aumetra/tranquility

[DEPRECATED] Small ActivityPub server

tranquility's Issues

Implementation progress

• Federation
  • Webfinger server
  • Webfinger client
  • HTTP signature signing
  • HTTP signature verification
  • Actors
    • The actor itself
    • Inbox
    • Outbox
    • Following collection
    • Followers collection
  • Activities (incoming)
    • Accept
    • Announce
    • Create
    • Delete
    • Follow
    • Like
    • Reject
    • Undo
    • Update
  • Activities (outgoing)
    • Accept
    • Announce
    • Create
    • Delete
    • Follow
    • Like
    • Reject
    • Undo
    • Update

---

The implementation progress of outgoing activities is related to the API progress
Outgoing activities will be implemented when they're needed to implement certain endpoints

---

• Client API ((mostly) Mastodon API)
  • Authorization
    • App registration
    • OAuth
  • Accounts
    • Block
    • Create
    • Delete
    • Follow
    • Retrieve
    • Update (#19)
  • Statuses
    • Delete (#21)
    • Retrieve
    • Publish (#20)
  • Media upload
  • Timelines
    • Account
    • Home
    • Local
    • Global
  • Streaming API
    • Home
    • Local
    • Global
    • Notifications

Email confirmation for accounts

implement webfinger

webfinger isn't explicitly mentioned in the activitypub standard but is used by all major implementations for easy user discovery.
this is especially important for tranquility because the profile routes reference the user by their uuid and not their username and thus are not particularly memorable

example webfinger get url: /.well-known/webfinger?resource=acct:[email protected]
example webfinger response:

HTTP/1.1 200 OK
Content-Type: application/jrd+json

{
    "subject":"acct:[email protected]",
    "aliases":[
        "https://example.com/users/9d0ef366e3714e4dad38dc5823eeefd5"
    ],
    "links":[
        {
            "rel":"self",
            "type":"application/activity+json",
            "href":"https://example.com/users/9d0ef366e3714e4dad38dc5823eeefd5"
        }
    ]
}

webfinger rfc

Implement ability to delete posts

[Security] Workflow audit.yml is using vulnerable action actions/checkout

The workflow audit.yml is referencing action actions/checkout using references v1. However this reference is missing the commit a6747255bd19d7a757dbdda8c654a9f84db19839 which may contain fix to the some vulnerability.
The vulnerability fix that is missing by actions version could be related to:
(1) CVE fix
(2) upgrade of vulnerable dependency
(3) fix to secret leak and others.
Please consider to update the reference to the action.

Implement update methods for accounts

Namely the PATCH /api/v1/accounts/update_credentials endpoint

Add support for announce activities

[rsa-export] pinging

Hi,

Sorry to create an issue unrelated to the project, but maybe you don't get notification from GitLab so I'm trying here to get your attention :) I've created a question on rsa-export and I don't know if you have seen it: https://gitlab.com/smallglitch/rsa-export/-/issues/3

Regards,

Implement mentions inside of posts

For example @user or @[email protected]