@fedify/fedify 1.2.17 → 1.2.19

package/CHANGES.md

@@ -3,6 +3,33 @@
 Fedify changelog
 ================
 
+Version 1.2.19
+--------------
+
+Released on March 26, 2025.
+
+ -  Fixed a bug where the `totalItems` property of `OrderedCollection`
+    objects returned by followers collection dispatcher had been an incorrect
+    value if a `base-url` parameter was provided.
+
+ -  Fixed a bug where the `id` property of `OrderedCollection` and
+    `OrderedCollectionPage` objects returned by followers collection dispatcher
+    had been an incorrect value if a `base-url` parameter was provided.
+
+
+Version 1.2.18
+--------------
+
+Released on March 20, 2025.
+
+ -  Fixed a bug of WebFinger handler where it had failed to match
+    `acct:` URIs with a host having a port number.
+    [[#218], [#219] by Revath S Kumar]
+
+ -  Fixed a server error thrown when an invalid URL was passed to the `base-url`
+    parameter of the followers collection.  [[#217]]
+
+
 Version 1.2.17
 --------------
 
@@ -331,6 +358,33 @@ Released on October 31, 2024.
 [#118]: https://github.com/dahlia/fedify/issues/118
 
 
+Version 1.1.19
+--------------
+
+Released on March 26, 2025.
+
+ -  Fixed a bug where the `totalItems` property of `OrderedCollection`
+    objects returned by followers collection dispatcher had been an incorrect
+    value if a `base-url` parameter was provided.
+
+ -  Fixed a bug where the `id` property of `OrderedCollection` and
+    `OrderedCollectionPage` objects returned by followers collection dispatcher
+    had been an incorrect value if a `base-url` parameter was provided.
+
+
+Version 1.1.18
+--------------
+
+Released on March 20, 2025.
+
+ -  Fixed a bug of WebFinger handler where it had failed to match
+    `acct:` URIs with a host having a port number.
+    [[#218], [#219] by Revath S Kumar]
+
+ -  Fixed a server error thrown when an invalid URL was passed to the `base-url`
+    parameter of the followers collection.  [[#217]]
+
+
 Version 1.1.17
 --------------
 
@@ -700,6 +754,37 @@ Released on October 20, 2024.
 [#150]: https://github.com/dahlia/fedify/issues/150
 
 
+Version 1.0.22
+--------------
+
+Released on March 26, 2025.
+
+ -  Fixed a bug where the `totalItems` property of `OrderedCollection`
+    objects returned by followers collection dispatcher had been an incorrect
+    value if a `base-url` parameter was provided.
+
+ -  Fixed a bug where the `id` property of `OrderedCollection` and
+    `OrderedCollectionPage` objects returned by followers collection dispatcher
+    had been an incorrect value if a `base-url` parameter was provided.
+
+
+Version 1.0.21
+--------------
+
+Released on March 20, 2025.
+
+ -  Fixed a bug of WebFinger handler where it had failed to match
+    `acct:` URIs with a host having a port number.
+    [[#218], [#219] by Revath S Kumar]
+
+ -  Fixed a server error thrown when an invalid URL was passed to the `base-url`
+    parameter of the followers collection.  [[#217]]
+
+[#217]: https://github.com/fedify-dev/fedify/issues/217
+[#218]: https://github.com/fedify-dev/fedify/issues/218
+[#219]: https://github.com/fedify-dev/fedify/pull/219
+
+
 Version 1.0.20
 --------------
 
@@ -2867,3 +2952,4 @@ Version 0.1.0
 Initial release.  Released on March 8, 2024.
 
 <!-- cSpell: ignore Dogeon Fabien Wressell Emelia Fróði Karlsson -->
+<!-- cSpell: ignore Revath Kumar -->

package/esm/deps/jsr.io/@std/encoding/1.0.8/_common16.js

@@ -0,0 +1,45 @@
+// Copyright 2018-2025 the Deno authors. MIT license.
+/**
+ * Calculate the output size needed to encode a given input size for
+ * {@linkcode encodeRawHex}.
+ *
+ * @param originalSize The size of the input buffer.
+ * @returns The size of the output buffer.
+ *
+ * @example Basic Usage
+ * ```ts
+ * import { assertEquals } from "@std/assert";
+ * import { calcMax } from "@std/encoding/unstable-hex";
+ *
+ * assertEquals(calcMax(1), 2);
+ * ```
+ */
+export function calcMax(originalSize) {
+    return originalSize * 2;
+}
+export function encode(buffer, i, o, alphabet) {
+    for (; i < buffer.length; ++i) {
+        const x = buffer[i];
+        buffer[o++] = alphabet[x >> 4];
+        buffer[o++] = alphabet[x & 0xF];
+    }
+    return o;
+}
+export function decode(buffer, i, o, alphabet) {
+    if ((buffer.length - o) % 2 === 1) {
+        throw new RangeError(`Cannot decode input as hex: Length (${buffer.length - o}) must be divisible by 2`);
+    }
+    i += 1;
+    for (; i < buffer.length; i += 2) {
+        buffer[o++] = (getByte(buffer[i - 1], alphabet) << 4) |
+            getByte(buffer[i], alphabet);
+    }
+    return o;
+}
+function getByte(char, alphabet) {
+    const byte = alphabet[char] ?? 16;
+    if (byte === 16) { // alphabet.Hex.length
+        throw new TypeError(`Cannot decode input as hex: Invalid character (${String.fromCharCode(char)})`);
+    }
+    return byte;
+}

package/esm/deps/jsr.io/@std/encoding/1.0.8/_common64.js

@@ -0,0 +1,98 @@
+// Copyright 2018-2025 the Deno authors. MIT license.
+/**
+ * Calculate the output size needed to encode a given input size for
+ * {@linkcode encodeRawBase64}.
+ *
+ * @param originalSize The size of the input buffer.
+ * @returns The size of the output buffer.
+ *
+ * @example Basic Usage
+ * ```ts
+ * import { assertEquals } from "@std/assert";
+ * import { calcMax } from "@std/encoding/unstable-base64";
+ *
+ * assertEquals(calcMax(1), 4);
+ * ```
+ */
+export function calcMax(originalSize) {
+    return ((originalSize + 2) / 3 | 0) * 4;
+}
+export function encode(buffer, i, o, alphabet, padding) {
+    i += 2;
+    for (; i < buffer.length; i += 3) {
+        const x = (buffer[i - 2] << 16) | (buffer[i - 1] << 8) | buffer[i];
+        buffer[o++] = alphabet[x >> 18];
+        buffer[o++] = alphabet[x >> 12 & 0x3F];
+        buffer[o++] = alphabet[x >> 6 & 0x3F];
+        buffer[o++] = alphabet[x & 0x3F];
+    }
+    switch (i) {
+        case buffer.length + 1: {
+            const x = buffer[i - 2] << 16;
+            buffer[o++] = alphabet[x >> 18];
+            buffer[o++] = alphabet[x >> 12 & 0x3F];
+            buffer[o++] = padding;
+            buffer[o++] = padding;
+            break;
+        }
+        case buffer.length: {
+            const x = (buffer[i - 2] << 16) | (buffer[i - 1] << 8);
+            buffer[o++] = alphabet[x >> 18];
+            buffer[o++] = alphabet[x >> 12 & 0x3F];
+            buffer[o++] = alphabet[x >> 6 & 0x3F];
+            buffer[o++] = padding;
+            break;
+        }
+    }
+    return o;
+}
+export function decode(buffer, i, o, alphabet, padding) {
+    for (let x = buffer.length - 2; x < buffer.length; ++x) {
+        if (buffer[x] === padding) {
+            for (let y = x + 1; y < buffer.length; ++y) {
+                if (buffer[y] !== padding) {
+                    throw new TypeError(`Cannot decode input as base64: Invalid character (${String.fromCharCode(buffer[y])})`);
+                }
+            }
+            buffer = buffer.subarray(0, x);
+            break;
+        }
+    }
+    if ((buffer.length - o) % 4 === 1) {
+        throw new RangeError(`Cannot decode input as base64: Length (${buffer.length - o}), excluding padding, must not have a remainder of 1 when divided by 4`);
+    }
+    i += 3;
+    for (; i < buffer.length; i += 4) {
+        const x = (getByte(buffer[i - 3], alphabet) << 18) |
+            (getByte(buffer[i - 2], alphabet) << 12) |
+            (getByte(buffer[i - 1], alphabet) << 6) |
+            getByte(buffer[i], alphabet);
+        buffer[o++] = x >> 16;
+        buffer[o++] = x >> 8 & 0xFF;
+        buffer[o++] = x & 0xFF;
+    }
+    switch (i) {
+        case buffer.length + 1: {
+            const x = (getByte(buffer[i - 3], alphabet) << 18) |
+                (getByte(buffer[i - 2], alphabet) << 12);
+            buffer[o++] = x >> 16;
+            break;
+        }
+        case buffer.length: {
+            const x = (getByte(buffer[i - 3], alphabet) << 18) |
+                (getByte(buffer[i - 2], alphabet) << 12) |
+                (getByte(buffer[i - 1], alphabet) << 6);
+            buffer[o++] = x >> 16;
+            buffer[o++] = x >> 8 & 0xFF;
+            break;
+        }
+    }
+    return o;
+}
+function getByte(char, alphabet) {
+    const byte = alphabet[char] ?? 64;
+    if (byte === 64) { // alphabet.Base64.length
+        throw new TypeError(`Cannot decode input as base64: Invalid character (${String.fromCharCode(char)})`);
+    }
+    return byte;
+}

package/esm/deps/jsr.io/@std/encoding/1.0.8/_common_detach.js

@@ -0,0 +1,13 @@
+// Copyright 2018-2025 the Deno authors. MIT license.
+export function detach(buffer, maxSize) {
+    const originalSize = buffer.length;
+    if (buffer.byteOffset) {
+        const b = new Uint8Array(buffer.buffer);
+        b.set(buffer);
+        buffer = b.subarray(0, originalSize);
+    }
+    // deno-lint-ignore no-explicit-any
+    buffer = new Uint8Array(buffer.buffer.transfer(maxSize));
+    buffer.set(buffer.subarray(0, originalSize), maxSize - originalSize);
+    return [buffer, maxSize - originalSize];
+}

package/esm/deps/jsr.io/@std/encoding/1.0.8/base64.js

@@ -0,0 +1,82 @@
+// Copyright 2018-2025 the Deno authors. MIT license.
+// This module is browser compatible.
+/**
+ * Utilities for
+ * {@link https://www.rfc-editor.org/rfc/rfc4648.html#section-4 | base64}
+ * encoding and decoding.
+ *
+ * ```ts
+ * import {
+ *   encodeBase64,
+ *   decodeBase64,
+ * } from "@std/encoding/base64";
+ * import { assertEquals } from "@std/assert";
+ *
+ * const foobar = new TextEncoder().encode("foobar");
+ *
+ * assertEquals(encodeBase64(foobar), "Zm9vYmFy");
+ * assertEquals(decodeBase64("Zm9vYmFy"), foobar);
+ * ```
+ *
+ * @module
+ */
+import { calcMax, decode, encode } from "./_common64.js";
+import { detach } from "./_common_detach.js";
+const padding = "=".charCodeAt(0);
+const alphabet = new TextEncoder()
+    .encode("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/");
+const rAlphabet = new Uint8Array(128).fill(64); // alphabet.length
+alphabet.forEach((byte, i) => rAlphabet[byte] = i);
+/**
+ * Converts data into a base64-encoded string.
+ *
+ * @see {@link https://www.rfc-editor.org/rfc/rfc4648.html#section-4}
+ *
+ * @param data The data to encode.
+ * @returns The base64-encoded string.
+ *
+ * @example Usage
+ * ```ts
+ * import { encodeBase64 } from "@std/encoding/base64";
+ * import { assertEquals } from "@std/assert";
+ *
+ * assertEquals(encodeBase64("foobar"), "Zm9vYmFy");
+ * ```
+ */
+export function encodeBase64(data) {
+    if (typeof data === "string") {
+        data = new TextEncoder().encode(data);
+    }
+    else if (data instanceof ArrayBuffer)
+        data = new Uint8Array(data).slice();
+    else
+        data = data.slice();
+    const [output, i] = detach(data, calcMax(data.length));
+    encode(output, i, 0, alphabet, padding);
+    return new TextDecoder().decode(output);
+}
+/**
+ * Decodes a base64-encoded string.
+ *
+ * @see {@link https://www.rfc-editor.org/rfc/rfc4648.html#section-4}
+ *
+ * @param b64 The base64-encoded string to decode.
+ * @returns The decoded data.
+ *
+ * @example Usage
+ * ```ts
+ * import { decodeBase64 } from "@std/encoding/base64";
+ * import { assertEquals } from "@std/assert";
+ *
+ * assertEquals(
+ *   decodeBase64("Zm9vYmFy"),
+ *   new TextEncoder().encode("foobar")
+ * );
+ * ```
+ */
+export function decodeBase64(b64) {
+    const output = new TextEncoder().encode(b64);
+    // deno-lint-ignore no-explicit-any
+    return new Uint8Array(output.buffer
+        .transfer(decode(output, 0, 0, rAlphabet, padding)));
+}

package/esm/deps/jsr.io/@std/encoding/1.0.8/base64url.js

@@ -0,0 +1,72 @@
+// Copyright 2018-2025 the Deno authors. MIT license.
+// This module is browser compatible.
+/**
+ * Utilities for
+ * {@link https://www.rfc-editor.org/rfc/rfc4648.html#section-5 | base64url}
+ * encoding and decoding.
+ *
+ * @module
+ */
+import { calcMax, decode, encode } from "./_common64.js";
+import { detach } from "./_common_detach.js";
+const padding = "=".charCodeAt(0);
+const alphabet = new TextEncoder()
+    .encode("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_");
+const rAlphabet = new Uint8Array(128).fill(64); // alphabet.length
+alphabet.forEach((byte, i) => rAlphabet[byte] = i);
+/**
+ * Convert data into a base64url-encoded string.
+ *
+ * @see {@link https://www.rfc-editor.org/rfc/rfc4648.html#section-5}
+ *
+ * @param data The data to encode.
+ * @returns The base64url-encoded string.
+ *
+ * @example Usage
+ * ```ts
+ * import { encodeBase64Url } from "@std/encoding/base64url";
+ * import { assertEquals } from "@std/assert";
+ *
+ * assertEquals(encodeBase64Url("foobar"), "Zm9vYmFy");
+ * ```
+ */
+export function encodeBase64Url(data) {
+    if (typeof data === "string") {
+        data = new TextEncoder().encode(data);
+    }
+    else if (data instanceof ArrayBuffer)
+        data = new Uint8Array(data).slice();
+    else
+        data = data.slice();
+    const [output, i] = detach(data, calcMax(data.length));
+    let o = encode(output, i, 0, alphabet, padding);
+    o = output.indexOf(padding, o - 2);
+    return new TextDecoder().decode(
+    // deno-lint-ignore no-explicit-any
+    o > 0 ? new Uint8Array(output.buffer.transfer(o)) : output);
+}
+/**
+ * Decodes a given base64url-encoded string.
+ *
+ * @see {@link https://www.rfc-editor.org/rfc/rfc4648.html#section-5}
+ *
+ * @param b64url The base64url-encoded string to decode.
+ * @returns The decoded data.
+ *
+ * @example Usage
+ * ```ts
+ * import { decodeBase64Url } from "@std/encoding/base64url";
+ * import { assertEquals } from "@std/assert";
+ *
+ * assertEquals(
+ *   decodeBase64Url("Zm9vYmFy"),
+ *   new TextEncoder().encode("foobar")
+ * );
+ * ```
+ */
+export function decodeBase64Url(b64url) {
+    const output = new TextEncoder().encode(b64url);
+    // deno-lint-ignore no-explicit-any
+    return new Uint8Array(output.buffer
+        .transfer(decode(output, 0, 0, rAlphabet, padding)));
+}

package/esm/deps/jsr.io/@std/encoding/1.0.8/hex.js

@@ -0,0 +1,87 @@
+// Copyright 2009 The Go Authors. All rights reserved.
+// https://github.com/golang/go/blob/master/LICENSE
+// Copyright 2018-2025 the Deno authors. MIT license.
+// This module is browser compatible.
+/**
+ * Port of the Go
+ * {@link https://github.com/golang/go/blob/go1.12.5/src/encoding/hex/hex.go | encoding/hex}
+ * library.
+ *
+ * ```ts
+ * import {
+ *   decodeHex,
+ *   encodeHex,
+ * } from "@std/encoding/hex";
+ * import { assertEquals } from "@std/assert";
+ *
+ * assertEquals(encodeHex("abc"), "616263");
+ *
+ * assertEquals(
+ *   decodeHex("616263"),
+ *   new TextEncoder().encode("abc"),
+ * );
+ * ```
+ *
+ * @module
+ */
+import { calcMax, decode, encode } from "./_common16.js";
+import { detach } from "./_common_detach.js";
+const alphabet = new TextEncoder()
+    .encode("0123456789abcdef");
+const rAlphabet = new Uint8Array(128).fill(16); // alphabet.length
+alphabet.forEach((byte, i) => rAlphabet[byte] = i);
+new TextEncoder()
+    .encode("ABCDEF")
+    .forEach((byte, i) => rAlphabet[byte] = i + 10);
+/**
+ * Converts data into a hex-encoded string.
+ *
+ * @param src The data to encode.
+ *
+ * @returns The hex-encoded string.
+ *
+ * @example Usage
+ * ```ts
+ * import { encodeHex } from "@std/encoding/hex";
+ * import { assertEquals } from "@std/assert";
+ *
+ * assertEquals(encodeHex("abc"), "616263");
+ * ```
+ */
+export function encodeHex(src) {
+    if (typeof src === "string") {
+        src = new TextEncoder().encode(src);
+    }
+    else if (src instanceof ArrayBuffer)
+        src = new Uint8Array(src).slice();
+    else
+        src = src.slice();
+    const [output, i] = detach(src, calcMax(src.length));
+    encode(output, i, 0, alphabet);
+    return new TextDecoder().decode(output);
+}
+/**
+ * Decodes the given hex-encoded string. If the input is malformed, an error is
+ * thrown.
+ *
+ * @param src The hex-encoded string to decode.
+ *
+ * @returns The decoded data.
+ *
+ * @example Usage
+ * ```ts
+ * import { decodeHex } from "@std/encoding/hex";
+ * import { assertEquals } from "@std/assert";
+ *
+ * assertEquals(
+ *   decodeHex("616263"),
+ *   new TextEncoder().encode("abc"),
+ * );
+ * ```
+ */
+export function decodeHex(src) {
+    const output = new TextEncoder().encode(src);
+    // deno-lint-ignore no-explicit-any
+    return new Uint8Array(output.buffer
+        .transfer(decode(output, 0, 0, rAlphabet)));
+}

package/esm/federation/collection.js

@@ -1,9 +1,9 @@
 import * as dntShim from "../_dnt.shims.js";
-import { encodeHex } from "../deps/jsr.io/@std/encoding/1.0.7/hex.js";
+import { encodeHex } from "../deps/jsr.io/@std/encoding/1.0.8/hex.js";
 /**
  * Calculates the [partial follower collection digest][1].
  *
- * [1]: https://codeberg.org/fediverse/fep/src/branch/main/fep/8fcf/fep-8fcf.md#partial-follower-collection-digest
+ * [1]: https://w3id.org/fep/8fcf#partial-follower-collection-digest
  * @param uris The URIs to calculate the digest.  Duplicate URIs are ignored.
  * @returns The digest.
  */
@@ -27,7 +27,7 @@ export async function digest(uris) {
 /**
  * Builds [`Collection-Synchronization`][1] header content.
  *
- * [1]: https://codeberg.org/fediverse/fep/src/branch/main/fep/8fcf/fep-8fcf.md#the-collection-synchronization-http-header
+ * [1]: https://w3id.org/fep/8fcf#the-collection-synchronization-http-header
  *
  * @param collectionId The sender's followers collection URI.
  * @param actorIds The actor URIs to digest.

package/esm/federation/handler.js

@@ -77,7 +77,9 @@ export async function handleCollection(request, { name, identifier, uriGetter, f
     const baseUri = uriGetter(identifier);
     if (cursor == null) {
         const firstCursor = await collectionCallbacks.firstCursor?.(context, identifier);
-        const totalItems = await collectionCallbacks.counter?.(context, identifier);
+        const totalItems = filter == null
+            ? await collectionCallbacks.counter?.(context, identifier)
+            : undefined;
         if (firstCursor == null) {
             const page = await collectionCallbacks.dispatcher(context, identifier, null, filter);
             if (page == null)
@@ -166,7 +168,8 @@ function filterCollectionItems(items, collectionName, filterPredicate) {
             if (!logged) {
                 getLogger(["fedify", "federation", "collection"]).warn(`The ${collectionName} collection apparently does not implement ` +
                     "filtering.  This may result in a large response payload.  " +
-                    "Please consider implementing filtering for the collection.");
+                    "Please consider implementing filtering for the collection.  " +
+                    "See also: https://fedify.dev/manual/collections#filtering-by-server");
                 logged = true;
             }
             continue;

package/esm/federation/middleware.js

@@ -1126,13 +1126,24 @@ export class FederationImpl {
             case "followers": {
                 let baseUrl = url.searchParams.get("base-url");
                 if (baseUrl != null) {
-                    const u = new URL(baseUrl);
-                    baseUrl = `${u.origin}/`;
+                    try {
+                        baseUrl = `${new URL(baseUrl).origin}/`;
+                    }
+                    catch {
+                        // If base-url is invalid, set to null to behave as if it wasn't provided
+                        baseUrl = null;
+                    }
                 }
                 return await handleCollection(request, {
                     name: "followers",
                     identifier: route.values.identifier ?? route.values.handle,
-                    uriGetter: context.getFollowersUri.bind(context),
+                    uriGetter: baseUrl == null
+                        ? context.getFollowersUri.bind(context)
+                        : (identifier) => {
+                            const uri = context.getFollowersUri(identifier);
+                            uri.searchParams.set("base-url", baseUrl);
+                            return uri;
+                        },
                     context,
                     filter: baseUrl != null ? new URL(baseUrl) : undefined,
                     filterPredicate: baseUrl != null
@@ -1646,6 +1657,12 @@ export class ContextImpl {
             throw new Error("No first cursor dispatcher registered for followers collection.");
         }
         let cursor = await this.federation.followersCallbacks.firstCursor(this, identifier);
+        if (cursor != null) {
+            getLogger(["fedify", "federation", "outbox"]).warn("Since the followers collection dispatcher returned null for no " +
+                "cursor (i.e., one-shot dispatcher), the pagination is used to fetch " +
+                '"followers".  However, it is recommended to implement the one-shot ' +
+                "dispatcher for better performance.", { identifier });
+        }
         while (cursor != null) {
             const result = await this.federation.followersCallbacks.dispatcher(this, identifier, cursor);
             if (result == null)

package/esm/runtime/key.js

@@ -1,9 +1,9 @@
 import * as dntShim from "../_dnt.shims.js";
 import { createPublicKey } from "node:crypto";
 import { concat } from "../deps/jsr.io/@std/bytes/1.0.5/concat.js";
-import { decodeBase64, encodeBase64 } from "../deps/jsr.io/@std/encoding/1.0.7/base64.js";
-import { decodeBase64Url } from "../deps/jsr.io/@std/encoding/1.0.7/base64url.js";
-import { decodeHex } from "../deps/jsr.io/@std/encoding/1.0.7/hex.js";
+import { decodeBase64, encodeBase64 } from "../deps/jsr.io/@std/encoding/1.0.8/base64.js";
+import { decodeBase64Url } from "../deps/jsr.io/@std/encoding/1.0.8/base64url.js";
+import { decodeHex } from "../deps/jsr.io/@std/encoding/1.0.8/hex.js";
 import { Integer, Sequence } from "asn1js";
 import { decode, encode } from "multibase";
 import { addPrefix, getCodeFromData, rmPrefix } from "multicodec";

package/esm/sig/http.js

@@ -1,7 +1,7 @@
 import * as dntShim from "../_dnt.shims.js";
 import { getLogger } from "@logtape/logtape";
 import { equals } from "../deps/jsr.io/@std/bytes/1.0.5/mod.js";
-import { decodeBase64, encodeBase64 } from "../deps/jsr.io/@std/encoding/1.0.7/base64.js";
+import { decodeBase64, encodeBase64 } from "../deps/jsr.io/@std/encoding/1.0.8/base64.js";
 import { CryptographicKey } from "../vocab/vocab.js";
 import { fetchKey, validateCryptoKey } from "./key.js";
 /**

package/esm/sig/ld.js

@@ -1,7 +1,7 @@
 import * as dntShim from "../_dnt.shims.js";
 import { getLogger } from "@logtape/logtape";
-import { decodeBase64, encodeBase64 } from "../deps/jsr.io/@std/encoding/1.0.7/base64.js";
-import { encodeHex } from "../deps/jsr.io/@std/encoding/1.0.7/hex.js";
+import { decodeBase64, encodeBase64 } from "../deps/jsr.io/@std/encoding/1.0.8/base64.js";
+import { encodeHex } from "../deps/jsr.io/@std/encoding/1.0.8/hex.js";
 // @ts-ignore TS7016
 import jsonld from "jsonld";
 import { fetchDocumentLoader, } from "../runtime/docloader.js";

package/esm/vocab/lookup.js

@@ -1,6 +1,6 @@
 import * as dntShim from "../_dnt.shims.js";
 import { getLogger } from "@logtape/logtape";
-import { delay } from "../deps/jsr.io/@std/async/1.0.11/delay.js";
+import { delay } from "../deps/jsr.io/@std/async/1.0.12/delay.js";
 import { fetchDocumentLoader, } from "../runtime/docloader.js";
 import { lookupWebFinger } from "../webfinger/lookup.js";
 import { Object } from "./vocab.js";

package/esm/webfinger/handler.js

@@ -34,7 +34,14 @@ export async function handleWebFinger(request, { context, actorDispatcher, actor
     const uriParsed = context.parseUri(resourceUrl);
     if (uriParsed?.type != "actor") {
         const match = /^acct:([^@]+)@([^@]+)$/.exec(resource);
-        if (match == null || domainToASCII(match[2].toLowerCase()) != context.url.host) {
+        if (match == null)
+            return await onNotFound(request);
+        const portMatch = /:\d+$/.exec(match[2]);
+        const normalizedHost = portMatch == null
+            ? domainToASCII(match[2].toLowerCase())
+            : domainToASCII(match[2].substring(0, portMatch.index).toLowerCase()) +
+                portMatch[0];
+        if (normalizedHost != context.url.host) {
             return await onNotFound(request);
         }
         const username = match[1];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fedify/fedify",
-  "version": "1.2.17",
+  "version": "1.2.19",
   "description": "An ActivityPub server framework",
   "keywords": [
     "ActivityPub",

package/types/deps/jsr.io/@std/async/{1.0.11 → 1.0.12}/delay.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"delay.d.ts","sourceRoot":"","sources":["../../../../../../src/deps/jsr.io/@std/async/1.0.11/delay.ts"],"names":[],"mappings":";AAMA,MAAM,WAAW,YAAY;IAC3B,sCAAsC;IACtC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;;;OAGG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAgB,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CA2B3E"}
+{"version":3,"file":"delay.d.ts","sourceRoot":"","sources":["../../../../../../src/deps/jsr.io/@std/async/1.0.12/delay.ts"],"names":[],"mappings":";AAMA,MAAM,WAAW,YAAY;IAC3B,sCAAsC;IACtC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;;;OAGG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAgB,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CA2B3E"}