<![CDATA[Is there a way to fetch a profile's JSON from a server with authorized_fetch enabled without being a fully fledged actor?]]>Is there a way to fetch a profile's JSON from a server with authorized_fetch enabled without being a fully fledged actor? It doesn't feel like what I'm trying to do is bad, I want to give people the option to get information about themselves from their profiles, as is visible to the world in the HTML view, but it seems like authorized_fetch is expecting a lot more than I thought.

I guess I might need to get them to actually log in, but am I right in thinking there that that's specifically a Mastodon API (that other servers may have implemented for compatibility)? It would be nice to be compatible with everything, but it does feel like I'm fighting the protocol at every step here.

]]>https://bb.devnull.land/topic/e8d75318-b3f9-4ea3-87ee-85e6c62fbe6c/is-there-a-way-to-fetch-a-profile-s-json-from-a-server-with-authorized_fetch-enabled-without-being-a-fully-fledged-actorRSS for NodeSun, 30 Aug 2026 05:47:40 GMTSat, 29 Aug 2026 23:13:14 GMT60<![CDATA[Reply to Is there a way to fetch a profile's JSON from a server with authorized_fetch enabled without being a fully fledged actor? on Sun, 30 Aug 2026 02:04:15 GMT]]>@julian I now realise I was potentially confusing with my wording. I've largely got to the point of having the ability to get something with authorised fetch enabled, but the requirement to have so much else alongside the public key is making me a bit uneasy. The next paragraph was considering throwing this away and using the Mastodon API instead, although in addition to not being plain AP this would still be fiddly due to the client being on an embedded device

The idea of a proxy might actually be the least worst way to do it, I can limit the data it'll return to just the things I care about and not make users have to plug their device in to a PC to be able to authenticate to the API, I hadn't considered that

]]>https://bb.devnull.land/post/https://social.treehouse.systems/users/turmoni/statuses/117182002352739282https://bb.devnull.land/post/https://social.treehouse.systems/users/turmoni/statuses/117182002352739282Sun, 30 Aug 2026 02:04:15 GMT<![CDATA[Reply to Is there a way to fetch a profile's JSON from a server with authorized_fetch enabled without being a fully fledged actor? on Sun, 30 Aug 2026 01:25:50 GMT]]>But... no, you can't get around it except by using a proxy AP service maybe 😅

@turmoni@social.treehouse.systems

]]>https://bb.devnull.land/post/https://activitypub.space/post/2411https://bb.devnull.land/post/https://activitypub.space/post/2411Sun, 30 Aug 2026 01:25:50 GMT<![CDATA[Reply to Is there a way to fetch a profile's JSON from a server with authorized_fetch enabled without being a fully fledged actor? on Sun, 30 Aug 2026 01:19:39 GMT]]>@turmoni@social.treehouse.systems yes, authorized fetch is Mastodon specific naming but is not Mastodon specific I suppose, as it's just a small config change where requests for AP resources are denied if there is no HTTP Signature.

]]>https://bb.devnull.land/post/https://activitypub.space/post/2410https://bb.devnull.land/post/https://activitypub.space/post/2410Sun, 30 Aug 2026 01:19:39 GMT