search

swicg / activitypub-webfinger

SocialCG report for using ActivityPub with Webfinger
7 stars 0 forks source link

Use cases for WebFinger with resources other than `acct:` URIs #13

Closed trwnh closed 3 months ago

trwnh commented 4 months ago

Some WebFinger implementations will return information about "normal" resources and not just user accounts. For example, you can resolve an https: URI via WebFinger and get information about it. It would be nice to collect information about when this would be useful, and how existing implementers have made use of this possibility.

trwnh commented 4 months ago

I know that Mastodon lets you resolve https: URIs for actors, but it mostly only does this as a way to handle aliases. Note that the following all return the same response:

There is as of yet no response for querying a status resource:

trwnh commented 4 months ago

Mitra seems to also only work on actors:

trwnh commented 4 months ago

Misskey seems to also only work on actors:

trwnh commented 4 months ago

Same for Pleroma:

interestingly it seems that the default response is an XRD instead of a JRD? this is seemingly a violation of RFC 7033 (EDIT: https://git.pleroma.social/pleroma/pleroma/-/issues/3254 for more details about this)

trwnh commented 4 months ago

Friendica

loading a resource similarly doesn't work

trwnh commented 4 months ago

Hubzilla

After this point Hubzilla does something interesting which is that it dynamically changes the subject to be whatever you requested...? See these supposed "aliases" that become canonical when you observe them directly:

Aside from that there is some interesting stuff to point out. Certain properties like name and publicKeyPem are exposed directly on the user account. There is also a property for https://purl.org/zot/federation which lists protocols enabled for this user. Presumably if ActivityPub was enabled we would see the typical self link with AS2 media type.

Anyway... nothing for non-user resources:

trwnh commented 4 months ago

Zap behaves similarly to Hubzilla but with no federation property https://macgirvin.com/.well-known/webfinger?resource=acct:mike@macgirvin.com

Once again, nothing for statuses https://macgirvin.com/.well-known/webfinger?resource=https://macgirvin.com/item/c5c49eae-f2b0-41fa-9876-ccf8ebfe1ebe

trwnh commented 4 months ago

Streams is similar to Zap https://fediversity.site/.well-known/webfinger?resource=acct:mikedev@fediversity.site

Nothing for posts https://fediversity.site/.well-known/webfinger?resource=https://fediversity.site/item/453264a5-2ed9-4315-a8f0-9e3fa26137f0

pfefferle commented 4 months ago

WordPress

WordPress also supports domains when the blog-user is activated (https://github.com/Automattic/wordpress-activitypub/pull/594)

If the WebFinger plugin is also installed, then there is also basic non-user resources support, but with no ActivityPub entries (yet)