[feat] proxyURL endpoint #1013

Closed
opened 2025-11-22 02:12:48 +00:00 by mediaformat · 3 comments

The idea

Users should be able to use any ActivityPub Client not just those supporting the Mastodon API.
Chat messages, for example, are not supported by Mastodon apps, but would be with an ActivityPub API client

The reasoning

Akkoma has decent support for the ActivityPub Client to Server API (c2s), one important missing feature is being able to fetch actors, activities, objects from remote servers, without getting CORS or Authenticated Fetch issues

The proxyUrl endpoint lets ActivityPub API clients request ActivityPub objects from remote servers. It provides a bridge between the client-to-server authentication mechanism and the server-to-server authentication mechanism.
https://www.w3.org/wiki/ActivityPub/Primer/proxyUrl_endpoint

Have you searched for this feature request?

  • I have double-checked and have not found this feature request mentioned anywhere.
  • This feature is related to the Akkoma backend specifically, and not pleroma-fe.
### The idea Users should be able to use any ActivityPub Client not just those supporting the Mastodon API. Chat messages, for example, are not supported by Mastodon apps, but would be with an ActivityPub API client ### The reasoning Akkoma has decent support for the ActivityPub Client to Server API (c2s), one important missing feature is being able to fetch actors, activities, objects from remote servers, without getting CORS or Authenticated Fetch issues > The proxyUrl endpoint lets ActivityPub API clients request ActivityPub objects from remote servers. It provides a bridge between the client-to-server authentication mechanism and the server-to-server authentication mechanism. https://www.w3.org/wiki/ActivityPub/Primer/proxyUrl_endpoint ### Have you searched for this feature request? - [x] I have double-checked and have not found this feature request mentioned anywhere. - [x] This feature is related to the Akkoma backend specifically, and not pleroma-fe.

we actually have essentially no support for this due to how small the set of users that would utilise these endpoints is.

the vast majority of c2s was ripped out over a year ago due to it being a looming security risk given the lack of usage combined with it being one of the "rotten" features that hadn't been updated in a long time

I do not think the benefits of a few users being able to use alternative clients is worth the cost of maintenance here

we actually have essentially no support for this due to how small the set of users that would utilise these endpoints is. the vast majority of c2s was ripped out over a year ago due to it being a looming security risk given the lack of usage combined with it being one of the "rotten" features that hadn't been updated in a long time I do not think the benefits of a few users being able to use alternative clients is worth the cost of maintenance here
Author

I didn't realize "the vast majority of c2s was ripped out", that is a shame, but I understand the maintenance burden.

I didn't realize "the vast majority of c2s was ripped out", that is a shame, but I understand the maintenance burden.

indeed, nobody noticed that it was ripped out because quite literally nobody used it 🥴

indeed, nobody noticed that it was ripped out because quite literally nobody used it 🥴
Sign in to join this conversation.
No milestone
No project
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
AkkomaGang/akkoma#1013
No description provided.