@fedify/cli 2.0.0-pr.467.1877 → 2.0.0-pr.474.1879

package/deno.json

@@ -1,6 +1,6 @@
 {
   "name": "@fedify/cli",
-  "version": "2.0.0-pr.467.1877+dc12636d",
+  "version": "2.0.0-pr.474.1879+be9e2989",
   "license": "MIT",
   "exports": "./src/mod.ts",
   "imports": {

package/dist/deno.js

@@ -3,7 +3,7 @@
     
 //#region deno.json
 var name = "@fedify/cli";
-var version = "2.0.0-pr.467.1877+dc12636d";
+var version = "2.0.0-pr.474.1879+be9e2989";
 var license = "MIT";
 var exports = "./src/mod.ts";
 var imports = {

package/dist/inbox.js

@@ -30,7 +30,8 @@ const inboxCommand = command("inbox", merge(object("Inbox options", {
 	acceptFollow: optional(multiple(option("-a", "--accept-follow", string({ metavar: "URI" }), { description: message`Accept follow requests from the given actor. The argument can be either an actor URI or a handle, or a wildcard (${"*"}). Can be specified multiple times. If a wildcard is specified, all follow requests will be accepted.` }))),
 	noTunnel: option("-T", "--no-tunnel", { description: message`Do not tunnel the ephemeral ActivityPub server to the public Internet.` }),
 	actorName: withDefault(option("--actor-name", string({ metavar: "NAME" }), { description: message`Customize the actor display name.` }), "Fedify Ephemeral Inbox"),
-	actorSummary: withDefault(option("--actor-summary", string({ metavar: "SUMMARY" }), { description: message`Customize the actor description.` }), "An ephemeral ActivityPub inbox for testing purposes.")
+	actorSummary: withDefault(option("--actor-summary", string({ metavar: "SUMMARY" }), { description: message`Customize the actor description.` }), "An ephemeral ActivityPub inbox for testing purposes."),
+	authorizedFetch: option("-A", "--authorized-fetch", { description: message`Require HTTP Signatures for all incoming requests. Returns 401 for unsigned requests.` })
 }), debugOption), {
 	brief: message`Run an ephemeral ActivityPub inbox server.`,
 	description: message`Spins up an ephemeral server that serves the ActivityPub inbox with an one-time actor, through a short-lived public DNS with HTTPS. You can monitor the incoming activities in real-time.`
@@ -38,7 +39,8 @@ const inboxCommand = command("inbox", merge(object("Inbox options", {
 async function runInbox(command$1) {
 	const fetch = createFetchHandler({
 		actorName: command$1.actorName,
-		actorSummary: command$1.actorSummary
+		actorSummary: command$1.actorSummary,
+		requireHttpSignature: command$1.authorizedFetch
 	});
 	const sendDeleteToPeers = createSendDeleteToPeers({
 		actorName: command$1.actorName,
@@ -300,6 +302,7 @@ function createFetchHandler(actorOptions) {
 				actorName: actorOptions.actorName,
 				actorSummary: actorOptions.actorSummary
 			},
+			requireHttpSignature: actorOptions.requireHttpSignature,
 			onNotAcceptable: app.fetch.bind(app),
 			onNotFound: app.fetch.bind(app),
 			onUnauthorized: app.fetch.bind(app)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fedify/cli",
-  "version": "2.0.0-pr.467.1877+dc12636d",
+  "version": "2.0.0-pr.474.1879+be9e2989",
   "description": "CLI toolchain for Fedify and debugging ActivityPub",
   "keywords": [
     "fedify",
@@ -71,10 +71,10 @@
     "ora": "^8.2.0",
     "shiki": "^1.6.4",
     "srvx": "^0.8.7",
-    "@fedify/fedify": "2.0.0-pr.467.1877+dc12636d",
-    "@fedify/sqlite": "2.0.0-pr.467.1877+dc12636d",
-    "@fedify/vocab-runtime": "2.0.0-pr.467.1877+dc12636d",
-    "@fedify/vocab-tools": "2.0.0-pr.467.1877+dc12636d"
+    "@fedify/fedify": "2.0.0-pr.474.1879+be9e2989",
+    "@fedify/vocab-runtime": "2.0.0-pr.474.1879+be9e2989",
+    "@fedify/vocab-tools": "2.0.0-pr.474.1879+be9e2989",
+    "@fedify/sqlite": "2.0.0-pr.474.1879+be9e2989"
   },
   "devDependencies": {
     "@types/bun": "^1.2.23",

package/src/inbox.tsx

@@ -103,6 +103,14 @@ export const inboxCommand = command(
         }),
         "An ephemeral ActivityPub inbox for testing purposes.",
       ),
+      authorizedFetch: option(
+        "-A",
+        "--authorized-fetch",
+        {
+          description:
+            message`Require HTTP Signatures for all incoming requests. Returns 401 for unsigned requests.`,
+        },
+      ),
     }),
     debugOption,
   ),
@@ -119,6 +127,7 @@ export async function runInbox(
   const fetch = createFetchHandler({
     actorName: command.actorName,
     actorSummary: command.actorSummary,
+    requireHttpSignature: command.authorizedFetch,
   });
   const sendDeleteToPeers = createSendDeleteToPeers({
     actorName: command.actorName,
@@ -499,7 +508,11 @@ app.get("/r/:idx{[0-9]+}", (c) => {
 });
 
 function createFetchHandler(
-  actorOptions: { actorName: string; actorSummary: string },
+  actorOptions: {
+    actorName: string;
+    actorSummary: string;
+    requireHttpSignature?: boolean;
+  },
 ): (request: Request) => Promise<Response> {
   return async function fetch(request: Request): Promise<Response> {
     const timestamp = Temporal.Now.instant();
@@ -521,6 +534,7 @@ function createFetchHandler(
         actorName: actorOptions.actorName,
         actorSummary: actorOptions.actorSummary,
       },
+      requireHttpSignature: actorOptions.requireHttpSignature,
       onNotAcceptable: app.fetch.bind(app),
       onNotFound: app.fetch.bind(app),
       onUnauthorized: app.fetch.bind(app),