FoundKey/packages/backend/src
Hélène b600efae0d
BREAKING: activitypub: validate fetch signatures
Enforces HTTP signatures on object fetches, and rejects fetches from blocked
instances. This should mean proper and full blocking of remote instances.

This is now default behavior, which makes it a breaking change. To disable
it (mostly for development purposes), the configuration item
`allowUnsignedFetches` can be set to true. It is not the default for
development environments as it is important to have as close as possible
behavior to real environments for ActivityPub development.

Co-authored-by: nullobsi <me@nullob.si>
Co-authored-by: Norm <normandy@biribiri.dev>
Changelog: Added
2023-06-25 20:42:14 +02:00
..
@types use http-signature module that supports hs2019 (#8635) 2022-05-26 09:12:17 +09:00
boot refactor onlyQueue and onlyServer configuration 2023-05-23 19:49:55 +02:00
config BREAKING: activitypub: validate fetch signatures 2023-06-25 20:42:14 +02:00
daemons server: use time constants 2022-11-20 23:15:40 +01:00
db server: remove favorites 2023-05-26 20:59:53 +02:00
mfm server: better matching for MFM mentions 2023-04-28 23:47:48 +02:00
misc make mutes case insensitive 2023-05-31 13:02:40 +02:00
models docs: remove bannerColor 2023-06-05 23:39:43 +02:00
prelude server: remove dateUTC function 2023-01-02 12:45:30 +01:00
queue use extractDbHost 2023-06-23 22:00:31 +02:00
remote BREAKING: activitypub: validate fetch signatures 2023-06-25 20:42:14 +02:00
server BREAKING: activitypub: validate fetch signatures 2023-06-25 20:42:14 +02:00
services BREAKING: activitypub: validate fetch signatures 2023-06-25 20:42:14 +02:00
const.ts backend: minor cleanup of nodeinfo.ts 2022-11-16 17:52:13 -05:00
env.ts BREAKING rename environment variables from MK_... to FK_... 2023-05-23 19:49:55 +02:00
global.d.ts refactoring 2021-11-12 02:02:25 +09:00
index.ts refactor: remove default export for boot 2022-12-11 14:42:55 -05:00