ActivityPub Functions Supported

The below shows each ActivityPub type and its progress on being supported. More to come as things are implemented.

• GET Web-finger: Mostly Implemented. Some formats not supported yet. Technically not part of ActivityPub.
• GET User: Implemented.
• POST to inbox.
  • Create: Partly implemented. Any object is currently accepted and handled as a note. Signatures are not currently being checked. No other fields are checked, so any valid JSON that is correct will be accepted. When signature checking is implemented it will only be done if the signature is provided. You can verify your JSON type is correct before trying signing.
    
    Additional functions to get JSON/XML from the inbox is provided allowing for automated tests.
    
    
    POST: Curl Example

    curl --location --request POST 'https://mastinator.com/u/testinbox/inbox' \
         --header 'Content-Type: application/json' \
         --data-raw '{
          "@context": "https://www.w3.org/ns/activitystreams",
          "actor": "https://mastinator.com/",
          "id": "ShouldBeUniqueDuplicatesIgnoredTillDeleted",
          "object": {
            "content": "Hello!",
            "conversation": "empty",
            "id": "ShouldBeUniqueDuplicatesIgnoredTillDeleted",
            "published": "2022-12-20T06:03:41Z",
            "summary": "",
            "to": "https://www.w3.org/ns/activitystreams#Public",
            "type": "Note",
            "url": "https://mastinator.com/"
          },
          "published": "2022-12-20T06:03:41Z",
          "to": "https://www.w3.org/ns/activitystreams#Public",
          "type": "Create"
         }'

    • Note: Implemented.
    • Question: Not implemented.
    • Article: Not implemented.
    • Page: Not implemented.
    • Image: Not implemented.
    • Audio: Not implemented.
    • Video: Not implemented.
    • Event: Not implemented.
  • Delete: Implemented. Message will be labeled "ActivityPub Delete" to help with development. The request to make the delete is kept, or the failure to assist with debugging.
    
    
    POST: Curl Example

    # Mastodon example
    
    curl --location --request POST 'https://mastinator.com/u/testinbox/inbox' \
    --header 'Content-Type: application/json' \
    --data-raw '{
       "@context": "https://www.w3.org/ns/activitystreams",
       "actor": "https://mastinator.com/u/testinbox",
       "cc":
       [
           "https://mastinator.com/u/Etiolate"
       ],
       "id": "https://mastinator.com/u/testinbox/217h4NBLrMJzT3qz7B#delete",
       "object":
       {
           "atomUri": "https://mastinator.com/u/testinbox/217h4NBLrMJzT3qz7B",
           "id": "ShouldMatchTheIdOfObjectInCreate",
           "type": "Tombstone"
       },
       "published": "2023-01-05T09:26:18Z",
       "to": "https://www.w3.org/ns/activitystreams#Public",
       "type": "Delete"
    }'
    
    # Other server example
    
    curl --location --request POST 'https://mastinator.com/u/testinbox/inbox' \
        --header 'Content-Type: application/json' \
        --data-raw '{
           "@context": "https://www.w3.org/ns/activitystreams",
           "actor": "https://mastinator.com/u/testinbox",
           "cc":
           [
               "https://mastinator.com/u/testinbox"
           ],
           "id": "ShouldMatchTheIdOfObjectInCreate",
           "object": "https://mastinator.com/u/testinbox/217h4NBLrMJzT3qz7B",
           "published": "2023-01-05T09:26:18Z",
           "to": "https://www.w3.org/ns/activitystreams#Public",
           "type": "Delete"
    }'

  • Like: Not implemented.
  • Announce: Not implemented.
  • Flag: Not implemented.
  • Update: Implemented.
  • Undo: Not implemented.
• POST Follow: Implemented. Not enabled to avoid abuse. Current plan is to have it done by one single account, which never retains any content, is labeled a bot with its purpose clearly stated and rate limited per domain. And issue an unfollow if an accept is returned. With the existing blocks in place should reduce the potential for abuse.