yukimochi/Activity-Relay

Mastodon instances in "secure mode" canot use the relay

Opened this issue · 1 comments

mhamzahkhan commented

Mastodon relays that have AUTHORIZED_FETCH or "secure mode" enabled, do not work with the relay (https://docs.joinmastodon.org/admin/config/#authorized_fetch).

Looks like this is because you have to sign the request when fetching the public key here:

Activity-Relay/models/models.go

Line 100 in 528e801

req, _ := http.NewRequest("GET", url, nil)

Without it, the request returns a 401 from instances that have secure mode enabled.

yukimochi commented

Mastodon explains that relays do not work properly in secure mode. (Appears when trying to enable relay in secure mode.)

It is unclear whether the relay will work correctly by signing the request during account acquisition. However, I think it's a good idea to use signatures for account acquisition, so I'll incorporate it into my implementation plan.