Published a blog about the new Social Inbox tool we've made at #DistributedPress which makes it easy to add #ActivityPub to your static websites.
@rra @site Hmm are you self hosting your inbox instance? We have swagger docs generated at /v1/docs
Sadly swagger doesn't have the HTTP auth stuff built in so we don't have an out of the box UI yet.
We use the http signature spec for authentication so you shoukd sign yout request with the private key corresponding to your actor's public key: https://docs.joinmastodon.org/spec/security/#http
@mauve ah the swagger docs are really handy. So if I understand correctly I won't be able to complete my post request with curl, but need to use client.setInfo() instead?
@rra sadly the client API is still a WIP but my colleague should be getting to it next week ish. I'll see if I can get a lil somethin done before then though.
technically it should be possible to do it witg curl, you just need to do the digest calculation and signing stuff with openssl or similar. Sadly I don't have ready examples of it cause we did it in js.
Here's how we do it so far: https://github.com/hyphacoop/social.distributed.press/blob/initial/src/server/apsystem.ts#L129
@mauve Hi thanks for the suggestion! Together with @cblgh we managed to recreate the signing code pretty close before you sent it! However we get Bad Request but we're also unsure whether we're overlooking something. Maybe you have an idea?
https://gist.github.com/rscmbbng/63a3066e811aa72a5cab508eb20cdd45