Need help implementing ActivityPub - getting inconsistent results across platforms (blenderdumbass.org)
from Madiator2011@lm.madiator.cloud to fediverse@lemmy.world on 08 Jun 18:10
https://lm.madiator.cloud/post/1010357

My friend is working on adding ActivityPub support to his blog platform (BDServer) so people can follow/comment from Mastodon, Lemmy, etc.

Current status: Lemmy and Misskey can find and follow his account (@blenderdumbass@blenderdumbass.org), but Mastodon can’t find it at all, even though he sees proper ActivityPub requests hitting his server.

The technical details are pretty gnarly - RSA signature verification, HTTP header recreation, multi-threading issues. He wrote up the full journey here: Please Help Me With Activity Pub

If anyone has ActivityPub experience or wants to take a look at the code (Python), we have a Matrix room for BDServer development. Any insights on why different platforms behave differently would be super helpful.

https://matrix.to/#/#bdserver:tchncs.de

Source code: ActivityPub.py

#fediverse

threaded - newest

irelephant@lemmy.dbzer0.com on 08 Jun 18:38 next collapse

Did something change since this was posted?
I can look it up properly on mastodon.
You have to be signed in to fetch accounts on mastodon, is that the problem?

Are you using any framework to build the site? There’s a few libraries for activitypub.
These links could be helpful: codeberg.org/…/delightful-activitypub-development…

blenderdumbass@lm.madiator.cloud on 08 Jun 18:49 next collapse

Seems like somebody mentioned the account on the fediverse that started a chain reaction of various instances requesting a bunch of stuff. Which made it to Mastodon.social too. It still doesn’t work though.

The server is written in python and the idea is to make it deploy-able without needing to install anything extra. So I’m trying to implement my own activity pub.

irelephant@lemmy.dbzer0.com on 08 Jun 18:54 next collapse

Running curl https://blenderdumbass.org/activitypub/account/blenderdumbass -H “Accept: application/activity+json” twice in a row outputs some bunkerweb anti-spam stuff.

Madiator2011@lm.madiator.cloud on 08 Jun 19:02 next collapse

Disabled bunker for now.

irelephant@lemmy.dbzer0.com on 08 Jun 19:06 collapse

Also: bunker blocks me 100% of the time on individual articles.

Madiator2011@lm.madiator.cloud on 08 Jun 19:23 collapse

Should not too I removed all blocks.

blenderdumbass@lm.madiator.cloud on 08 Jun 19:54 collapse

try spoofing a user-agent or torifying it maybe

irelephant@lemmy.dbzer0.com on 08 Jun 21:01 collapse

While I’m sure that would let me see the article, mastodon probably wouldn’t handle it well.

rglullis@communick.news on 08 Jun 19:03 next collapse

It’s for django, but take a look into my ActivityPub Toolkit. It is designed to be compliant with ActivityPub and not with any particular implementation, so it should be easy for you to adapt to your own needs.

blenderdumbass@lm.madiator.cloud on 08 Jun 19:52 collapse

This doesn’t have any link to code. And all the other buttons say that the docs are not implemented yet.

rglullis@communick.news on 08 Jun 19:57 collapse

The menu has a link to the repository.

julian@community.nodebb.org on 08 Jun 21:37 collapse

For what it's worth your blog does show up fine in NodeBB as well. Perhaps you are missing the @context property and so Mastodon is refusing to parse it?

Madiator2011@lm.madiator.cloud on 08 Jun 18:49 collapse

I would say for now the most issue is about acually pulling posts.

flamingos@feddit.uk on 08 Jun 18:40 next collapse

I’m not the most knowledgeable about Mastodon’s APub implementation, but having a look at the Actor of that profile, it might be because it’s invalid JSON-LD. Now, Mastodon doesn’t actually do proper JSON-LD checks, you can follow PieFed profiles from Mastodon and they don’t produce proper JSON-LD, but they do include “https://w3id.org/security/v1” in their @context, and doing a code search of Mastodon’s source code does show some checks for if that’s included.

Lemmy’s I am familiar with and irrc it doesn’t even check if @context is present.

irelephant@lemmy.dbzer0.com on 09 Jun 15:22 collapse

I was trying something on lemmy a while ago and it required an @context.

flamingos@feddit.uk on 09 Jun 22:38 collapse

I don’t know if somethings changed, but it actually doesn’t. This lines would need to be WithContext<SharedInboxActivities>> for that to be the case, and just to make sure I tested against a local running main and was able to send activities to it without the @context just fine.

rglullis@communick.news on 08 Jun 19:04 next collapse

Maybe this kind of discussion will get more interested people on !activitypub@programming.dev .

iso@lemy.lol on 08 Jun 22:28 collapse

Happy cake day! 🎂

irelephant@lemmy.dbzer0.com on 13 Jun 11:15 collapse

I just took another look at it,

Comparing it to another random note, the to and cc fields are supposed to be arrays, rather than just a string.

Its also missing a url field, which is supposed to link to the user-facing url of the post.

cc: @blenderdumbass@lm.madiator.cloud