Is there a way to fetch a profile's JSON from a server with authorized_fetch enabled without being a fully fledged actor?
-
Is there a way to fetch a profile's JSON from a server with authorized_fetch enabled without being a fully fledged actor? It doesn't feel like what I'm trying to do is bad, I want to give people the option to get information about themselves from their profiles, as is visible to the world in the HTML view, but it seems like authorized_fetch is expecting a lot more than I thought.
I guess I might need to get them to actually log in, but am I right in thinking there that that's specifically a Mastodon API (that other servers may have implemented for compatibility)? It would be nice to be compatible with everything, but it does feel like I'm fighting the protocol at every step here.
-
Is there a way to fetch a profile's JSON from a server with authorized_fetch enabled without being a fully fledged actor? It doesn't feel like what I'm trying to do is bad, I want to give people the option to get information about themselves from their profiles, as is visible to the world in the HTML view, but it seems like authorized_fetch is expecting a lot more than I thought.
I guess I might need to get them to actually log in, but am I right in thinking there that that's specifically a Mastodon API (that other servers may have implemented for compatibility)? It would be nice to be compatible with everything, but it does feel like I'm fighting the protocol at every step here.
@turmoni@social.treehouse.systems yes, authorized fetch is Mastodon specific naming but is not Mastodon specific I suppose, as it's just a small config change where requests for AP resources are denied if there is no HTTP Signature.
-
? [[global:guest]] crossposted this topic to General Discussion
-
But... no, you can't get around it except by using a proxy AP service maybe
-
@julian I now realise I was potentially confusing with my wording. I've largely got to the point of having the ability to get something with authorised fetch enabled, but the requirement to have so much else alongside the public key is making me a bit uneasy. The next paragraph was considering throwing this away and using the Mastodon API instead, although in addition to not being plain AP this would still be fiddly due to the client being on an embedded device
The idea of a proxy might actually be the least worst way to do it, I can limit the data it'll return to just the things I care about and not make users have to plug their device in to a PC to be able to authenticate to the API, I hadn't considered that
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login