Changeset 6bd25d1 in Klonkt

Timestamp:

06/24/2026 10:27:56 AM (3 months ago)

Author:

Robin Genis <roboburr@…>

Branches:

main

Children:

5bf63b7

Parents:

69815b2

Message:

feat(activitypub): phase 1 — discoverable/fetchable actor (WebFinger, Actor, Outbox, Notes)

First step of real ActivityPub federation: per-site RSA keys, WebFinger,
a content-negotiated Actor document (AP-JSON for servers, redirect to the HTML
profile for browsers), Outbox (Create/Note) and Note objects under /ap/*.
Inbox is a 202 stub for now; Follow/Accept + HTTP-signature verify + delivery
to followers land in the next step (tested live against Mastodon).

Co-Authored-By: Claude <noreply@…>

Location:

src

Files:

• config/database.js (modified) (1 diff)
• routes/activitypub.js (added)
• server.js (modified) (2 diffs)
• services/ActivityPubService.js (added)

src/config/database.js

@@ -295 +295 @@
     CREATE INDEX IF NOT EXISTS idx_post_likes_post ON post_likes(post_id);
   `);
+
+  // ── ActivityPub (fediverse bridge) ──────────────────────────
+  // RSA keypair per actor (Mastodon-compatible HTTP Signatures; separate from
+  // the Cirkels Ed25519 keys). ap_followers = remote AP actors following us.
+  db.exec(`
+    CREATE TABLE IF NOT EXISTS ap_keys (
+      slug TEXT PRIMARY KEY,
+      public_pem TEXT NOT NULL,
+      private_pem TEXT NOT NULL,
+      created_at DATETIME DEFAULT CURRENT_TIMESTAMP
+    );
+    CREATE TABLE IF NOT EXISTS ap_followers (
+      id INTEGER PRIMARY KEY AUTOINCREMENT,
+      slug TEXT NOT NULL,
+      actor_uri TEXT NOT NULL,
+      inbox TEXT,
+      shared_inbox TEXT,
+      created_at DATETIME DEFAULT CURRENT_TIMESTAMP,
+      UNIQUE(slug, actor_uri)
+    );
+    CREATE INDEX IF NOT EXISTS idx_ap_followers_slug ON ap_followers(slug);
+  `);
 }
 

src/server.js

@@ -64 +64 @@
 import changelogRoutes from './routes/changelog.js';
 import ogRoutes from './routes/og.js';
+import apRoutes from './routes/activitypub.js';
 
 // SESSION_SECRET: use the env var if set. Otherwise auto-generate a strong one
@@ -223 +224 @@
 app.use(federationRoutes);
 
+// ActivityPub: WebFinger + /ap/* (site-agnostic, resolves the site by slug).
+app.use(apRoutes);
+
 // Themed OG cards (/og/:slug.png) — resolve the site by slug themselves, so they
 // run before resolveSite and need no site context.