#dev 2025-09-21

2025-09-21 UTC
#
[artlung] experimentally implemented a jsonfeed of openstories today. anyone consuming these? https://artlung.com/reels/feed.json
failxontour joined the channel
#
[snarfed] granary can
#
failxontour of did I really ask for webmention support linking to the mf2 parser
#
failxontour dumb me
grufwub, claudinec, thegreekgeek_, doesnm2, DanQ, barnabywalters, barnaby, rozodru, CRISPR, _90_008[d], failxontour, marc_in_space and marc_in_- joined the channel
#
[snarfed] [KevinMarks] thought you'd be interested (slash horrified) to know that Google finally turned off the Blogger gdata v2.0 API, so I'm finally looking at the 3.0 API and whether it will work
#
[snarfed] "thinking of you" 😆
[KevinMarks] joined the channel
#
[KevinMarks] I suppose the mf1 feeds in the default templates have rotted by now
CRISPR joined the channel
#
[snarfed] aha, now I remember why I stayed on 2.0 for as long as possible, looks like 3.0 may not let you create comments, https://developers.google.com/blogger/docs/3.0/using#WorkingWithComments
#
[snarfed] there goes Bridgy's Blogger support, I guess
[schmarty] joined the channel
#
[schmarty] 🫡
#
[artlung] but somehow exposes approve, delete, and markAsSpam verbs. https://developers.google.com/blogger/docs/3.0/reference/comments#methods and checking some blogspot blogs I follow, the path to create a comment is complicated.
failxontour and rozodru joined the channel
#
Kolev [artlung]: I like your /slashes page haha
[social] joined the channel
#
[artlung] thanks Kolev. I do enjoy making pages.
failxontour and proofreed joined the channel
#
[snarfed] turned off Bridgy's Medium support too. they effectively killed their API years ago, and gradually rate limited Superfeedr, which Bridgy used for them, down into nothingness. 🤷
angelo, CRISPR, cotsuka, [schmarty]1, yewscion_, grufwub, proofreed, DanQ, failxontour, thelounge0670, sarna and gRegorLove_ joined the channel
#
capjamesg Does anyone know the extent to which Threads is complying with AP?
#
capjamesg I am trying to do outbox discovery and it is failing.
#
[tantek] reset/seized another silo account (Spotify) that used my gmail that was not mine. reset the pw, changed the email (to a tombstone address), reset the personal info to some tombstone infos. so whoever create the account and username is cut-off. why are such mainstream services still not requiring verification of emails used to sign-up?
#
capjamesg Also apparently I can't get data for taylorswift@threads.net at the webfinger stage but I can for mosseri@threads.net. Maybe AP support is opt in on the account level?
#
[tantek] capjamesg, Threads support of AP has been incremental over time, some of it is documented on /Threads
#
[tantek] and yes, AP support is opt-in at the account level, one sec I'll go see what they call the feature
#
[tantek] you should also be able to do discovery on `@tantek@threads.net`
#
Loqi I agree
box464 joined the channel
#
capjamesg Curious. Webfinger returns {'href': 'https://threads.net/ap/users/17841400937320046/', 'rel': 'self', 'type': 'application/activity+json'} as one of your links.
#
capjamesg But that link returns a 404 😭
sivoais joined the channel
#
[tantek] Yes a Threads user has to go to profile icon 👤 (bottom right in the iOS) app. Then top right menu (Settings), then "Account" from the list there, then "Fediverse sharing BETA" then "Turn sharing on".
#
[tantek] it's quite buried
#
IWDiscord <t​antek.com>
#
tantek.com https://cdn.discordapp.com/attachments/866577430886350869/1419413744576106648/IMG_6801.png?ex=68d1ab90&is=68d05a10&hm=705a9b4aa8b6254d352f13ea6382a5c78bd38bb4cf57518d8224a7435b3147af&
#
capjamesg There must be some problem with how I am making the signed GET requests.
#
capjamesg This exact same code works fine with Mastodon 😭
#
[tantek] Webfinger--
#
Loqi Webfinger has -1 karma over the last year
#
[tantek] The problem is unnecessary complexity due to adopting a JSON cargo cult "well-known" method for discovery instead of follow your nose and follow your markup
#
[tantek] what is follow your nose
#
Loqi 👃 follow your nose is an intentional principle for designing discovery algorithms that start with the specific URL you want to discover things about, retrieving headers or contents, and parsing for particular link rel values to URLs to the desired information, in contrast to the “well-known” approach of looking outside the specific URL, like using only its domain and a hardcoded path https://indieweb.org/follow_your_nose
#
capjamesg Okay the ActivityPub Explorer can find the data so something is wrong with my code.
#
capjamesg https://activitypub.academy is neat!
#
capjamesg [edit] https://activitypub.academy is neat!
#
capjamesg Ahhh this is so unintuitive.
Elleo joined the channel
#
[tantek] Can you pull down the RSS feed instead?
#
[tantek] Like skip all the AP and use whatever hacks you need to find the RSS for the profile
#
capjamesg It doesn't look like there is one.
CrimeWave, oodani, barnaby and CRISPR joined the channel
#
[tantek] [snarfed] how do you read outboxes from Threads for BridgyFed cross-protocol follow support? Is there a way to use Granary to get RSS from Threads AS2?
#
[snarfed] I don't really use the outbox in BF, and yes granary can convert AS2 to RSS
#
[snarfed] granary doesn't do AP itself though, just AS2 fetching and parsing, if you give it a URL that returns AS2 with no special headers (eg Authorization) needed
#
[snarfed] sounds like a good feature request for granary to detect and pass through the Authorization header when it's provided
#
[snarfed] although nm, that wouldn't help in the fediverse, we'd need an HTTP Sig, not Authorization
#
capjamesg The URL that the webfinger request gives is https://threads.net/ap/users/17841400937320046/
#
capjamesg I am making a signed GET but it still returns 404.
#
capjamesg I have seen occasional reports of this returning 404 when the request is malformed. Debugging this is going to be complex.
#
[snarfed] what Accept header are you using?
#
capjamesg application/ld+json; profile="https://www.w3.org/ns/activitystreams
#
capjamesg [edit] application/ld+json; profile="https://www.w3.org/ns/activitystreams
oodani joined the channel
#
capjamesg /activity+json also doesn't work
#
[snarfed] that should work. here's info on HTTP Sigs in case it helps, https://swicg.github.io/activitypub-http-signature/
#
[snarfed] also https://funfedi.dev/testing_tools/http_signatures/ , https://fediverse.party/en/tools/
#
capjamesg I can't see any request in my logs for my actor file which is interesting.
#
[tantek] httpsigs-- for more unnecessary complexity for reading an otherwise "public" feed
#
Loqi httpsigs has -2 karma over the last year
#
[snarfed] [tantek]++ yup. from https://swicg.github.io/activitypub-http-signature/#so-what-s-the-verdict :
#
[snarfed] "There's no obvious way to serve public data to anonymous, unauthenticated users, and still block access to specific people."
#
Loqi [tantek] has 32 karma in this channel over the last year (153 in all channels)
#
[snarfed] it's what much of the fediverse wants, but as a requirement, it's kinda incoherent
#
capjamesg I am using code largely based on https://github.com/snarfed/bridgy-fed/blob/7d282717585998351dc86ec28c0a369c251c0218/activitypub.py#L818
#
capjamesg [edit] I am using code largely based on https://github.com/snarfed/bridgy-fed/blob/7d282717585998351dc86ec28c0a369c251c0218/activitypub.py#L818
#
[tantek] Can you get RSS feeds from public Bluesky profiles without faffing about with Httpsigs or other nonsense?
#
[snarfed] yes
failxontour, DanQ and [manton] joined the channel
#
[manton] Bluesky RSS feeds are very limited, though. They don’t include links, photos, quotes.
#
[snarfed] oh wow, huh
#
[snarfed] capjamesg, the actor you're using to sign your AP request, are you serving that actor itself? without requiring a signature to fetch it?
#
capjamesg [snarfed] Yes.
#
capjamesg (yes to both)
#
capjamesg My actor is at https://artemis.jamesg.blog/actor
#
Loqi [preview] artemis
#
capjamesg The one thing I haven't ruled out yet is that my various user agent filters may be interfering with the request that Meta is trying to make.
#
capjamesg (I block facebookbot, their link fetcher, and a few related bots)
barnaby joined the channel
#
[snarfed] check your logs and see if they're requesting your actor, and if you're serving it ok?
#
[snarfed] hmm yeah if you block their bots, you're likely blocking their actor fetch
barnaby and barnabywalters joined the channel