Fedify changelog
Version 1.8.0
To be released.
The repository has been restructured as a monorepo, consolidating all
Fedify packages into a single repository with unified versioning. This
change affects the following packages:
@fedify/fedify (main library)@fedify/cli (CLI toolchain)@fedify/amqp (AMQP/RabbitMQ driver)@fedify/express (Express integration)@fedify/h3 (h3 framework integration)@fedify/postgres (PostgreSQL drivers)@fedify/redis (Redis drivers)
All packages now follow the same version number and are released together.
Previously, each package had independent versioning.
Key–value stores now optionally support CAS (compare-and-swap) operation
for atomic updates. This is useful for implementing optimistic locking
and preventing lost updates in concurrent environments.
- Added optional
KvStore.cas() method.
- Added
MemoryKvStore.cas() method.
- Added
DenoKvStore.cas() method.
Version 1.7.2
Released on July 2, 2025.
- Fixed HTTP signature verification to handle malformed RFC 9421 signatures
gracefully instead of returning
500 Internal Server Error responses.
Malformed signatures now properly fail verification and return appropriate
error responses.
Version 1.7.1
Released on June 30, 2025.
- Fixed JSON-LD serialization of the
Question.voters property to correctly
serialize as a plain number (e.g., "votersCount": 123) instead of as a
typed literal object (e.g., "votersCount":{"type":"xsd:nonNegativeInteger",
"@value":123}).
Version 1.7.0
Released on June 25, 2025.
Added optional MessageQueue.nativeRetrial property to indicate whether
the message queue backend provides native retry mechanisms. When true,
Fedify will skip its own retry logic and rely on the backend to handle
retries. When false or omitted, Fedify will handle retries using its
own retry policies. [#250, #251]
DenoKvMessageQueue.nativeRetrial is true.WorkersMessageQueue.nativeRetrial is true.InProcessMessageQueue.nativeRetrial is false.ParallelMessageQueue.nativeRetrial inherits from the wrapped queue.
Added FederationOptions.firstKnock option to configure the HTTP
Signatures specification used for the first signature attempt when
communicating with unknown servers. This implements the double-knocking
mechanism for better compatibility across different ActivityPub servers.
Defaults to "rfc9421" (RFC 9421: HTTP Message Signatures), with fallback
to "draft-cavage-http-signatures-12" if the first attempt fails.
[#252 by Fabien O'Carroll]
Version 1.6.4
Released on July 2, 2025.
- Fixed HTTP signature verification to handle malformed RFC 9421 signatures
gracefully instead of returning
500 Internal Server Error responses.
Malformed signatures now properly fail verification and return appropriate
error responses.
Version 1.6.3
Released on June 30, 2025.
- Fixed JSON-LD serialization of the
Question.voters property to correctly
serialize as a plain number (e.g., "votersCount": 123) instead of as a
typed literal object (e.g., "votersCount":{"type":"xsd:nonNegativeInteger",
"@value":123}).
Version 1.6.2
Released on June 19, 2025.
- Fixed compatibility issue with Mastodon servers running bleeding-edge
versions with RFC 9421 implementation bugs. Extended double-knocking
to retry with draft-cavage-http-signatures-12 on
5xx errors as a temporary
workaround for Mastodon's RFC 9421 implementation that returns 500
Internal Server Error.
Version 1.6.1
Released on June 7, 2025. Note that 1.6.0 was skipped due to a mistake in
the versioning.
Added Context.lookupWebFinger() method to make WebFinger lookups
accessible from the context. [#227]
Added Context.federation property to access the Federation
object from the context. [#235]
Added Context.clone() method. [#237]
Introduced FederationBuilder for creating a federation instance with
a builder pattern.
- Added
createFederationBuilder() function.
- Added
Federatable interface.
- Added
FederationBuilder interface.
- Deprecated
CreateFederationOptions interface. Use FederationOptions
interface.
Added Router.trailingSlashInsensitive property.
Added Router.clone() method.
Implemented HTTP Message Signatures (RFC 9421) with double-knocking.
Currently, it only works with RSA-PKCS#1-v1.5. [#208]
- Added
HttpMessageSignaturesSpec type.
- Added
SignRequestOptions.spec option.
- Added
SignRequestOptions.currentTime option.
- Added
VerifyRequestOptions.spec option.
- Added
GetAuthenticatedDocumentLoaderOptions.specDeterminer option.
- Added
GetAuthenticatedDocumentLoaderOptions.traceProvider option.
- Added
HttpMessageSignaturesSpecDeterminer interface.
- Added
--first-knock option to fedify lookup command.
Fedify now supports Cloudflare Workers. [#233]
- Added
Federation.processQueuedTask() method. [#242]
- Added
Message type. [#242]
- Added
WorkersKvStore class. [#241, #242]
- Added
WorkersMessageQueue class. [#241, #242]
The minimum supported version of Node.js is now 22.0.0.
Version 1.5.4
Released on June 30, 2025.
- Fixed JSON-LD serialization of the
Question.voters property to correctly
serialize as a plain number (e.g., "votersCount": 123) instead of as a
typed literal object (e.g., "votersCount":{"type":"xsd:nonNegativeInteger",
"@value":123}).
Version 1.5.3
Released on May 16, 2025.
Fixed a bug where inbox handler had thrown a jsonld.SyntaxError which
caused a 500 Internal Server Error when the received activity had
an invalid JSON-LD syntax. Now it logs the error and responds with
a 400 Bad Request error instead. [#232]
The exportJwk() function now populates the alg property of a returned
JsonWebKey object with "Ed25519" if the input key is an Ed25519 key.
Version 1.5.2
Released on May 11, 2025.
Fixed the fedify init command to install the correct version of
@fedify/express package. [#230, #231 by Emelia Smith]
The exportJwk() function now populates the alg property of a returned
JsonWebKey object with "Ed25519" if the input key is an Ed25519 key.
Version 1.5.1
Released on April 8, 2025.
Activity Vocabulary API became to accept RFC 3339 date-time strings
without a timezone offset. This is not a bug fix, but improves
interoperability with some implementations that do not include a timezone
offset in their date-time strings including WordPress. [#226]
Added the following default context to Undo class:
{
"litepub": "http://litepub.social/ns#",
"toot": "http://joinmastodon.org/ns#",
"EmojiReact": "litepub:EmojiReact",
"Emoji": "toot:Emoji"
}
Version 1.5.0
Released on March 28, 2025.
Version 1.4.12
Released on June 30, 2025.
- Fixed JSON-LD serialization of the
Question.voters property to correctly
serialize as a plain number (e.g., "votersCount": 123) instead of as a
typed literal object (e.g., "votersCount":{"type":"xsd:nonNegativeInteger",
"@value":123}).
Version 1.4.11
Released on May 16, 2025.
Fixed a bug where inbox handler had thrown a jsonld.SyntaxError which
caused a 500 Internal Server Error when the received activity had
an invalid JSON-LD syntax. Now it logs the error and responds with
a 400 Bad Request error instead. [#232]
The exportJwk() function now populates the alg property of a returned
JsonWebKey object with "Ed25519" if the input key is an Ed25519 key.
Version 1.4.10
Released on April 8, 2025.
Activity Vocabulary API became to accept RFC 3339 date-time strings
without a timezone offset. This is not a bug fix, but improves
interoperability with some implementations that do not include a timezone
offset in their date-time strings including WordPress. [#226]
Added the following default context to Undo class:
{
"litepub": "http://litepub.social/ns#",
"toot": "http://joinmastodon.org/ns#",
"EmojiReact": "litepub:EmojiReact",
"Emoji": "toot:Emoji"
}
Version 1.4.9
Released on March 26, 2025.
Version 1.4.8
Released on March 26, 2025.
Fixed a bug where the totalItems property of OrderedCollection
objects returned by followers collection dispatcher had been an incorrect
value if a base-url parameter was provided.
Fixed a bug where the id property of OrderedCollection and
OrderedCollectionPage objects returned by followers collection dispatcher
had been an incorrect value if a base-url parameter was provided.
Version 1.4.7
Released on March 20, 2025.
Fixed a bug of WebFinger handler where it had failed to match
acct: URIs with a host having a port number.
[#218, #219 by Revath S Kumar]
Fixed a server error thrown when an invalid URL was passed to the base-url
parameter of the followers collection. [#217]
Version 1.4.6
Released on March 9, 2025.
- Fedify no more depends on
node:punycode module, which is deprecated in
Node.js. Now it uses the built-in node:url module instead.
[#212, #214 by Fróði Karlsson]
Version 1.4.5
Released on February 28, 2025.
Made fedify init to install @fedify/h3 0.1.2 which is compatible with
Fedify 1.0.0 or later versions when --web-framework nitro option is
provided. [#213]
Fixed a bug where fedify init had failed to initialize a project with
the --runtime node --package-manager pnpm --web-framework nitro option.
[#213]
Version 1.4.4
Released on February 25, 2025.
Added the following default context to Application, Group,
Organization, Person, and Service classes:
{
"Emoji": "http://joinmastodon.org/ns#Emoji"
}
Version 1.4.3
Released on February 22, 2025.
Version 1.4.2
Released on February 19, 2025.
Fixed a bug where the fedify init command had failed to locate package
managers on Windows. [#210]
The fedify command became aware of FEDIFY_LOG_FILE environment variable
to log messages to a file. If the variable is set, the command logs
messages to the file specified by the variable.
Version 1.4.1
Released on February 10, 2025.
- Fixed a bug with nested object hydration in Activity Vocabulary API where
deeply nested properties (like
Object.getAttribution() on
Activity.getObject()) were't being properly hydrated during toJsonLd()
calls. Previously, subsequent calls to toJsonLd() on nested objects could
result in inconsistent JSON-LD output where nested objects remained as URLs
instead of being fully expanded.
Version 1.4.0
Released on February 5, 2025.
Document loader and context loader are now configurable with a factory
function for more flexibility.
- Deprecated
CreateFederationOptions.documentLoader option.
Use CreateFederationOptions.documentLoaderFactory option instead.
- Deprecated
CreateFederationOptions.contextLoader option.
Use CreateFederationOptions.contextLoaderFactory option instead.
- Added
DocumentLoaderFactory type.
- Added
DocumentLoaderFactoryOptions interface.
- Added the second parameter with
DocumentLoaderFactoryOptions type
to AuthenticatedDocumentLoaderFactory type.
GetAuthenticatedDocumentLoaderOptions interface became to extend
DocumentLoaderFactoryOptions interface.- Added a type parameter
TContextData to CreateFederationOptions
interface.
- Fedify now assigns a random-generated http:/https: URI to
activities if these do not have explicit
id properties. This behavior
can be disabled by excluding autoIdAssigner() from
the CreateFederationOptions.activityTransformers option.
Introduced ActivityTransformers for adjusting outgoing activities
before sending them so that some ActivityPub implementations with quirks
are satisfied.
- Added
@fedify/fedify/compat module.
- Added
ActivityTransformer type.
- Added
autoIdAssigner() function.
- Added
actorDehydrator() function.
- Added
defaultActivityTransformers constant.
- Added
CreateFederationOptions.activityTransformers option.
The suppressError option of Activity Vocabulary APIs,
traverseCollection() function, and Context.traverseCollection() method
now suppresses errors occurred JSON-LD processing.
WebFinger responses are now customizable. [#3]
- Added
ActorCallbackSetters.mapAlias() method.
- Added
ActorAliasMapper type.
Added Context.getNodeInfo() method. [#203]
Added shares property to Object class in Activity Vocabulary API.
- Added
Object.sharesId property.
- Added
Object.getShares() method.
new Object() constructor now accepts shares option.Object.clone() method now accepts shares option.
Added likes property to Object class in Activity Vocabulary API.
- Added
Object.likesId property.
- Added
Object.getLikes() method.
new Object() constructor now accepts likes option.Object.clone() method now accepts likes option.
Added emojiReactions property to Object class in Activity Vocabulary
API.
- Added
Object.emojiReactionsId property
- Added
Object.getEmojiReactions() method.
new Object() constructor now accepts emojiReactions option.Object.clone() method now accepts emojiReactions option.
Added allowPrivateAddress option to LookupWebFingerOptions interface.
Added more log messages using the LogTape library. Currently the below
logger categories are used:
["fedify", "compat", "transformers"]
Added -t/--traverse option to the fedify lookup subcommand. [#195]
Added -S/--suppress-errors option to the fedify lookup subcommand.
[#195]
Version 1.3.19
Released on June 30, 2025.
- Fixed JSON-LD serialization of the
Question.voters property to correctly
serialize as a plain number (e.g., "votersCount": 123) instead of as a
typed literal object (e.g., "votersCount":{"type":"xsd:nonNegativeInteger",
"@value":123}).
Version 1.3.18
Released on May 16, 2025.
Fixed a bug where inbox handler had thrown a jsonld.SyntaxError which
caused a 500 Internal Server Error when the received activity had
an invalid JSON-LD syntax. Now it logs the error and responds with
a 400 Bad Request error instead. [#232]
The exportJwk() function now populates the alg property of a returned
JsonWebKey object with "Ed25519" if the input key is an Ed25519 key.
Version 1.3.17
Released on April 8, 2025.
Activity Vocabulary API became to accept RFC 3339 date-time strings
without a timezone offset. This is not a bug fix, but improves
interoperability with some implementations that do not include a timezone
offset in their date-time strings including WordPress. [#226]
Added the following default context to Undo class:
{
"litepub": "http://litepub.social/ns#",
"toot": "http://joinmastodon.org/ns#",
"EmojiReact": "litepub:EmojiReact",
"Emoji": "toot:Emoji"
}
Version 1.3.16
Released on March 26, 2025.
Version 1.3.15
Released on March 26, 2025.
Fixed a bug where the totalItems property of OrderedCollection
objects returned by followers collection dispatcher had been an incorrect
value if a base-url parameter was provided.
Fixed a bug where the id property of OrderedCollection and
OrderedCollectionPage objects returned by followers collection dispatcher
had been an incorrect value if a base-url parameter was provided.
Version 1.3.14
Released on March 20, 2025.
Fixed a bug of WebFinger handler where it had failed to match
acct: URIs with a host having a port number.
[#218, #219 by Revath S Kumar]
Fixed a server error thrown when an invalid URL was passed to the base-url
parameter of the followers collection. [#217]
Version 1.3.13
Released on March 9, 2025.
- Fedify no more depends on
node:punycode module, which is deprecated in
Node.js. Now it uses the built-in node:url module instead.
[#212, #214 by Fróði Karlsson]
Version 1.3.12
Released on February 28, 2025.
Made fedify init to install @fedify/h3 0.1.2 which is compatible with
Fedify 1.0.0 or later versions when --web-framework nitro option is
provided. [#213]
Fixed a bug where fedify init had failed to initialize a project with
the --runtime node --package-manager pnpm --web-framework nitro option.
[#213]
Version 1.3.11
Released on February 25, 2025.
Added the following default context to Application, Group,
Organization, Person, and Service classes:
{
"Emoji": "http://joinmastodon.org/ns#Emoji"
}
Version 1.3.10
Released on February 22, 2025.
Version 1.3.9
Released on February 19, 2025.
Fixed a bug where the fedify init command had failed to locate package
managers on Windows. [#210]
The fedify command became aware of FEDIFY_LOG_FILE environment variable
to log messages to a file. If the variable is set, the command logs
messages to the file specified by the variable.
Version 1.3.8
Released on February 10, 2025.
- Fixed a bug with nested object hydration in Activity Vocabulary API where
deeply nested properties (like
Object.getAttribution() on
Activity.getObject()) were't being properly hydrated during toJsonLd()
calls. Previously, subsequent calls to toJsonLd() on nested objects could
result in inconsistent JSON-LD output where nested objects remained as URLs
instead of being fully expanded.
Version 1.3.7
Released on February 1, 2025.
- Updated LogTape to version 0.8.1, which fixes a bug where
lowestLevel
option had incorrectly behaved.
Version 1.3.6
Released on January 31, 2025.
- Fixed a bug where
getUserAgent() function had returned a User-Agent
string with a wrong JavaScript runtime name on Node.js. [#203]
Version 1.3.5
Released on January 21, 2025.
Fixed a bug where CreateFederationOptions.allowPrivateAddress option had
been ignored by the Context.lookupObject() method when it had taken
a fediverse handle.
The lookupWebFinger() function became to silently return null when
it fails to fetch the WebFinger document due to accessing a private network
address, instead of throwing a UrlError.
Version 1.3.4
Released on January 21, 2025.
Version 1.3.3
Released on December 30, 2024.
Version 1.3.2
Released on December 18, 2024.
- Fixed the default document loader to handle the
Link header with
incorrect syntax. [#196]
Version 1.3.1
Released on December 11, 2024.
- Fixed idempotence check in inbox listeners to ensure activities for
different origins are processed correctly.
Version 1.3.0
Released on November 30, 2024.
MessageQueues now can be differently configured for incoming and outgoing
activities.
- Changed the type of
CreateFederationOptions.queue option to
FederationQueueOptions | MessageQueue | undefined (was MessageQueue |
undefined).
- Added
FederationQueueOptions interface.
- Added
FederationStartQueueOptions.queue option.
Fedify now makes HTTP requests with the proper User-Agent header. [#162]
- Added
getUserAgent() function.
- Added
GetUserAgentOptions interface.
- Added
getDocumentLoader() function.
- Added
GetDocumentLoaderOptions interface.
- The type of
getAuthenticatedDocumentLoader() function's second
parameter became GetAuthenticatedDocumentLoaderOptions | undefined
(was boolean | undefined).
- Added
GetAuthenticatedDocumentLoaderOptions interface.
- Deprecated
fetchDocumentLoader() function.
- Added
LookupObjectOptions.userAgent option.
- Added the type of
getActorHandle() function's second parameter became
GetActorHandleOptions | undefined (was NormalizeActorHandleOptions |
undefined).
- Added
GetActorHandleOptions interface.
- Added the optional second parameter to
lookupWebFinger() function.
- Added
LookupWebFingerOptions interface.
- Added
GetNodeInfoOptions.userAgent option.
- Added
-u/--user-agent option to fedify lookup subcommand.
- Added
-u/--user-agent option to fedify node subcommand.
Fedify now caches unavailable keys of remote actors as well to avoid
trying fetching the same unavailable key multiple times.
- The return type of the
KeyCache.get() method became
Promise<CryptographicKey | MultiKey | null | undefined> (was
Promise<CryptographicKey | MultiKey | null>).
- The type of the
KeyCache.set() method's second parameter became
CryptographicKey | MultiKey | null (was CryptographicKey | MultiKey).
- Added
fetchKey() function.
- Added
FetchKeyOptions interface.
- Added
FetchKeyResult interface.
The Router now provide the matched route's URI template besides the name.
- The return type of
Router.route() method became RouterRouteResult |
null (was { name: string; values: Record<string, string> } | null).
- Added
RouterRouteResult interface.
Added getTypeId() function.
Context.sendActivity() and InboxContext.forwardActivity() methods now
reject when they fail to enqueue the task. [#192]
Fedify now allows you to manually route an Activity to the corresponding
inbox listener. [#193]
- Added
Context.routeActivity() method.
- Added
RouteActivityOptions interface.
Object.toJsonLd() without any format option now returns its original
JSON-LD object even if it not created from Object.fromJsonLd() but it is
returned from another Object's get*() method.
Fedify now supports OpenTelemetry for tracing. [#170]
Added @fedify/fedify/x/sveltekit module for integrating with SvelteKit
hook. [#171, #183 by Jiyu Park]
- Added
fedifyHook() function.
The scaffold project generated by fedify init command now enables
tracing data into log messages.
Let the fedify lookup command take multiple arguments.
[#173, #186 by PGD]
Version 1.2.23
Released on June 30, 2025.
- Fixed JSON-LD serialization of the
Question.voters property to correctly
serialize as a plain number (e.g., "votersCount": 123) instead of as a
typed literal object (e.g., "votersCount":{"type":"xsd:nonNegativeInteger",
"@value":123}).
Version 1.2.22
Released on May 16, 2025.
Fixed a bug where inbox handler had thrown a jsonld.SyntaxError which
caused a 500 Internal Server Error when the received activity had
an invalid JSON-LD syntax. Now it logs the error and responds with
a 400 Bad Request error instead. [#232]
The exportJwk() function now populates the alg property of a returned
JsonWebKey object with "Ed25519" if the input key is an Ed25519 key.
Version 1.2.21
Released on April 8, 2025.
Activity Vocabulary API became to accept RFC 3339 date-time strings
without a timezone offset. This is not a bug fix, but improves
interoperability with some implementations that do not include a timezone
offset in their date-time strings including WordPress. [#226]
Added the following default context to Undo class:
{
"litepub": "http://litepub.social/ns#",
"toot": "http://joinmastodon.org/ns#",
"EmojiReact": "litepub:EmojiReact",
"Emoji": "toot:Emoji"
}
Version 1.2.20
Released on March 26, 2025.
- Fixed a
TypeError thrown by the followers collection dispatcher when
the base-url parameter was provided.
- Fixed a
TypeError thrown by the signRequest() function on Node.js.
[#222]
Version 1.2.19
Released on March 26, 2025.
Fixed a bug where the totalItems property of OrderedCollection
objects returned by followers collection dispatcher had been an incorrect
value if a base-url parameter was provided.
Fixed a bug where the id property of OrderedCollection and
OrderedCollectionPage objects returned by followers collection dispatcher
had been an incorrect value if a base-url parameter was provided.
Version 1.2.18
Released on March 20, 2025.
Fixed a bug of WebFinger handler where it had failed to match
acct: URIs with a host having a port number.
[#218, #219 by Revath S Kumar]
Fixed a server error thrown when an invalid URL was passed to the base-url
parameter of the followers collection. [#217]
Version 1.2.17
Released on March 9, 2025.
- Fedify no more depends on
node:punycode module, which is deprecated in
Node.js. Now it uses the built-in node:url module instead.
[#212, #214 by Fróði Karlsson]
Version 1.2.16
Released on February 28, 2025.
Made fedify init to install @fedify/h3 0.1.2 which is compatible with
Fedify 1.0.0 or later versions when --web-framework nitro option is
provided. [#213]
Fixed a bug where fedify init had failed to initialize a project with
the --runtime node --package-manager pnpm --web-framework nitro option.
[#213]
Made fedify init to install @logtape/logtape 0.7.2 which is the version
used in Fedify 1.2.x.
Version 1.2.15
Released on February 25, 2025.
Added the following default context to Application, Group,
Organization, Person, and Service classes:
{
"Emoji": "http://joinmastodon.org/ns#Emoji"
}
Version 1.2.14
Released on February 22, 2025.
Version 1.2.13
Released on February 19, 2025.
Fixed a bug where the fedify init command had failed to locate package
managers on Windows. [#210]
The fedify command became aware of FEDIFY_LOG_FILE environment variable
to log messages to a file. If the variable is set, the command logs
messages to the file specified by the variable.
Version 1.2.12
Released on February 10, 2025.
- Fixed a bug with nested object hydration in Activity Vocabulary API where
deeply nested properties (like
Object.getAttribution() on
Activity.getObject()) were't being properly hydrated during toJsonLd()
calls. Previously, subsequent calls to toJsonLd() on nested objects could
result in inconsistent JSON-LD output where nested objects remained as URLs
instead of being fully expanded.
Version 1.2.11
Released on January 21, 2025.
Version 1.2.10
Released on December 18, 2024.
- Fixed the default document loader to handle the
Link header with
incorrect syntax. [#196]
Version 1.2.9
Released on December 11, 2024.
- Fixed idempotence check in inbox listeners to ensure activities for
different origins are processed correctly.
Version 1.2.8
Released on November 23, 2024.
- Fixed warnings from the
fedify inbox command.
[#177, #181 by WinterHana]
- Fixed
ShikiError on the fedify inbox command rendering web interface.
[#178, #185 by Heesun Jung]
- Fixed text overflow of the
fedify inbox command's web log view.
[#180, #188 by Lim Kyunghee]
Version 1.2.7
Released on November 22, 2024.
- Fixed a bug where
lookupWebFinger() function had thrown a TypeError
when the .well-known/webfinger redirects to a relative URI. [#166]
Version 1.2.6
Released on November 19, 2024.
Version 1.2.5
Released on November 14, 2024.
Version 1.2.4
Released on November 12, 2024.
Fixed a bug where default document loaders had thrown a TypeError
with a message <q>Body is unusable: Body has already been read</q> or
<q>Body already consumed</q> when the content type of the response was
an HTML document and there's no link to a JSON-LD document.
Fixed a bug where verifySignature() and verifyJsonLd() functions
sometimes had thrown a jsonld.ValidationError error. Now such errors
are caught and logged as warnings, and the signature to verify is considered
as invalid.
Version 1.2.3
Released on November 6, 2024.
- The
fedify node subcommand now can recognize multiple values of
the rel attribute in the <link> HTML elements.
Version 1.2.2
Released on November 1, 2024.
Version 1.2.1
Released on October 31, 2024.
- Now
fedify node command can render the node's favicon with
image/vnd.microsoft.icon or image/x-icon format.
Version 1.2.0
Released on October 31, 2024.
Added InboxContext.recipient property.
Added NodeInfo client functions.
- Added
getNodeInfo() function.
- Added
GetNodeInfoOptions interface.
- Added
parseNodeInfo() function.
- Added
ParseNodeInfoOptions interface.
Re-exported Semantic Versioning-related types and functions:
- Added
SemVer type.
- Added
formatSemVer() function.
- Added
parseSemVer() function.
Added followedMessage property to Actor type in Activity Vocabulary API.
- Added
Application.followedMessage property.
new Application() constructor now accepts followedMessage option.Application.clone() method now accepts followedMessage option.- Added
Group.followedMessage property.
new Group() constructor now accepts followedMessage option.Group.clone() method now accepts followedMessage option.- Added
Organization.followedMessage property.
new Organization() constructor now accepts followedMessage option.Organization.clone() method now accepts followedMessage option.- Added
Person.followedMessage property.
new Person() constructor now accepts followedMessage option.Person.clone() method now accepts followedMessage option.- Added
Service.followedMessage property.
new Service() constructor now accepts followedMessage option.Service.clone() method now accepts followedMessage option.
Log messages now can be traced using LogTape's implicit contexts.
[#118]
Added options for an AMQP driver to fedify init command.
- Added
amqp value to the -q/--message-queue option of
the fedify init command.
Added fedify node subcommand.
Added more log messages using the LogTape library. Currently the below
logger categories are used:
["fedify", "nodeinfo", "client"]
Version 1.1.23
Released on June 30, 2025.
- Fixed JSON-LD serialization of the
Question.voters property to correctly
serialize as a plain number (e.g., "votersCount": 123) instead of as a
typed literal object (e.g., "votersCount":{"type":"xsd:nonNegativeInteger",
"@value":123}).
Version 1.1.22
Released on May 16, 2025.
Fixed a bug where inbox handler had thrown a jsonld.SyntaxError which
caused a 500 Internal Server Error when the received activity had
an invalid JSON-LD syntax. Now it logs the error and responds with
a 400 Bad Request error instead. [#232]
The exportJwk() function now populates the alg property of a returned
JsonWebKey object with "Ed25519" if the input key is an Ed25519 key.
Version 1.1.21
Released on April 8, 2025.
Activity Vocabulary API became to accept RFC 3339 date-time strings
without a timezone offset. This is not a bug fix, but improves
interoperability with some implementations that do not include a timezone
offset in their date-time strings including WordPress. [#226]
Added the following default context to Undo class:
{
"litepub": "http://litepub.social/ns#",
"toot": "http://joinmastodon.org/ns#",
"EmojiReact": "litepub:EmojiReact",
"Emoji": "toot:Emoji"
}
Version 1.1.20
Released on March 26, 2025.
- Fixed a
TypeError thrown by the followers collection dispatcher when
the base-url parameter was provided.
- Fixed a
TypeError thrown by the signRequest() function on Node.js.
[#222]
Version 1.1.19
Released on March 26, 2025.
Fixed a bug where the totalItems property of OrderedCollection
objects returned by followers collection dispatcher had been an incorrect
value if a base-url parameter was provided.
Fixed a bug where the id property of OrderedCollection and
OrderedCollectionPage objects returned by followers collection dispatcher
had been an incorrect value if a base-url parameter was provided.
Version 1.1.18
Released on March 20, 2025.
Fixed a bug of WebFinger handler where it had failed to match
acct: URIs with a host having a port number.
[#218, #219 by Revath S Kumar]
Fixed a server error thrown when an invalid URL was passed to the base-url
parameter of the followers collection. [#217]
Version 1.1.17
Released on March 9, 2025.
- Fedify no more depends on
node:punycode module, which is deprecated in
Node.js. Now it uses the built-in node:url module instead.
[#212, #214 by Fróði Karlsson]
Version 1.1.16
Released on February 28, 2025.
Made fedify init to install @fedify/h3 0.1.2 which is compatible with
Fedify 1.0.0 or later versions when --web-framework nitro option is
provided. [#213]
Fixed a bug where fedify init had failed to initialize a project with
the --runtime node --package-manager pnpm --web-framework nitro option.
[#213]
Made fedify init to install @logtape/logtape 0.6.5 which is the version
used in Fedify 1.1.x.
Version 1.1.15
Released on February 25, 2025.
Added the following default context to Application, Group,
Organization, Person, and Service classes:
{
"Emoji": "http://joinmastodon.org/ns#Emoji"
}
Version 1.1.14
Released on February 22, 2025.
Version 1.1.13
Released on February 19, 2025.
Fixed a bug where the fedify init command had failed to locate package
managers on Windows. [#210]
The fedify command became aware of FEDIFY_LOG_FILE environment variable
to log messages to a file. If the variable is set, the command logs
messages to the file specified by the variable.
Version 1.1.12
Released on February 10, 2025.
- Fixed a bug with nested object hydration in Activity Vocabulary API where
deeply nested properties (like
Object.getAttribution() on
Activity.getObject()) were't being properly hydrated during toJsonLd()
calls. Previously, subsequent calls to toJsonLd() on nested objects could
result in inconsistent JSON-LD output where nested objects remained as URLs
instead of being fully expanded.
Version 1.1.11
Released on January 21, 2025.
Version 1.1.10
Released on December 18, 2024.
- Fixed the default document loader to handle the
Link header with
incorrect syntax. [#196]
Version 1.1.9
Released on December 11, 2024.
- Fixed idempotence check in inbox listeners to ensure activities for
different origins are processed correctly.
Version 1.1.8
Released on November 23, 2024.
- Fixed
ShikiError on the fedify inbox command rendering web interface.
[#178, #185 by Heesun Jung]
- Fixed text overflow of the
fedify inbox command's web log view.
[#180, #188 by Lim Kyunghee]
Version 1.1.7
Released on November 22, 2024.
- Fixed a bug where
lookupWebFinger() function had thrown a TypeError
when the .well-known/webfinger redirects to a relative URI. [#166]
Version 1.1.6
Released on November 19, 2024.
Version 1.1.5
Released on November 14, 2024.
Version 1.1.4
Released on November 12, 2024.
Fixed a bug where default document loaders had thrown a TypeError
with a message <q>Body is unusable: Body has already been read</q> or
<q>Body already consumed</q> when the content type of the response was
an HTML document and there's no link to a JSON-LD document.
Fixed a bug where verifySignature() and verifyJsonLd() functions
sometimes had thrown a jsonld.ValidationError error. Now such errors
are caught and logged as warnings, and the signature to verify is considered
as invalid.
Version 1.1.3
Released on October 31, 2024.
- Fixed a bug where
fetchDocumentLoader() function had disallowed
redirecting to a private network address when the second parameter,
a boolean value to allow private network addresses, was true.
Version 1.1.2
Released on October 27, 2024.
- Fixed default document loaders' incorrect handling of relative URIs in
Link headers with rel=alternate. [#155 by Emelia Smith]
- The
fetchDocumentLoader() function now preloads the following JSON-LD
context: http://schema.org/.
Version 1.1.1
Released on October 23, 2024.
Version 1.1.0
Released on October 20, 2024.
Added utility functions for traversing remote collections. [#150]
- Added
Context.traverseCollection() method.
- Added
traverseCollection() function.
- Added
TraverseCollectionOptions interface.
Added EmojiReact class to Activity Vocabulary API. [FEP-c0e0]
Added successor property to the Actor types in the Activity
Vocabulary API.
- Added
Application.getSuccessor() method.
new Application() constructor now accepts successor option.Application.clone() method now accepts successor option.- Added
Group.getSuccessor() method.
new Group() constructor now accepts successor option.Group.clone() method now accepts successor option.- Added
Organization.getSuccessor() method.
new Organization() constructor now accepts successor option.Organization.clone() method now accepts successor option.- Added
Person.getSuccessor() method.
new Person() constructor now accepts successor option.Person.clone() method now accepts successor option.- Added
Service.getSuccessor() method.
new Service() constructor now accepts successor option.Service.clone() method now accepts successor option.
Added DidService class to Activity Vocabulary API.
[FEP-9091, #146]
Added Export class to Activity Vocabulary API.
[FEP-9091, #146]
Added service property to the Actor types in the Activity
Vocabulary API. [FEP-9091, #146]
- Added
Application.getService() method.
- Added
Application.getServices() method.
new Application() constructor now accepts service option.new Application() constructor now accepts services option.Application.clone() method now accepts service option.Application.clone() method now accepts services option.- Added
Group.getService() method.
- Added
Group.getServices() method.
new Group() constructor now accepts service option.new Group() constructor now accepts services option.Group.clone() method now accepts service option.Group.clone() method now accepts services option.- Added
Organization.getService() method.
- Added
Organization.getServices() method.
new Organization() constructor now accepts service option.new Organization() constructor now accepts services option.Organization.clone() method now accepts service option.Organization.clone() method now accepts services option.- Added
Person.getService() method.
- Added
Person.getServices() method.
new Person() constructor now accepts service option.new Person() constructor now accepts services option.Person.clone() method now accepts service option.Person.clone() method now accepts services option.- Added
Service.getService() method.
- Added
Service.getServices() method.
new Service() constructor now accepts service option.new Service() constructor now accepts services option.Service.clone() method now accepts service option.Service.clone() method now accepts services option.
The default time window for verifying HTTP Signatures of incoming requests
is now an hour (was a minute). This new default window is according to
the ActivityPub and HTTP Signatures document.
The default value of VerifyRequestOptions.timeWindow option became
{ hours: 1 } (was { minutes: 1 }).
The default value of CreateFederationOptions.signatureTimeWindow
option became { hours: 1 } (was { minutes: 1 }).
The type of VerifyRequestOptions.timeWindow property became
Temporal.Duration | Temporal.DurationLike | false
(was Temporal.DurationLike | false).
The type of CreateFederationOptions.signatureTimeWindow property
became Temporal.Duration | Temporal.DurationLike | false
(was Temporal.DurationLike | false).
In the fedify inbox command's web interface, the Raw Activity tab is
added to show the raw JSON object of the received activity.
Version 1.0.26
Released on June 30, 2025.
- Fixed JSON-LD serialization of the
Question.voters property to correctly
serialize as a plain number (e.g., "votersCount": 123) instead of as a
typed literal object (e.g., "votersCount":{"type":"xsd:nonNegativeInteger",
"@value":123}).
Version 1.0.25
Released on May 16, 2025.
Fixed a bug where inbox handler had thrown a jsonld.SyntaxError which
caused a 500 Internal Server Error when the received activity had
an invalid JSON-LD syntax. Now it logs the error and responds with
a 400 Bad Request error instead. [#232]
The exportJwk() function now populates the alg property of a returned
JsonWebKey object with "Ed25519" if the input key is an Ed25519 key.
Version 1.0.24
Released on April 8, 2025.
- Activity Vocabulary API became to accept RFC 3339 date-time strings
without a timezone offset. This is not a bug fix, but improves
interoperability with some implementations that do not include a timezone
offset in their date-time strings including WordPress. [#226]
Version 1.0.23
Released on March 26, 2025.
- Fixed a
TypeError thrown by the followers collection dispatcher when
the base-url parameter was provided.
- Fixed a
TypeError thrown by the signRequest() function on Node.js.
[#222]
Version 1.0.22
Released on March 26, 2025.
Fixed a bug where the totalItems property of OrderedCollection
objects returned by followers collection dispatcher had been an incorrect
value if a base-url parameter was provided.
Fixed a bug where the id property of OrderedCollection and
OrderedCollectionPage objects returned by followers collection dispatcher
had been an incorrect value if a base-url parameter was provided.
Version 1.0.21
Released on March 20, 2025.
Fixed a bug of WebFinger handler where it had failed to match
acct: URIs with a host having a port number.
[#218, #219 by Revath S Kumar]
Fixed a server error thrown when an invalid URL was passed to the base-url
parameter of the followers collection. [#217]
Version 1.0.20
Released on March 9, 2025.
- Fedify no more depends on
node:punycode module, which is deprecated in
Node.js. Now it uses the built-in node:url module instead.
[#212, #214 by Fróði Karlsson]
Version 1.0.19
Released on February 28, 2025.
Made fedify init to install @fedify/h3 0.1.2 which is compatible with
Fedify 1.0.0 or later versions when --web-framework nitro option is
provided. [#213]
Fixed a bug where fedify init had failed to initialize a project with
the --runtime node --package-manager pnpm --web-framework nitro option.
[#213]
Made fedify init to install @logtape/logtape 0.6.5 which is the version
used in Fedify 1.0.x.
Version 1.0.18
Released on February 25, 2025.
Added the following default context to Application, Group,
Organization, Person, and Service classes:
{
"Emoji": "http://joinmastodon.org/ns#Emoji"
}
Version 1.0.17
Released on February 22, 2025.
Version 1.0.16
Released on February 19, 2025.
Fixed a bug where the fedify init command had failed to locate package
managers on Windows. [#210]
The fedify command became aware of FEDIFY_LOG_FILE environment variable
to log messages to a file. If the variable is set, the command logs
messages to the file specified by the variable.
Version 1.0.15
Released on February 10, 2025.
- Fixed a bug with nested object hydration in Activity Vocabulary API where
deeply nested properties (like
Object.getAttribution() on
Activity.getObject()) were't being properly hydrated during toJsonLd()
calls. Previously, subsequent calls to toJsonLd() on nested objects could
result in inconsistent JSON-LD output where nested objects remained as URLs
instead of being fully expanded.
Version 1.0.14
Released on January 21, 2025.
Version 1.0.13
Released on December 18, 2024.
- Fixed the default document loader to handle the
Link header with
incorrect syntax. [#196]
Version 1.0.12
Released on December 11, 2024.
- Fixed idempotence check in inbox listeners to ensure activities for
different origins are processed correctly.
Version 1.0.11
Released on November 22, 2024.
- Fixed a bug where
lookupWebFinger() function had thrown a TypeError
when the .well-known/webfinger redirects to a relative URI. [#166]
Version 1.0.10
Released on November 19, 2024.
Version 1.0.9
Released on November 14, 2024.
Version 1.0.8
Released on November 12, 2024.
Fixed a bug where default document loaders had thrown a TypeError
with a message <q>Body is unusable: Body has already been read</q> or
<q>Body already consumed</q> when the content type of the response was
an HTML document and there's no link to a JSON-LD document.
Fixed a bug where verifySignature() and verifyJsonLd() functions
sometimes had thrown a jsonld.ValidationError error. Now such errors
are caught and logged as warnings, and the signature to verify is considered
as invalid.
Version 1.0.7
Released on October 31, 2024.
- Fixed a bug where
fetchDocumentLoader() function had disallowed
redirecting to a private network address when the second parameter,
a boolean value to allow private network addresses, was true.
Version 1.0.6
Released on October 27, 2024.
- Fixed default document loaders' incorrect handling of relative URIs in
Link headers with rel=alternate. [#155 by Emelia Smith]
- The
fetchDocumentLoader() function now preloads the following JSON-LD
context: http://schema.org/.
Version 1.0.5
Released on October 23, 2024.
Version 1.0.4
Released on October 17, 2024.
Fixed a bug where Actor.aliasId and Actor.aliasIds properties had been
represented as as:alsoKnownAs property instead of alsoKnownAs property
in compacted JSON-LD objects.
Improved compatibility with Bridgy Fed for Bluesky where it puts
an invalid URI with the format at://... in the alsoKnownAs property.
Version 1.0.3
Released on October 17, 2024.
- Improved compatibility with some implementations (e.g., Nexkey) where
some
CryptographicKey objects are incorrectly typed in JSON-LD objects.
Version 1.0.2
Released on September 27, 2024.
Fixed a bug of Object.toJsonLd() method where it had incorrectly compacted
the name property when it was not a language map.
The Delete(Application) activities sent by the fedify inbox command now
embed the entire actor object instead of just the actor's URI so that
the peers can verify the actor's signature without fetching the actor
object.
Version 1.0.1
Released on September 26, 2024.
Fixed deprecation messages related to the {handle} variable in URL
templates; they had had wrong placeholders in the message templates.
Fixed a bug of Object.toJsonLd() method where it had not fall back to
the proper compact form when the heuristic compact form was not available.
Version 1.0.0
Released on September 26, 2024.
The term handle for dispatching actors is deprecated in favor of
identifier.
The URI template for the following methods now accepts variable
{identifier} instead of {handle}:
Federation.setActorDispatcher()Federation.setInboxDispatcher()Federation.setOutboxDispatcher()Federation.setFollowingDispatcher()Federation.setFollowersDispatcher()Federation.setLikedDispatcher()Federation.setFeaturedDispatcher()Federation.setFeaturedTagsDispatcher()Federation.setInboxListeners()
The {handle} variable is deprecated, and it will be removed in
the future.
- The type of
Federation.setActorDispatcher() method's first parameter
became ${string}{identifier}${string}` |
`${string}{handle}${string} (was ${string}{handle}${string}).
- The type of
Federation.setInboxDispatcher() method's first parameter
became ${string}{identifier}${string}` |
`${string}{handle}${string} (was ${string}{handle}${string}).
- The type of
Federation.setOutboxDispatcher() method's first parameter
became ${string}{identifier}${string}` |
`${string}{handle}${string} (was ${string}{handle}${string}).
- The type of
Federation.setFollowingDispatcher() method's first
parameter became ${string}{identifier}${string}` |
`${string}{handle}${string} (was ${string}{handle}${string}).
- The type of
Federation.setFollowersDispatcher() method's first
parameter became ${string}{identifier}${string}` |
`${string}{handle}${string} (was ${string}{handle}${string}).
- The type of
Federation.setLikedDispatcher() method's first parameter
became ${string}{identifier}${string}` |
`${string}{handle}${string} (was ${string}{handle}${string}).
- The type of
Federation.setFeaturedDispatcher() method's first
parameter became ${string}{identifier}${string}` |
`${string}{handle}${string} (was ${string}{handle}${string}).
- The type of
Federation.setFeaturedTagsDispatcher() method's first
parameter became ${string}{identifier}${string}` |
`${string}{handle}${string} (was ${string}{handle}${string}).
- The type of
Federation.setInboxListeners() method's first parameter
became ${string}{identifier}${string}` |
`${string}{handle}${string} (was ${string}{handle}${string}).
- The type of
Context.getDocumentLoader() method's first parameter
became { identifier: string } | { username: string } | { handle:
string } | { keyId: URL; privateKey: CryptoKey } (was { handle:
string } | { keyId: URL; privateKey: CryptoKey }).
- Passing
{ handle: string } to Context.getDocumentLoader() method is
deprecated in favor of { username: string }.
- The type of
Context.sendActivity() method's first parameter became
SenderKeyPair | SenderKeyPair[] | { identifier: string } | {
username: string } | { handle: string } (was SenderKeyPair | SenderKeyPair[] | { handle: string }).
- All properties of
ParseUriResult type became readonly.
- Added
identifier properties next to handle properties in
ParseUriResult type.
- The
handle properties of ParseUriResult type are deprecated in favor
of identifier properties.
- The return type of
SharedInboxKeyDispatcher callback type became
SenderKeyPair | { identifier: string } | { username: string } |
{ handle: string } | null | Promise<SenderKeyPair | { identifier:
string } | { username: string } | { handle: string } | null>
(was SenderKeyPair | { handle: string } | null |
Promise<SenderKeyPair | { handle: string } | null>).
Fedify now supports Linked Data Signatures, which is outdated but still
widely used in the fediverse.
- A
Federation object became to verify an activity's Linked Data
Signatures if it has one. If Linked Data Signatures are verified,
Object Integrity Proofs and HTTP Signatures are not verified.
Context.sendActivity() method became to sign an activity with Linked
Data Signatures if there is at least one RSA-PKCS#1-v1.5 key pair.- Added
Signature interface.
- Added
signJsonLd() function.
- Added
SignJsonLdOptions interface.
- Added
createSignature() function.
- Added
CreateSignatureOptions interface.
- Added
verifyJsonLd() function.
- Added
VerifyJsonLdOptions interface.
- Added
verifySignature() function.
- Added
VerifySignatureOptions interface.
- Added
attachSignature() function.
- Added
detachSignature() function.
In inbox listeners, a received activity now can be forwarded to another
server. [#137]
- Added
InboxContext interface.
- Added
ForwardActivityOptions interface.
- The first parameter of the
InboxListener callback type became
InboxContext (was Context).
Added cat property to Actor type in Activity Vocabulary API.
- Added
Application.cat property.
new Application() constructor now accepts cat option.Application.clone() method now accepts cat option.- Added
Group.cat property.
new Group() constructor now accepts cat option.Group.clone() method now accepts cat option.- Added
Organization.cat property.
new Organization() constructor now accepts cat option.Organization.clone() method now accepts cat option.- Added
Person.cat property.
new Person() constructor now accepts cat option.Person.clone() method now accepts cat option.- Added
Service.cat property.
new Service() constructor now accepts cat option.Service.clone() method now accepts cat option.
The Context.parseUri() method's parameter type became URL | null
(was URL).
Context.sendActivity() method now adds Object Integrity Proofs to
the activity to be sent only once. It had added Object Integrity Proofs
to the activity for every recipient before.
The message queue is now able to be stopped manually by providing
an AbortSignal object to the Federation.startQueue() method.
- Added the optional second parameter to
Federation.startQueue() method,
which is a FederationStartQueueOptions object.
- Added
FederationStartQueueOptions interface.
- Added the optional second parameter to
MessageQueue.listen() method,
which is a MessageQueueListenOptions object.
- Added
MessageQueueListenOptions interface.
- The return type of
MessageQueue.listen() method became Promise<void>
(was void).
Added ParallelMessageQueue class. [#106]
WebFinger responses now include http://webfinger.net/rel/avatar links
if the Actor object returned by the actor dispatcher has icon/icons
property.
DenoKvMessageQueue now implements Disposable interface.
The fedify inbox command now sends Delete(Application) activities when
it's terminated so that the peers can clean up data related to the temporary
actor. [#135]
Added options for PostgreSQL drivers to fedify init command.
- Added
postgres value to the -k/--kv-store option of the fedify
init command.
- Added
postgres value to the -q/--message-queue option of
the fedify init command.
The generated project by the fedify init command now enables dotenv
by default.
The fedify init command now generates .env file with default values.
Added more log messages using the LogTape library. Currently the below
logger categories are used:
Version 0.15.9
Released on November 22, 2024.
- Fixed a bug where
lookupWebFinger() function had thrown a TypeError
when the .well-known/webfinger redirects to a relative URI. [#166]
Version 0.15.8
Released on November 19, 2024.
Version 0.15.7
Released on November 14, 2024.
Version 0.15.6
Released on November 12, 2024.
- Fixed a bug where default document loaders had thrown a
TypeError
with a message <q>Body is unusable: Body has already been read</q> or
<q>Body already consumed</q> when the content type of the response was
an HTML document and there's no link to a JSON-LD document.
Version 0.15.5
Released on October 30, 2024.
- Fixed a bug where
fetchDocumentLoader() function had disallowed
redirecting to a private network address when the second parameter,
a boolean value to allow private network addresses, was true.
Version 0.15.4
Released on October 27, 2024.
- Fixed default document loaders' incorrect handling of relative URIs in
Link headers with rel=alternate. [#155 by Emelia Smith]
- The
fetchDocumentLoader() function now preloads the following JSON-LD
context: http://schema.org/.
Version 0.15.3
Released on October 23, 2024.
Version 0.15.2
Released on September 26, 2024.
- Fixed a bug of
Object.toJsonLd() method where it had not fall back to
the proper compact form when the heuristic compact form was not available.
Version 0.15.1
Released on September 15, 2024.
- Fixed a bug where even if the
ActorCallbackSetters.mapHandle() method was
called, a WebFinger username was used as an actor's handle. [#136]
Version 0.15.0
Released on September 11, 2024.
Actors, collections, and objects now can have their URIs that do not consist
of a WebFinger username, which means actors can change their fediverse
handles.
- Added
ActorCallbackSetters.mapHandle() method.
- Added
ActorHandleMapper type.
Added quoteUrl property to Article, ChatMessage, Note, and
Question classes in Activity Vocabulary API.
- Added
Article.quoteUrl property.
new Article() constructor now accepts quoteUrl option.Article.clone() method now accepts quoteUrl option.- Added
ChatMessage.quoteUrl property.
new ChatMessage() constructor now accepts quoteUrl option.ChatMessage.clone() method now accepts quoteUrl option.- Added
Note.quoteUrl property.
new Note() constructor now accepts quoteUrl option.Note.clone() method now accepts quoteUrl option.- Added
Question.quoteUrl property.
new Question() constructor now accepts quoteUrl option.Question.clone() method now accepts quoteUrl option.
The element type of the liked collection is now Object or URL instead of
Like.
- Changed the type of
Federation.setLikedDispatcher() method's second
parameter to CollectionDispatcher<Object | URL,
RequestContext<TContextData>, TContextData, void> (was
CollectionDispatcher<Like, RequestContext<TContextData>, TContextData,
void>).
Removed expand option of Object.toJsonLd() method, which was deprecated
in version 0.14.0. Use format: "expand" option instead.
Added Context.lookupObject() method.
Default document loaders now recognize ActivityStream objects in more ways:
- Loaders now recognize
alternate ActivityStreams objects in the Link
header.
- Loaders now recognize
alternate ActivityStreams objects in
the <link>/<a> HTML elements.
Added allowPrivateAddress option to CreateFederationOptions interface.
Fixed a bug where the WebFinger response had had a subject property
with an unmatched URI to the requested resource when a non-acct: URI
was given.
Renamed the short option -c for --compact of fedify lookup command to
-C to avoid conflict with the short option -c for --cache-dir.
Added -r/--raw option to fedify lookup command to output the raw JSON
object.
Version 0.14.5
Released on September 26, 2024.
- Fixed a bug of
Object.toJsonLd() method where it had not fall back to
the proper compact form when the heuristic compact form was not available.
Version 0.14.4
Released on September 6, 2024.
- Fixed a bug of
Object.fromJsonLd() method where it had thrown
a TypeError when the given JSON-LD object had an @id property
with an empty string.
Version 0.14.3
Released on September 1, 2024.
- Fixed
fedify inbox command where it had ignored -a/--accept-follow
options when no -f/--follow option was provided. [#132]
Version 0.14.2
Released on August 30, 2024.
- Fixed an incompatibility with Meta's Threads where sent activities had not
been verified by their inbox. [#125]
Version 0.14.1
Released on August 29, 2024.
Fixed fedify inbox command that had not been able to parse activities
even if they are valid JSON-LD. [#126]
Fixed a bug where the Compact Activity tab of fedify inbox command's
web interface had shown an expanded JSON-LD object instead of a compacted
one.
Version 0.14.0
Released on August 27, 2024.
Removed the limitation that the sendActivity({ handle: string },
"followers", Activity) overload is only available for RequestContext
but not for Context. Now it is available for both. [#115]
- Added
Context.sendActivity({ handle: string }, "followers", Activity)
overload.
- Added type parameter
TContext to CollectionsDispatcher type's first
parameter to distinguish between RequestContext and Context.
- The first parameter of
CollectionDispatcher type became TContext
(was RequestContext).
- Added type parameter
TContext to CollectionsCursor type's first
parameter to distinguish between RequestContext and Context.
- The first parameter of
CollectionCursor type became TContext
(was RequestContext).
- Added type parameter
TContext to CollectionsCallbackSetters type's
first parameter to distinguish between RequestContext and Context.
Added source property to Object class in Activity Vocabulary API.
[#114]
- Added
Object.source property.
new Object() constructor now accepts source option.Object.clone() method now accepts source option.
Added Source class to Activity Vocabulary API. [#114]
Added aliases property to Actor type in Activity Vocabulary API.
- Added
Application.getAliases() method.
- Added
Application.getAlias() method.
new Application() constructor now accepts alias option.new Application() constructor now accepts aliases option.Application.clone() method now accepts alias option.Application.clone() method now accepts aliases option.- Added
Group.getAliases() method.
- Added
Group.getAlias() method.
new Group() constructor now accepts alias option.new Group() constructor now accepts aliases option.Group.clone() method now accepts alias option.Group.clone() method now accepts aliases option.- Added
Organization.getAliases() method.
- Added
Organization.getAlias() method.
new Organization() constructor now accepts alias option.new Organization() constructor now accepts aliases option.Organization.clone() method now accepts alias option.Organization.clone() method now accepts aliases option.- Added
Person.getAliases() method.
- Added
Person.getAlias() method.
new Person() constructor now accepts alias option.new Person() constructor now accepts aliases option.Person.clone() method now accepts alias option.Person.clone() method now accepts aliases option.- Added
Service.getAliases() method.
- Added
Service.getAlias() method.
new Service() constructor now accepts alias option.new Service() constructor now accepts aliases option.Service.clone() method now accepts alias option.Service.clone() method now accepts aliases option.
Improved the performance of Object.toJsonLd() method.
Object.toJsonLd() method no longer guarantees that the returned
JSON-LD object is compacted unless the format: "compact" option is
provided.- Added
format option to Object.toJsonLd() method.
- Deprecated
expand option of Object.toJsonLd() method.
Use format: "expand" option instead.
- The
context option of Object.toJsonLd() method is now only
applicable to format: "compact". Otherwise, it throws
a TypeError.
The getActorHandle() function now supports cross-origin WebFinger
resources.
The lookupWebFinger() and getActorHandle() functions no more throw
an error when they fail to reach the WebFinger resource.
Collection dispatchers now set the id property of
the OrderedCollection/OrderedCollectionPage objects that they return
to the their canonical URI.
Now fedify init generates a default tsconfig.json file on Node.js and
Bun, and fills the deno.json file with the default compilerOptions on
Deno.
Version 0.13.5
Released on September 6, 2024.
- Fixed a bug of
Object.fromJsonLd() method where it had thrown
a TypeError when the given JSON-LD object had an @id property
with an empty string.
Version 0.13.4
Released on September 1, 2024.
- Fixed
fedify inbox command where it had ignored -a/--accept-follow
options when no -f/--follow option was provided. [#132]
Version 0.13.3
Released on August 30, 2024.
- Fixed an incompatibility with Meta's Threads where sent activities had not
been verified by their inbox. [#125]
Version 0.13.2
Released on August 29, 2024.
- Fixed
fedify inbox command that had not been able to parse activities
even if they are valid JSON-LD. [#126]
Version 0.13.1
Released on August 18, 2024.
- Fixed a vulnerability where the
getActorHandle() function had trusted
the hostname of WebFinger aliases that had not matched the hostname of the
actor ID (URI).
Version 0.13.0
Released on August 7, 2024.
Added closed property to Question class in Activity Vocabulary API.
- Added
Question.closed property.
new Question() constructor now accepts closed option.Question.clone() method now accepts closed option.
Added voters property to Question class in Activity Vocabulary API.
- Added
Question.voters property.
new Question() constructor now accepts voters option.Question.clone() method now accepts voters option.
HTTP Signatures verification now can be optionally skipped for the sake of
testing. [#110]
- The type of
CreateFederationOptions.signatureTimeWindow property
became Temporal.DurationLike | false (was Temporal.DurationLike).
- The type of
VerifyRequestOptions.timeWindow property became
Temporal.DurationLike | false (was Temporal.DurationLike).
- Added
CreateFederationOptions.skipSignatureVerification property.
Removed the singular actor key pair dispatcher APIs which were deprecated
in version 0.10.0.
- Removed the last parameter of the
ActorDispatcher callback type.
Use Context.getActorKeyPairs() method instead.
- Removed
ActorKeyPairDispatcher type. Use ActorKeyPairsDispatcher
type instead.
- Removed
ActorCallbackSetters.setKeyPairDispatcher() method.
Use ActorCallbackSetters.setKeyPairsDispatcher() method instead.
- Removed
Context.getActorKey() method.
Use Context.getActorKeyPairs() method instead.
The Federation is no more a class, but an interface, which has been
planned since version 0.10.0. [#69]
new Federation() constructor is removed. Use createFederation()
function instead.- Removed
Federation.sendActivity() method.
Use Context.sendActivity() method instead.
- Removed
Federation class.
- Added
Federation interface.
- Removed
FederationParameters interface.
Added fedify tunnel command to expose a local HTTP server to the public
internet.
A scaffold project generated by the fedify init command has several
changes:
- Added support for Express framework.
- Added support for Nitro framework.
- Now a scaffold project uses a x-forwarded-fetch middleware to
support
X-Forwarded-Proto and X-Forwarded-Host headers.
- Now a scaffold project has hot reloading by default.
- Now a scaffold project has logging configuration using the LogTape
library.
Added more log messages using the LogTape library. Currently the below
logger categories are used:
["fedify", "webfinger", "server"]
Version 0.12.3
Released on August 18, 2024.
- Fixed a vulnerability where the
getActorHandle() function had trusted
the hostname of WebFinger aliases that had not matched the hostname of the
actor ID (URI).
Version 0.12.2
Released on July 31, 2024.
- Fixed a bug where incoming activities had not been enqueued even
if the
queue option was provided to the createFederation() function.
Version 0.12.1
Released on July 27, 2024.
- Fixed a bug where
fedify init -w hono had generated scaffold files without
Fedify integration.
- Fixed a bug where
fedify init -r bun -w hono had generated scaffold files
with a wrong port number (was 3000).
Version 0.12.0
Released on July 24, 2024.
The fedify command is now available on npm. [#104]
Incoming activities are now queued before being dispatched to the inbox
listener if the queue option is provided to the createFederation()
function. [#70]
- The type of
InboxListener callback type's first parameter became
Context (was RequestContext).
- The type of
InboxErrorHandler callback type's first parameter became
Context (was RequestContext).
- The type of
SharedInboxKeyDispatcher callback type's first parameter
became Context (was RequestContext).
Implemented fully customizable retry policy for failed tasks in the task
queue. By default, the task queue retries the failed tasks with
an exponential backoff policy with decorrelated jitter.
- Added
outboxRetryPolicy option to CreateFederationOptions interface.
- Added
inboxRetryPolicy option to CreateFederationOptions interface.
[#70]
- Added
RetryPolicy callback type.
- Added
RetryContext interface.
- Added
createExponentialBackoffPolicy() function.
- Added
CreateExponentialBackoffPolicyOptions interface.
Federation object now allows its task queue to be started manually.
[#53]
- Added
manuallyStartQueue option to CreateFederationOptions
interface.
- Added
Federation.startQueue() method.
Made the router able to be insensitive to trailing slashes in the URL paths.
[#81]
- Added
trailingSlashInsensitive option to CreateFederationOptions
interface.
- Added
RouterOptions interface.
- Added an optional parameter to
new Router() constructor.
Added ChatMessage class to Activity Vocabulary API. [#85]
Added Move class to Activity Vocabulary API. [#65, #92 by Lee Dogeon]
Added Read class to Activity Vocabulary API. [#65, #92 by Lee Dogeon]
Added Travel class to Activity Vocabulary API.
[#65, #92 by Lee Dogeon]
Added View class to Activity Vocabulary API. [#65, #92 by Lee Dogeon]
Added TentativeAccept class to Activity Vocabulary API.
[#65, #92 by Lee Dogeon]
Added TentativeReject class to Activity Vocabulary API.
[#65, #92 by Lee Dogeon]
Improved multitenancy (virtual hosting) support. [#66]
- Added
Context.hostname property.
- Added
Context.host property.
- Added
Context.origin property.
- The type of
ActorKeyPairsDispatcher<TContextData>'s first parameter
became Context (was TContextData).
During verifying HTTP Signatures and Object Integrity Proofs, once fetched
public keys are now cached. [#107]
- The
verifyRequest() function now caches the fetched public keys
when the keyCache option is provided.
- The
verifyProof() function now caches the fetched public keys
when the keyCache option is provided.
- The
verifyObject() function now caches the fetched public keys
when the keyCache option is provided.
- Added
KeyCache interface.
- Added
VerifyRequestOptions.keyCache property.
- Added
VerifyProofOptions.keyCache property.
- Added
VerifyObjectOptions.keyCache property.
- Added
FederationKvPrefixes.publicKey property.
The built-in document loaders now recognize JSON-LD context provided in
an HTTP Link header. [#6]
- The
fetchDocumentLoader() function now recognizes the Link header
with the http://www.w3.org/ns/json-ld#context link relation.
- The
getAuthenticatedDocumentLoader() function now returns a document
loader that recognizes the Link header with
the http://www.w3.org/ns/json-ld#context link relation.
Deprecated Federation.sendActivity() method. Use Context.sendActivity()
method instead.
The last parameter of Federation.sendActivity() method is no longer
optional. Also, it now takes the required contextData option.
Removed Context.getHandleFromActorUri() method which was deprecated in
version 0.9.0. Use Context.parseUri() method instead.
Removed @fedify/fedify/httpsig module which was deprecated in version
0.9.0. Use @fedify/fedify/sig module instead.
- Removed
sign() function.
- Removed
verify() function.
- Removed
VerifyOptions interface.
Fixed a bug where the lookupWebFinger() function had incorrectly queried
if the given resource was a URL starts with http: or had a non-default
port number.
Fixed a SSRF vulnerability in the built-in document loader.
[CVE-2024-39687]
- The
fetchDocumentLoader() function now throws an error when the given
URL is not an HTTP or HTTPS URL or refers to a private network address.
- Added an optional second parameter to the
fetchDocumentLoader()
function, which can be used to allow fetching private network addresses.
- The
getAuthenticatedDocumentLoader() function now returns a document
loader that throws an error when the given URL is not an HTTP or HTTPS
URL or refers to a private network address.
- Added an optional second parameter to
the
getAuthenticatedDocumentLoader() function, which can be used to
allow fetching private network addresses.
Added fedify init subcommand. [#105]
Added more log messages using the LogTape library. Currently the below
logger categories are used:
["fedify", "federation", "queue"]
Version 0.11.3
Released on July 15, 2024.
- Fixed a bug where use of
Federation.setInboxDispatcher() after
Federation.setInboxListeners() had caused a RouterError to be
thrown even if the paths match. [#101 by Fabien O'Carroll]
Version 0.11.2
Released on July 9, 2024.
Version 0.11.1
Released on July 5, 2024.
Version 0.11.0
Released on June 29, 2024.
Improved runtime type error messages for Activity Vocabulary API. [#79]
Added suppressError option to dereferencing accessors of Activity
Vocabulary classes.
Added more collection dispatchers. [#78]
- Added
Federation.setInboxDispatcher() method. [#71]
- Added
Federation.setLikedDispatcher() method.
- Added
Context.getLikedUri() method.
- Added
{ type: "liked"; handle: string } case to ParseUriResult type.
- Renamed
linked property (which was a typo) to liked in
Application, Group, Organization, Person, and Service classes.
- Added
Federation.setFeaturedDispatcher() method.
- Added
Context.getFeaturedUri() method.
- Added
{ type: "featured"; handle: string } case to ParseUriResult
type.
- Added
Federation.setFeaturedTagsDispatcher() method.
- Added
Context.getFeaturedTagsUri() method.
- Added
{ type: "featuredTags"; handle: string } case to
ParseUriResult type.
Frequently used JSON-LD contexts are now preloaded. [#74]
Added Invite class to Activity Vocabulary API.
[#65, #80 by Randy Wressell]
Added Join class to Activity Vocabulary API.
[#65, #80 by Randy Wressell]
Added Leave class to Activity Vocabulary API.
[#65, #80 by Randy Wressell]
Added Listen class to Activity Vocabulary API.
[#65, #80 by Randy Wressell]
Added Offer class to Activity Vocabulary API.
[#65, #76 by Lee Dogeon]
The below properties of Collection and CollectionPage in Activity
Vocabulary API now do not accept Link objects:
Collection.currentCollection.firstCollection.lastCollectionPage.partOfCollectionPage.nextCollectionPage.prev
Added featured property to Actor types in Activity Vocabulary API.
[#78]
- Added
Application.getFeatured() method.
- Added
Application.featuredId property.
new Application() constructor now accepts featured option.Application.clone() method now accepts featured option.- Added
Group.getFeatured() method.
- Added
Group.featuredId property.
new Group() constructor now accepts featured option.Group.clone() method now accepts featured option.- Added
Organization.getFeatured() method.
- Added
Organization.featuredId property.
new Organization() constructor now accepts featured option.Organization.clone() method now accepts featured option.- Added
Person.getFeatured() method.
- Added
Person.featuredId property.
new Person() constructor now accepts featured option.Person.clone() method now accepts featured option.- Added
Service.getFeatured() method.
- Added
Service.featuredId property.
new Service() constructor now accepts featured option.Service.clone() method now accepts featured option.
Added featuredTags property to Actor types in Activity Vocabulary API.
[#78]
- Added
Application.getFeaturedTags() method.
- Added
Application.featuredTagsId property.
new Application() constructor now accepts featuredTags option.Application.clone() method now accepts featuredTags option.- Added
Group.getFeaturedTags() method.
- Added
Group.featuredTagsId property.
new Group() constructor now accepts featuredTags option.Group.clone() method now accepts featuredTags option.- Added
Organization.getFeaturedTags() method.
- Added
Organization.featuredTagsId property.
new Organization() constructor now accepts featuredTags option.Organization.clone() method now accepts featuredTags option.- Added
Person.getFeaturedTags() method.
- Added
Person.featuredTagsId property.
new Person() constructor now accepts featuredTags option.Person.clone() method now accepts featuredTags option.- Added
Service.getFeaturedTags() method.
- Added
Service.featuredTagsId property.
new Service() constructor now accepts featuredTags option.Service.clone() method now accepts featuredTags option.
Added target property to Activity class in Activity Vocabulary API.
- Added
Activity.getTarget() method.
- Added
Activity.getTargets() method.
- Added
Activity.targetId property.
- Added
Activity.targetIds property.
new Activity() constructor now accepts target option.new Activity() constructor now accepts targets option.Activity.clone() method now accepts target option.Activity.clone() method now accepts targets option.
Added result property to Activity class in Activity Vocabulary API.
- Added
Activity.getResult() method.
- Added
Activity.getResults() method.
- Added
Activity.resultId property.
- Added
Activity.resultIds property.
new Activity() constructor now accepts result option.new Activity() constructor now accepts results option.Activity.clone() method now accepts result option.Activity.clone() method now accepts results option.
Added origin property to Activity class in Activity Vocabulary API.
- Added
Activity.getOrigin() method.
- Added
Activity.getOrigins() method.
- Added
Activity.originId property.
- Added
Activity.originIds property.
new Activity() constructor now accepts origin option.new Activity() constructor now accepts origins option.Activity.clone() method now accepts origin option.Activity.clone() method now accepts origins option.
Added instrument property to Activity class in Activity Vocabulary API.
- Added
Activity.getInstrument() method.
- Added
Activity.getInstruments() method.
- Added
Activity.instrumentId property.
- Added
Activity.instrumentIds property.
new Activity() constructor now accepts instrument option.new Activity() constructor now accepts instruments option.Activity.clone() method now accepts instrument option.Activity.clone() method now accepts instruments option.
The items property of OrderedCollection and OrderedCollectionPage
in Activity Vocabulary API is now represented as orderedItems
(was items) in JSON-LD.
The key pair or the key pair for signing outgoing HTTP requests made from
the shared inbox now can be configured. This improves the compatibility
with other ActivityPub implementations that require authorized fetches
(i.e., secure mode).
- Added
SharedInboxKeyDispatcher type.
- Renamed
InboxListenerSetter interface to InboxListenerSetters.
- Added
InboxListenerSetters.setSharedKeyDispatcher() method.
Followed up the change in eddsa-jcs-2022 specification
for Object Integrity Proofs. [FEP-8b32, #54]
Version 0.10.2
Released on July 9, 2024.
Version 0.10.1
Released on July 5, 2024.
Version 0.10.0
Released on June 18, 2024.
Starting with this release, Fedify, previously distributed under AGPL 3.0,
is now distributed under the MIT License to encourage wider adoption.
Besides RSA-PKCS#1-v1.5, Fedify now supports Ed25519 for signing and
verifying the activities. [#55]
- Added an optional parameter to
generateCryptoKeyPair() function,
algorithm, which can be either "RSASSA-PKCS1-v1_5" or "Ed25519".
- The
importJwk() function now accepts Ed25519 keys.
- The
exportJwk() function now exports Ed25519 keys.
- The
importSpki() function now accepts Ed25519 keys.
- The
exportJwk() function now exports Ed25519 keys.
Now multiple key pairs can be registered for an actor. [FEP-521a, #55]
- Added
Context.getActorKeyPairs() method.
- Deprecated
Context.getActorKey() method.
Use Context.getActorKeyPairs() method instead.
- Added
ActorKeyPair interface.
- Added
ActorCallbackSetters.setKeyPairsDispatcher() method.
- Added
ActorKeyPairsDispatcher type.
- Deprecated
ActorCallbackSetters.setKeyPairDispatcher() method.
- Deprecated
ActorKeyPairDispatcher type.
- Deprecated the third parameter of the
ActorDispatcher callback type.
Use Context.getActorKeyPairs() method instead.
Added Multikey class to Activity Vocabulary API. [FEP-521a, #55]
- Added
importMultibaseKey() function.
- Added
exportMultibaseKey() function.
Added assertionMethod property to the Actor types in the Activity
Vocabulary API. [FEP-521a, #55]
- Added
Application.getAssertionMethod() method.
- Added
Application.getAssertionMethods() method.
new Application() constructor now accepts assertionMethod option.new Application() constructor now accepts assertionMethods option.Application.clone() method now accepts assertionMethod option.Application.clone() method now accepts assertionMethods option.- Added
Group.getAssertionMethod() method.
- Added
Group.getAssertionMethods() method.
new Group() constructor now accepts assertionMethod option.new Group() constructor now accepts assertionMethods option.Group.clone() method now accepts assertionMethod option.Group.clone() method now accepts assertionMethods option.- Added
Organization.getAssertionMethod() method.
- Added
Organization.getAssertionMethods() method.
new Organization() constructor now accepts assertionMethod option.new Organization() constructor now accepts assertionMethods option.Organization.clone() method now accepts assertionMethod option.Organization.clone() method now accepts assertionMethods option.- Added
Person.getAssertionMethod() method.
- Added
Person.getAssertionMethods() method.
new Person() constructor now accepts assertionMethod option.new Person() constructor now accepts assertionMethods option.Person.clone() method now accepts assertionMethod option.Person.clone() method now accepts assertionMethods option.- Added
Service.getAssertionMethod() method.
- Added
Service.getAssertionMethods() method.
new Service() constructor now accepts assertionMethod option.new Service() constructor now accepts assertionMethods option.Service.clone() method now accepts assertionMethod option.Service.clone() method now accepts assertionMethods option.
Added DataIntegrityProof class to Activity Vocabulary API.
[FEP-8b32, #54]
Added proof property to the Object class in the Activity
Vocabulary API. [FEP-8b32, #54]
- Added
Object.getProof() method.
- Added
Object.getProofs() method.
new Object() constructor now accepts proof option.new Object() constructor now accepts proofs option.Object.clone() method now accepts proof option.Object.clone() method now accepts proofs option.
Implemented Object Integrity Proofs. [FEP-8b32, #54]
- If there are any Ed25519 key pairs, the
Context.sendActivity() and
Federation.sendActivity() methods now make Object Integrity Proofs
for the activity to be sent.
- If the incoming activity has Object Integrity Proofs, the inbox listener
now verifies them and ignores HTTP Signatures (if any).
- Added
signObject() function.
- Added
SignObjectOptions interface.
- Added
createProof() function.
- Added
CreateProofOptions interface.
- Added
verifyObject() function.
- Added
VerifyObjectOptions interface.
- Added
verifyProof() function.
- Added
VerifyProofOptions interface.
- Added
SenderKeyPair interface.
- The type of
Federation.sendActivity() method's first parameter became
SenderKeyPair[] (was { keyId: URL; privateKey: CryptoKey }).
- The
Context.sendActivity() method's first parameter now accepts
SenderKeyPair[] as well.
In the future, Federation class will become an interface.
For the forward compatibility, the following changes are made:
- Added
createFederation() function.
- Added
CreateFederationOptions interface.
- Deprecated
new Federation() constructor. Use createFederation()
function instead.
- Deprecated
FederationParameters interface.
Added Arrive class to Activity Vocabulary API.
[#65, #68 by Randy Wressell]
Added Question class to Activity Vocabulary API.
Added context option to Object.toJsonLd() method. This applies to
any subclasses of the Object class too.
Deprecated treatHttps option in FederationParameters interface.
Instead, use the x-forwarded-fetch library to recognize the
X-Forwarded-Host and X-Forwarded-Proto headers.
Removed the Federation.handle() method which was deprecated in version
0.6.0.
Removed the integrateHandlerOptions() function from
@fedify/fedify/x/fresh which was deprecated in version 0.6.0.
Ephemeral actors and inboxes that the fedify inbox command spawns are
now more interoperable with other ActivityPub implementations.
- Ephemeral actors now have the following properties:
summary,
following, followers, outbox, manuallyApprovesFollowers, and
url.
- Improved the compatibility of the
fedify inbox command with Misskey
and Mitra.
Added more log messages using the LogTape library. Currently the below
logger categories are used:
["fedify", "sig", "proof"]["fedify", "sig", "key"]["fedify", "vocab", "lookup"]["fedify", "webfinger", "lookup"]
Version 0.9.3
Released on July 9, 2024.
Version 0.9.2
Released on July 5, 2024.
Version 0.9.1
Released on June 13, 2024.
- Fixed a bug of Activity Vocabulary API that
clone() method of Vocabulary
classes had not cloned the id property from the source object.
Version 0.9.0
Released on June 2, 2024.
Added Tombstone class to Activity Vocabulary API.
Added Hashtag class to Activity Vocabulary API. [#48]
Added Emoji class to Activity Vocabulary API. [#48]
Added an actor handle normalization function.
- Added
normalizeActorHandle() function.
- Added
NormalizeActorHandleOptions interface.
- The
getActorHandle() function now guarantees that the returned
actor handle is normalized.
- Added the second optional parameter to
getActorHandle() function.
- The return type of
getActorHandle() function became
Promise<`@${string}@${string}` | `${string}@${string}`>
(was Promise<`@${string}@${string}`>).
Added excludeBaseUris option to Context.sendActivity() and
Federation.sendActivity() methods.
- Added
SendActivityOptions.excludeBaseUris property.
- Added
ExtractInboxesParameters.excludeBaseUris property.
The Context now can parse URIs of objects, inboxes, and collections as
well as actors.
- Added
Context.parseUri() method.
- Added
ParseUriResult type.
- Deprecated
Context.getHandleFromActorUri() method.
The time window for signature verification is now configurable. [#52]
- The default time window for signature verification is now a minute (was
30 seconds).
- Added
signatureTimeWindow option to FederationParameters interface.
- Added
VerifyOptions interface.
- The signature of the
verify() function is revamped; it now optionally
takes a VerifyOptions object as the second parameter.
Renamed the @fedify/fedify/httpsig module to @fedify/fedify/sig, and
also:
- Deprecated
sign() function. Use signRequest() instead.
- Deprecated
verify() function. Use verifyRequest() instead.
- Deprecated
VerifyOptions interface. Use VerifyRequestOptions
instead.
When signing an HTTP request, the algorithm parameter is now added to
the Signature header. This change improves the compatibility with
Misskey and other implementations that require the algorithm parameter.
Added more log messages using the LogTape library. Currently the below
logger categories are used:
["fedify", "federation", "actor"]["fedify", "federation", "http"]["fedify", "sig", "http"]["fedify", "sig", "key"]["fedify", "sig", "owner"]
Version 0.8.0
Released on May 6, 2024.
The CLI toolchain for testing and debugging is now available on JSR:
@fedify/cli. You can install it with
deno install -A --unstable-fs --unstable-kv --unstable-temporal -n fedify
jsr:@fedify/cli, or download a standalone executable from the releases
page.
- Added
fedify command.
- Added
fedify lookup subcommand.
- Added
fedify inbox subcommand.
Implemented followers collection synchronization mechanism.
- Added
RequestContext.sendActivity() overload that takes "followers"
as the second parameter.
- Added the second type parameter to
CollectionCallbackSetters
interface.
- Added the second type parameter to
CollectionDispatcher type.
- Added the fourth parameter to
CollectionDispatcher type.
- Added the second type parameter to
CollectionCounter type.
- Added the third parameter to
CollectionCounter type.
- Added the second type parameter to
CollectionCursor type.
- Added the third parameter to
CollectionCursor type.
Relaxed the required type for activity recipients.
- Added
Recipient interface.
- The type of the second parameter of
Context.sendActivity() method
became Recipient | Recipient[] (was Actor | Actor[]). However,
since Recipient is a supertype of Actor, the existing code should
work without any change.
Followers collection now has to consist of Recipient objects only.
(It could consist of URLs as well as Actors before.)
- The type of
Federation.setFollowersDispatcher() method's second
parameter became CollectionDispatcher<Recipient, TContextData, URL>
(was CollectionDispatcher<Actor | URL, TContextData>).
Some of the responsibility of a document loader was separated to a context
loader and a document loader.
- Added
contextLoader option to constructors, fromJsonLd() static
methods, clone() methods, and all non-scalar accessors (get*()) of
Activity Vocabulary classes.
- Renamed
documentLoader option to contextLoader in toJsonLd()
methods of Activity Vocabulary objects.
- Added
contextLoader option to LookupObjectOptions interface.
- Added
contextLoader property to Context interface.
- Added
contextLoader option to FederationParameters interface.
- Renamed
documentLoader option to contextLoader in
RespondWithObjectOptions interface.
- Added
GetKeyOwnerOptions interface.
- The type of the second parameter of
getKeyOwner() function became
GetKeyOwnerOptions (was DocumentLoader).
- Added
DoesActorOwnKeyOptions interface.
- The type of the third parameter of
doesActorOwnKey() function became
DoesActorOwnKeyOptions (was DocumentLoader).
Added width and height properties to Document class for better
compatibility with Mastodon. [#47]
- Added
Document.width property.
- Added
Document.height property.
new Document() constructor now accepts width option.new Document() constructor now accepts height option.Document.clone() method now accepts width option.Document.clone() method now accepts height option.
Removed the dependency on @js-temporal/polyfill on Deno, and Fedify now
requires --unstable-temporal flag. On other runtime, it still depends
on @js-temporal/polyfill.
Added more log messages using the LogTape library. Currently the below
logger categories are used:
["fedify", "federation", "collection"]["fedify", "httpsig", "verify"]["fedify", "runtime", "docloader"]
Fixed a bug where the authenticated document loader had thrown InvalidUrl
error when the URL redirection was involved in Bun.
Fixed a bug of lookupObject() that it had failed to look up the actor
object when WebFinger response had no links with
"type": "application/activity+json" but had "type":
"application/ld+json; profile=\"https://www.w3.org/ns/activitystreams\"".
Version 0.7.0
Released on April 23, 2024.
Added PUBLIC_COLLECTION constant for public addressing.
Federation now supports authorized fetch for actor dispatcher and
collection dispatchers.
- Added
ActorCallbackSetters.authorize() method.
- Added
CollectionCallbackSetters.authorize() method.
- Added
AuthorizedPredicate type.
- Added
RequestContext.getSignedKey() method.
- Added
RequestContext.getSignedKeyOwner() method.
- Added
FederationFetchOptions.onUnauthorized option for handling
unauthorized fetches.
- Added
getKeyOwner() function.
The default implementation of FederationFetchOptions.onNotAcceptable
option now responds with Vary: Accept, Signature header.
Added log messages using the LogTape library. Currently the below
logger categories are used:
["fedify"]["fedify", "federation"]["fedify", "federation", "inbox"]["fedify", "federation", "outbox"]
Added RequestContext.getActor() method.
Activity Vocabulary classes now have typeId static property.
Dispatcher setters and inbox listener setters in Federation now take
a path as `${string}{handle}${string}` instead of string
so that it is more type-safe.
Added generalized object dispatchers. [#33]
- Added
Federation.setObjectDispatcher() method.
- Added
ObjectDispatcher type.
- Added
ObjectAuthorizePredicate type.
- Added
Context.getObjectUri() method.
- Added
RequestContext.getObject() method.
Version 0.6.1
Released on April 17, 2024.
- Fixed a bug of
new Federation() constructor that if it is once called
the process will never exit. [#39]
Version 0.6.0
Released on April 9, 2024.
DocumentLoader is now propagated to the loaded remote objects from
Activity Vocabulary objects. [#27]
- Added
options parameter to Activity Vocabulary constructors.
- Added
options parameter to clone() method of Activity Vocabulary
objects.
- The Activity Vocabulary object passed to
InboxListener now implicitly
loads remote object with an authenticated DocumentLoader.
Added Federation.fetch() method.
- Deprecated
Federation.handle() method. Use Federation.fetch()
method instead.
- Renamed
FederationHandlerParameters type to FederationFetchOptions.
- Added
integrateFetchOptions() function.
- Deprecated
integrateHandlerOptions() function.
Added @fedify/fedify/x/hono module for integrating with Hono middleware.
[#25]
- Added
federation() function.
- Added
ContextDataFactory type.
Context.sendActivity() method now throws TypeError instead of silently
failing when the given Activity object lacks the actor property.
Context.sendActivity() method now uses an authenticated document
loader under the hood.
Added outbox error handler to Federation.
- Added
onOutboxError option to new Federation() constructor.
- Added
OutboxErrorHandler type.
Version 0.5.2
Released on April 17, 2024.
- Fixed a bug of
new Federation() constructor that if it is once called
the process will never exit. [#39]
Version 0.5.1
Released on April 5, 2024.
- Fixed a bug of
Federation that its actor/collection dispatchers had done
content negotiation before determining if the resource exists or not.
It also fixed a bug that integrateHandler() from @fedify/fedify/x/fresh
had responded with 406 Not Acceptable instead of 404 Not Found when
the resource does not exist in the web browser. [#34]
Version 0.5.0
Released on April 2, 2024.
Fedify is now available on npm: @fedify/fedify. [#24]
Abstract key–value store for caching.
- Added
KvStore interface.
- Added
KvStoreSetOptions interface.
- Added
KvKey type.
- Added
DenoKvStore class.
KvCacheParameters.kv option now accepts a KvStore instead of
Deno.Kv.KvCacheParameters.prefix option now accepts a KvKey instead of
Deno.KvKey.FederationParameters.kv option now accepts a KvStore instead of
Deno.Kv.FederationKvPrefixes.activityIdempotence option now accepts a KvKey
instead of Deno.KvKey.FederationKvPrefixes.remoteDocument option now accepts a KvKey
instead of Deno.KvKey.
Abstract message queue for outgoing activities.
- Added
MessageQueue interface.
- Added
MessageQueueEnqueueOptions interface.
- Added
InProcessMessageQueue class.
- Added
FederationParameters.queue option.
Added @fedify/fedify/x/denokv module for adapting Deno.Kv to KvStore
and MessageQueue. It is only available in Deno runtime.
- Added
DenoKvStore class.
- Added
DenoKvMessageQueue class.
Added PropertyValue to Activity Vocabulary API. [#29]
- Added
PropertyValue class.
new Object() constructor's attachments option now accepts
PropertyValue objects.new Object() constructor's attachment option now accepts
a PropertyValue object.Object.getAttachments() method now yields PropertyValue objects
besides Object and Link objects.Object.getAttachment() method now returns a PropertyValue object
besides an Object and a Link object.Object.clone() method's attachments option now accepts
PropertyValue objects.Object.clone() method's attachment option now accepts
a PropertyValue object.
Removed dependency on jose.
- Added
exportSpki() function.
- Added
importSpki() function.
Fixed a bug that Application.manuallyApprovesFollowers,
Group.manuallyApprovesFollowers, Organization.manuallyApprovesFollowers,
Person.manuallyApprovesFollowers, and Service.manuallyApprovesFollowers
properties were not properly displayed in Mastodon.
Version 0.4.0
Released on March 26, 2024.
Added @fedify/fedify/x/fresh module for integrating with Fresh
middleware.
- Added
integrateHandler() function.
- Added
integrateHandlerOptions() function.
Added getActorHandle() function.
Fedify now has authenticated document loader. [#12]
- Added
Context.getDocumentLoader() method.
- Added
getAuthenticatedDocumentLoader() function.
- Added
AuthenticatedDocumentLoaderFactory type.
- Added
authenticatedDocumentLoaderFactory option to new Federation()
constructor.
Context.documentLoader property now returns an authenticated document
loader in personal inbox listeners. (Note that it's not affected in
shared inbox listeners.)
Added singular accessors to Object's icon and image properties.
new Object() constructor now accepts icon option.new Object() constructor now accepts image option.- Added
Object.getIcon() method.
- Added
Object.getImage() method.
Object.clone() method now accepts icon option.Object.clone() method now accepts image option.
Object's icon and image properties no more accept Link objects.
new Object() constructor's icons option no more accepts Link
objects.new Object() constructor's images option no more accepts Link
objects.Object.getIcons() method no more yields Link objects.Object.getImages() method no more yields Link objects.Object.clone() method's icons option no more accepts Link objects.Object.clone() method's images option no more accepts Link
objects.
Object's attributedTo property was renamed to attribution.
new Object() constructor's attributedTo option was renamed to
attribution.new Object() constructor's attributedTos option was renamed to
attributions.Object.getAttributedTo() method is renamed to
Object.getAttribution().Object.getAttributedTos() method is renamed to
Object.getAttributions().Object.clone() method's attributedTo option is renamed to
attribution.Object.clone() method's attributedTos option is renamed to
attributions.
Object's attribution property (was attributedTo) now accepts only
Actor objects.
new Object() constructor's attribution option (was attributedTo)
now accepts only an Actor object.new Object() constructor's attributions option (was attributedTos)
now accepts only Actor objects.Object.getAttribution() method (was getAttributedTo()) now returns
only an Actor object.Object.getAttributions() method (was getAttributedTos()) now returns
only Actor objects.Object.clone() method's attribution option (attributedTo) now
accepts only an Actor object.Object.clone() method's attributions option (attributedTos) now
accepts only Actor objects.
Activity's object property no more accepts Link objects.
new Activity() constructor's object option no more accepts a Link
object.new Activity() constructor's objects option no more accepts Link
objects.Activity.getObject() method no more returns a Link object.Activity.getObjects() method no more returns Link objects.Activity.clone() method's object option no more accepts a Link
object.Activity.clone() method's objects option no more accepts Link
objects.
Activity's actor property now accepts only Actor objects.
new Activity() constructor's actor option now accepts only
an Actor object.new Activity() constructor's actors option now accepts only Actor
objects.Activity.getActor() method now returns only an Actor object.Activity.getActors() method now returns only Actor objects.Activity.clone() method's actor option now accepts only an Actor
object.Activity.clone() method's actors option now accepts only Actor
objects.
Added sensitive property to Object class.
new Object() constructor now accepts sensitive option.- Added
Object.sensitive attribute.
Object.clone() method now accepts sensitive option.
Now lookupWebFinger() follows redirections.
The http://webfinger.net/rel/profile-page links in WebFinger responses
now omit type property.
Version 0.3.0
Released on March 15, 2024.
Added utility functions for responding with an ActivityPub object:
- Added
respondWithObject() function.
- Added
respondWithObjectIfAcceptable() function.
- Added
RespondWithObjectOptions interface.
Added utility functions for generating and exporting cryptographic keys
which are compatible with popular ActivityPub software:
- Added
generateCryptoKeyPair() function.
- Added
exportJwk() function.
- Added
importJwk() function.
The following functions and methods now throw TypeError if the specified
CryptoKey is not extractable:
Context.getActorKey() methodContext.sendActivity() methodFederation.sendActivity() method
Added immediate option to Context.sendActivity() and
Federation.sendActivity() methods.
Added SendActivityOptions interface.
Now onNotFound/onNotAcceptable options are optional for
Federation.handle() method. [#9]
Version 0.2.0
Released on March 10, 2024.
Implemented NodeInfo 2.1 protocol. [#1]
- Now
Federation.handle() accepts requests for /.well-known/nodeinfo.
- Added
Federation.setNodeInfoDispatcher() method.
- Added
Context.getNodeInfoUri() method.
- Added
NodeInfo interface.
- Added
Software interface.
- Added
Protocol type.
- Added
Services interface.
- Added
InboundService type.
- Added
OutboundService type.
- Added
Usage interface.
- Added
NodeInfoDispatcher type.
- Added
nodeInfoToJson() function.
Implemented WebFinger client.
- Added
lookupObject() function.
- Added
lookupWebFinger() function.
Federation.handle() now responds with Access-Control-Allow-Origin: *
header for WebFinger requests.
fetchDocumentLoader(), the default document loader, now sends Accept:
application/activity+json, application/ld+json header (was Accept:
application/ld+json only).
Version 0.1.0
Initial release. Released on March 8, 2024.
fedify-dev
