth filter conditions any, not all	2024-04-12 21:18:01 +02:00
alemi	af8d11e75b	feat: inbox/outbox security and obj embedding	2024-04-12 19:36:00 +02:00
alemi	3a874ed3e7	fix: insert activities, expand addressing ... remote activities for Likes and Follows should still be added to our database so we know where to verify those and we can present them in a timeline for notifications	2024-04-12 18:40:24 +02:00
alemi	86e84d88aa	chore: updated apb things, restructured a bit	2024-04-11 00:29:32 +02:00
alemi	bb26ff763d	chore: restructured completely ... kinda MVC: Model -> model View -> routes Controller -> server	2024-04-09 01:14:48 +02:00