@evan hopefully this can help to make sure folks are supporting C2S as much as possible

I would love to get a standards-based oauth to inbox flow working, do you know of any implementations that support it?

was going to check out Mastodon's new oauth thing in 4.3, but I'm not sure they have any additional AP endpoints behind the auth wall

Here's a Lemmy group

browser.pub/lemmy.ml/c/asklemm…

And here's @manton 's profile using micro.blog's AP endpoint

browser.pub/manton.org/activit…

Threads posts and profiles are also available, for users that have checked the magic box

Here's a post:
browser.pub/threads.net/@evanp…

While Threads does not support the replies collection yet, they do support the inReplyTo pointer, which BrowserPub renders above

browser.pub/threads.net/@evanp…

BrowserPub also supports the new fediverse:creator discovery mechanism

browser.pub/theverge.com/2024/…

Bluesky profiles that are bridged can also be rendered

e.g. @snarfed.org bridged bsky profile

browser.pub/bsky.brid.gy/ap/di…

bsky.brid.gy/ap/did:plc:3ljmtyyjqcjee2kpewgsifvb · BrowserPub · A browser for debugging ActivityPub and the fediverse

Explore the open social web through the lens of ActivityPub and the fediverse.

^browser.pub

Here's a podcast from @dave 's podcastindex bridge

browser.pub/@851643@ap.podcast…

BrowserPub also tries to render custom emojis in content and profile headers, these are in the ActivityPub payload after all

even animated ones

browser.pub/bolha.one/users/jo…

and of course Flipboard is supported (cc @mike) nothing special, just the same ActivityPub spec implementation

browser.pub/https%3A%2F%2Fflip…

so even though Threads doesn't return collection items in the ActivityPub payload yet, it _does_ include the counts - so at least I can display those

just pushed it live

browser.pub/threads.net/ap/use…

Polls are not a Mastodon-specific feature, they can be expressed well in standard ActivityPub, which means standards-based apps like BrowserPub can render them

Here is a recent poll example from @evan

browser.pub/cosocial.ca/@evan/…

looks like someone submitted it to hacker news!

news.ycombinator.com/item?id=4…

and looks like Ghost got their outbox and posts ActivityPub working

although they are not in reverse chron like everyone else (@johnonolan, was this intentional?)

browser.pub/index@activitypub.…

So as I'm bopping around looking at everyone's #ActivityPub in browser.pub, I wanted to have the ability to follow interesting people while I'm browsing.

I just pushed a new update that adds a "Follow" button next to every profile in the visual view

e.g. browser.pub/mastodon@mastodon.…

Ideally, I'd like to have these follows take effect here in my main account and not have to create a brand new profile on a brand new site.

This is where OAuth comes in - many existing fediverse servers supported federated login in a standard way

Just enter your account to start the login flow in browser.pub

... then stores the login info in the browser

For OAuth dorks, it'll show the token expiration and granted scope

Also whether or not the server supports the excellent OAuth server metadata spec, and whether the server supports PKCE (a security improvement that is a newer part of the spec)

now Pleroma is special here, it supports following like this in bog-standard ActivityPub!

ie just posting a small json payload to the logged-in user's outbox endpoint

hopefully more ActivityPub servers support this soon, as it should be very similar to what they already do for S2S

misskey and micro.blog from @manton both support client registration for clients like this by simply providing a website url

it's called "indieauth" (displayed in the login info row, otherwise falls back to mastodon-style app-creation-based registration)

there is a newer emerging standard for dynamic client registration, but no one supports it yet - I'll add it when one does!

micro.blog doesn't support C2S follows via the outbox yet, but we can fallback to the micro.blog api here

you'll notice that browser.pub not only requests the ability to follow, but _also_ to read, generally

this gives the logged-in user the ability to explore ActivityPub collections that may not be public, only accessible via auth (if the server supports such collections over ActivityPub C2S)

in theory, you could imagine building a thing on top of these collections that looks like your personal mastodon timeline, but using spec-standard ActivityPub

in practice, tho, here is my mastodon inbox 🤦‍♂️

Pleroma, however, is a different story - a better story

here is my Pleroma account, listing my private inbox collection - essentially my home timeline

this is not public, but available to ActivityPub C2S clients like browser.pub with a valid auth token

Under the hood, the personal inbox is represented as an essentially infinite ActivityPub OrderedCollection, with no 'totalItems' count property, and no 'last' pointer

I can keep iterating down my inbox reverse chron this way in the json...

... or by hitting "next" in the visual view

maybe I should add some sort of automatic revealing of the next item on scroll

and of course you can't see my personal Pleroma 'inbox' collection here, since you aren't logged in as me

as it should be

if anyone finds any additional endpoints available to read over C2S when authed (on any AP server impl), let me know - I'd be very curious to know what's supported out there

one more for today: just got @pixelfed oauth working too

similar to mastodon, you can add an existing pixelfed.social account, and follow any fediverse user directly from browser.pub

and, similar to mastodon, pixelfed does not seem to support any additional ActivityPub over C2S when authed