FoundKey/packages/backend
Hélène b600efae0d
BREAKING: activitypub: validate fetch signatures
Enforces HTTP signatures on object fetches, and rejects fetches from blocked
instances. This should mean proper and full blocking of remote instances.

This is now default behavior, which makes it a breaking change. To disable
it (mostly for development purposes), the configuration item
`allowUnsignedFetches` can be set to true. It is not the default for
development environments as it is important to have as close as possible
behavior to real environments for ActivityPub development.

Co-authored-by: nullobsi <me@nullob.si>
Co-authored-by: Norm <normandy@biribiri.dev>
Changelog: Added
2023-06-25 20:42:14 +02:00
..
.vscode Update settings.json 2022-04-15 21:33:00 +09:00
assets client: display move notification 2023-03-23 21:10:17 +01:00
migration fix: don't use psql 13 functions 2023-05-27 11:18:06 +02:00
src BREAKING: activitypub: validate fetch signatures 2023-06-25 20:42:14 +02:00
test transform tests from ts to js 2023-06-01 23:21:03 +02:00
.eslintignore migrate to Yarn 3.2.3 2022-08-26 15:24:29 -04:00
.eslintrc.cjs enhance typeorm-prefer-count lint rule 2023-01-03 02:41:53 +01:00
.mocharc.json transform tests from ts to js 2023-06-01 23:21:03 +02:00
jsconfig.json use eslint 2021-11-12 10:35:41 +09:00
ormconfig.js refactor: migrate to typeorm 3.0 (#8443) 2022-03-26 15:34:00 +09:00
package.json transform tests from ts to js 2023-06-01 23:21:03 +02:00
tsconfig.json BREAKING: Remove support for Node 16.x and upgrade to TypeScript 4.9 2022-11-25 02:07:21 -05:00
watch.mjs implement dev command 2021-11-19 14:48:59 +09:00