blue_factory 0.1.4 → 0.1.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a7f8f8505228a075534b74c48c3011441aca5f8710bb1dc6fd769fd62cb60d71
-  data.tar.gz: 303454ba19fee635367049603810cb1ebb7662665ccc05ce99c035b063c94b2c
+  metadata.gz: de68a9c6f0b159edc06d950cb3ad558537273ce95637a3c2b2ab183f0eeb52d9
+  data.tar.gz: 609d5127c0ee34fbc19bca7b3cb37b01cbde365e05f24699e8cd4b0bd226d340
 SHA512:
-  metadata.gz: 17b3606d68a5bc89557e78fc85478319499e84ce903fdc2f4e56a8221f923435f0c5a55b43a1a64fc974dc843b38d6d9a672480e56fe12c3f5eb6e26fbb5cff6
-  data.tar.gz: b53d4ac56b668b15f256bf5a87abd8f8195d0a91e3f7308b78f24454be9d436a05c539fb31b14fd6febe3b6a7621b7e151ef2c90b3963c64d52c743bd30bb7c6
+  metadata.gz: 25dee3b63c24fc48fce4b4aaa04ac8113c92e35df6464b8357053ef422fba14181c2cd3d7e26894fcbb14e736b029b2e5a3f45940d93fc294ddcbc52519f49bf
+  data.tar.gz: bad39da56a7a4cec3217dbf507197dc23c2951e855d8501bb89babe8a0966e3809065cbf9a0e1c7c038c77e0d5764a04feb8e6815c931962d40cd1bb29d5c391

data/CHANGELOG.md

@@ -1,3 +1,7 @@
+## [0.1.5] - 2025-03-20
+
+- added support for feed content mode field (video feeds)
+
 ## [0.1.4] - 2023-08-19
 
 - implemented partial authentication, without signature verification (`enable_unsafe_auth` option)

data/README.md

@@ -1,6 +1,9 @@
 # BlueFactory 🏭
 
-A Ruby gem for hosting custom feeds for Bluesky
+A Ruby gem for hosting custom feeds for Bluesky.
+
+> [!NOTE]
+> ATProto Ruby gems collection: [skyfall](https://github.com/mackuba/skyfall) | [blue_factory](https://github.com/mackuba/blue_factory) | [minisky](https://github.com/mackuba/minisky) | [didkit](https://github.com/mackuba/didkit)
 
 
 ## What does it do
@@ -125,11 +128,11 @@ server {
 
 ## Authentication
 
-Feeds are authenticated using [JSON Web Tokens](https://jwt.io). When a user opens, refreshes or scrolls down a feed in their app, a request is made to the feed service from the Bluesky network's IP address with user's authentication token in the `Authorization` HTTP header.
+Feeds are authenticated using a technology called [JSON Web Tokens](https://jwt.io). If a user is logged in, when they open, refresh or scroll down a feed in their app, requests are made to the feed service from the Bluesky network's IP address with user's authentication token in the `Authorization` HTTP header. (This is not the same kind of token as the access token that you use to make API calls - it does not let you perform any actions on user's behalf.)
 
-At the moment, Blue Factory handles authentication in a very simplified way - it extracts the user's DID from the authentication header, but it does not verify the signature. This means that anyone can trivially prepare a fake token and make requests to the `getFeedSkeleton` endpoint as a different user.
+At the moment, Blue Factory handles authentication in a very simplified way - it extracts the user's DID from the authentication header, but it does not verify the signature. This means that anyone with some programming knowledge can trivially prepare a fake token and make requests to the `getFeedSkeleton` endpoint as a different user.
 
-As such, this authentication should not be used for anything critical. It may be used for things like logging, analytics, or as "security by obscurity" to just discourage others from accessing the feed in the app.
+As such, this authentication should not be used for anything critical. It may be used for things like logging, analytics, or as "security by obscurity" to just discourage others from accessing the feed in the app. You can also use this to build personalized feeds, as long as it's not a problem that the user DID may be fake.
 
 To use this simple authentication, set the `enable_unsafe_auth` option:
 
@@ -167,7 +170,24 @@ end
 
 <p><img width="400" src="https://github.com/mackuba/blue_factory/assets/28465/9197c0ec-9302-4ca0-b06c-3fce2e0fa4f4"></p>
 
-Note: the `current_user` may be `nil` if the authentication header is not set at all (which may happen if you access the endpoint e.g. with `curl` or in a browser).
+
+### Unauthenticated access
+
+Please note that the `current_user` may be nil - this will happen if the authentication header is not set at all. Since the [bsky.app](https://bsky.app) website is now open to the public and can be accessed without authentication, people can also access your feeds without being logged in.
+
+If you want the feed to only be available to logged in users (even if it's a non-personalized feed), simply raise an `AuthorizationError` if `current_user` is nil:
+
+```rb
+class RestrictedFeed
+  def get_posts(params, current_user)
+    if current_user.nil?
+      raise BlueFactory::AuthorizationError, "Log in to see this feed"
+    end
+
+    # ...
+  end
+end
+```
 
 
 ## Additional configuration & customizing
@@ -204,6 +224,7 @@ To publish the feed, you will need to provide some additional info about the fee
 - `display_name` (required) - the publicly visible name of your feed, e.g. "WWDC 23" (should be something short)
 - `description` (optional) - a longer (~1-2 lines) description of what the feed does, displayed on the feed page as the "bio"
 - `avatar_file` (optional) - path to an avatar image from the project's root (PNG or JPG)
+- `content_mode` (optional) - return `:video` to create a video feed
 
 When you're ready, run the rake task passing the feed key (you will be asked for the uploader account's password):
 
@@ -211,9 +232,12 @@ When you're ready, run the rake task passing the feed key (you will be asked for
 bundle exec rake bluesky:publish KEY=wwdc
 ```
 
+For non-Bluesky PDSes, you need to also add an env var `SERVER_URL=https://your.pds.host`.
+
+
 ## Credits
 
-Copyright © 2023 Kuba Suder ([@mackuba.eu](https://bsky.app/profile/mackuba.eu)).
+Copyright © 2025 Kuba Suder ([@mackuba.eu](https://bsky.app/profile/mackuba.eu)).
 
 The code is available under the terms of the [zlib license](https://choosealicense.com/licenses/zlib/) (permissive, similar to MIT).
 

data/lib/blue_factory/server.rb

@@ -13,7 +13,6 @@ module BlueFactory
       disable :static
       enable :quiet
       enable :logging
-      set :default_content_type, 'application/json'
       settings.add_charset << 'application/json'
     end
 
@@ -26,11 +25,15 @@ module BlueFactory
         'at://' + config.publisher_did + '/' + FEED_GENERATOR_TYPE + '/' + key
       end
 
-      def json(data)
+      def json_response(data)
+        content_type :json
         JSON.generate(data)
       end
 
+      alias json json_response
+
       def json_error(name, message, status: 400)
+        content_type :json
         [status, JSON.generate({ error: name, message: message })]
       end
 
@@ -110,7 +113,7 @@ module BlueFactory
         output[:feed] = response[:posts].map { |s| { post: s }}
         output[:cursor] = response[:cursor] if response[:cursor]
 
-        return json(output)
+        return json_response(output)
       rescue InvalidRequestError => e
         return json_error(e.error_type || "InvalidRequest", e.message)
       rescue AuthorizationError => e
@@ -123,14 +126,14 @@ module BlueFactory
     end
 
     get '/xrpc/app.bsky.feed.describeFeedGenerator' do
-      return json({
+      return json_response({
         did: config.service_did,
         feeds: config.feed_keys.map { |f| { uri: feed_uri(f) }}
       })
     end
 
     get '/.well-known/did.json' do
-      return json({
+      return json_response({
         '@context': ['https://www.w3.org/ns/did/v1'],
         id: config.service_did,
         service: [

data/lib/blue_factory/tasks/publish.rake

@@ -40,6 +40,18 @@ namespace :bluesky do
       feed_description = feed.description
     end
 
+    if feed.respond_to?(:content_mode)
+      case feed.content_mode
+      when nil, :unspecified
+        feed_content_mode = "app.bsky.feed.defs#contentModeUnspecified"
+      when :video
+        feed_content_mode = "app.bsky.feed.defs#contentModeVideo"
+      else
+        puts "Invalid content mode: #{feed.content_mode.inspect}. Accepted values: :video, :unspecified, nil."
+        exit 1
+      end
+    end
+
     if feed.respond_to?(:avatar_file) && feed.avatar_file.to_s.strip != ''
       avatar_file = feed.avatar_file
 
@@ -87,6 +99,7 @@ namespace :bluesky do
     }
 
     record[:avatar] = avatar_ref if avatar_ref
+    record[:contentMode] = feed_content_mode if feed_content_mode
 
     json = BlueFactory::Net.post_request(server, 'com.atproto.repo.putRecord', {
       repo: BlueFactory.publisher_did,

data/lib/blue_factory/version.rb

@@ -1,3 +1,3 @@
 module BlueFactory
-  VERSION = "0.1.4"
+  VERSION = "0.1.5"
 end

metadata

@@ -1,14 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: blue_factory
 version: !ruby/object:Gem::Version
-  version: 0.1.4
+  version: 0.1.5
 platform: ruby
 authors:
 - Kuba Suder
-autorequire:
 bindir: bin
 cert_chain: []
-date: 2023-08-19 00:00:00.000000000 Z
+date: 2025-03-20 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: sinatra
@@ -56,7 +55,6 @@ metadata:
   bug_tracker_uri: https://github.com/mackuba/blue_factory/issues
   changelog_uri: https://github.com/mackuba/blue_factory/blob/master/CHANGELOG.md
   source_code_uri: https://github.com/mackuba/blue_factory
-post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -71,8 +69,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.4.10
-signing_key:
+rubygems_version: 3.6.5
 specification_version: 4
 summary: A Ruby gem for hosting custom feeds for Bluesky
 test_files: []