My friend is working on adding ActivityPub support to his blog platform (BDServer) so people can follow/comment from Mastodon, Lemmy, etc.
Current status: Lemmy and Misskey can find and follow his account (@blenderdumbass@blenderdumbass.org), but Mastodon can’t find it at all, even though he sees proper ActivityPub requests hitting his server.
The technical details are pretty gnarly - RSA signature verification, HTTP header recreation, multi-threading issues. He wrote up the full journey here: Please Help Me With Activity Pub
If anyone has ActivityPub experience or wants to take a look at the code (Python), we have a Matrix room for BDServer development. Any insights on why different platforms behave differently would be super helpful.
https://matrix.to/#/#bdserver:tchncs.de
Source code: ActivityPub.py
Maybe this kind of discussion will get more interested people on !activitypub@programming.dev .
Happy cake day! 🎂
Did something change since this was posted?
I can look it up properly on mastodon.
You have to be signed in to fetch accounts on mastodon, is that the problem?Are you using any framework to build the site? There’s a few libraries for activitypub.
These links could be helpful: https://codeberg.org/fediverse/delightful-activitypub-development/Seems like somebody mentioned the account on the fediverse that started a chain reaction of various instances requesting a bunch of stuff. Which made it to Mastodon.social too. It still doesn’t work though.
The server is written in python and the idea is to make it deploy-able without needing to install anything extra. So I’m trying to implement my own activity pub.
Running
curl https://blenderdumbass.org/activitypub/account/blenderdumbass -H "Accept: application/activity+json"twice in a row outputs some bunkerweb anti-spam stuff.try spoofing a user-agent or torifying it maybe
I’m not the most knowledgeable about Mastodon’s APub implementation, but having a look at the
Actorof that profile, it might be because it’s invalid JSON-LD. Now, Mastodon doesn’t actually do proper JSON-LD checks, you can follow PieFed profiles from Mastodon and they don’t produce proper JSON-LD, but they do include"https://w3id.org/security/v1"in their, and doing a code search of Mastodon’s source code does show some checks for if that’s included.Lemmy’s I am familiar with and irrc it doesn’t even check if
is present.I was trying something on lemmy a while ago and it required an
.
