immers-space / guppe

Federated social groups with ActivityPub, NodeJS, Express, and Mongodb
https://a.gup.pe
GNU Affero General Public License v3.0
195 stars 15 forks source link

GoToSocial federation broken #90

Open wmurphyrd opened 1 year ago

wmurphyrd commented 1 year ago
error during signature verification hs2019 is not supported

http-signatures standard has been drastically changed since we started, and now it says not to specify the algrithm in the request but instead to put hs2019 which means "figure it out from the key id"

https://socialhub.activitypub.rocks/t/state-of-http-signatures/754/23

The library we use has not been updated

on1arf commented 1 year ago

Can somebody please look into this?

For users or a personal instance, gup.pe is a good replacement for hashtag-following (which works best on large instances).

GoToSocial is a fediverse server implementation specially aimed at small and personal instances, federation between GoToSocial and gup.pe instances really helps a lot.

carbontwelve commented 1 year ago

There are two open PR's on the library in use: https://github.com/TritonDataCenter/node-http-signature/pull/116 and https://github.com/TritonDataCenter/node-http-signature/pull/105 which at this point are three years old 😬

zemlanin commented 1 year ago

PeerTube's fork of node-http-signature seems to work with hs2019 https://www.npmjs.com/package/@peertube/http-signature

sterlingwes commented 9 months ago

Would this manifest as a "follow request pending" from my end if I have a gotosocial server?