News for hackers. Stuff that matters.

A comment on My Fediverse use – I'm hosting everything myself – PeerTube, Mastodon and Lemmy. Parent comment

Re:My Fediverse use – I'm hosting everything myself – PeerTu... by esbranson on Tuesday December 05, 2023 @12:49PM (#38534352)
ActivityPub would not appear to be a focus for the mainline Mastodon team. My tests show that most ActivityPub endpoints of the main Mastodon server software are not CORS enabled so are unreachable by webapps. They are public endpoints and should obviously be CORS enabled. For a HTTP-based protocol, this is a glaring oversight. (It's fixed by at least some other Mastodon servers like Glitch.) Most other ActivityPub implementations correctly enable CORS. CORS is just an example of the treatment that ActivityPub gets.
[ Parent | on HN ]
Re:My Fediverse use – I'm hosting everything myself – PeerTu... by dingnuts on Tuesday December 05, 2023 @01:20PM (#38534845)
The ActivityPub endpoints are not CORS enabled because requests to those endpoints are supposed to come from homeservers, not from users' clients. That's the server-to-server protocol, not the client-to-server protocol.
[ Parent | on HN ]
Re:My Fediverse use – I'm hosting everything myself – PeerTu... by esbranson on Tuesday December 05, 2023 @02:32PM (#38535791)
Mastodon devs admit some endpoints should be CORS enabled, and did so. Whatever you do to make this fact "fit" your logic should be extended to the other endpoints. Glitch already extended it.
[ Parent | on HN ]