art-dag/activity-pub
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
124 Commits 1 Branch 0 Tags
main
Commit Graph

12 Commits

Author SHA1 Message Date
gilesb
fbf188afdc Remove hardcoded secrets from public repo
All checks were successful
Build and Deploy / build-and-deploy (push) Successful in 1m3s
Details 
- Remove default password fallback from POSTGRES_PASSWORD in docker-compose.yml
- Remove default password fallback from db.py and migrate.py
- Update .env.example with required POSTGRES_PASSWORD
- Update README to mark DATABASE_URL as required

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-02-06 19:29:24 +00:00
giles
5730cd0f22 Add documentation routes and update README 
- Update README with comprehensive documentation covering ActivityPub,
  OpenTimestamps anchoring, L1 integration, and all API endpoints
- Add /docs routes to serve markdown documentation as styled HTML
- Include common library documentation in web interface

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-11 09:58:36 +00:00
gilesb
5ebfdac887 Add scoped tokens, L2-side revocation, and security docs 
Security improvements:
- Tokens now include optional l1_server claim for scoping
- /auth/verify checks token scope matches requesting L1
- L2 maintains revoked_tokens table - even if L1 ignores revoke, token fails
- Logout revokes token in L2 db before notifying L1s
- /renderers/attach creates scoped tokens (not embedded in HTML)
- Add get_token_claims() to auth.py

Database:
- Add revoked_tokens table with token_hash, username, expires_at
- Add db functions: revoke_token, is_token_revoked, cleanup_expired_revocations

Documentation:
- Document security features in README

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-09 18:21:13 +00:00
gilesb
943ccea1a2 Update Web UI and API routes in README 
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-09 17:56:23 +00:00
gilesb
5a8ce51c83 Document L1 authorization requirement for token verification 
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-09 17:43:49 +00:00
gilesb
d244a62c48 Document federated auth - no shared secrets required 
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-09 17:40:38 +00:00
gilesb
accb315623 Document L1_SERVERS configuration in README 
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-09 17:22:54 +00:00
gilesb
0f01d8e12c Add 404 page and Web UI section to README 
- Add styled 404 page for HTML requests (returns JSON for API calls)
- Add Web UI section to README documenting available routes

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-09 10:42:44 +00:00
gilesb
82cb1cf711 Fix logout to clear both legacy and shared domain cookies 
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-08 17:38:14 +00:00
gilesb
d83510f24b feat: add HTMX web UI with login/register forms 
- Home page showing README and stats
- Login/register forms with HTMX
- Registry and activities pages
- Cookie-based auth for web UI
- JWT secret from Docker secrets (/run/secrets/jwt_secret)
- Updated README with secret generation instructions

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-07 15:37:35 +00:00
gilesb
dec5266554 feat: RSA key management for ActivityPub signing 
- keys.py: Generate/load RSA-2048 keypairs, sign activities
- setup_keys.py: CLI to generate keys
- Real RsaSignature2017 signing (falls back to placeholder if no keys)
- Public key included in actor profile
- Private keys gitignored

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-07 13:51:58 +00:00
gilesb
da55bda1a5 feat: L2 ActivityPub server 
- Registry for owned assets
- ActivityPub endpoints (webfinger, actor, inbox, outbox)
- Create activities with signatures
- Record L1 runs as owned assets with provenance
- Federation support (followers, inbox)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-07 11:32:43 +00:00