@fedify/fedify 1.3.4 → 1.3.5

package/CHANGES.md

@@ -3,6 +3,20 @@
 Fedify changelog
 ================
 
+Version 1.3.5
+-------------
+
+Released on January 21, 2025.
+
+ -  Fixed a bug where `CreateFederationOptions.allowPrivateAddress` option had
+    been ignored by the `Context.lookupObject()` method when it had taken
+    a fediverse handle.
+
+ -  The `lookupWebFinger()` function became to silently return `null` when
+    it fails to fetch the WebFinger document due to accessing a private network
+    address, instead of throwing a `UrlError`.
+
+
 Version 1.3.4
 -------------
 

package/esm/deno.js

@@ -1,6 +1,6 @@
 export default {
     "name": "@fedify/fedify",
-    "version": "1.3.4",
+    "version": "1.3.5",
     "license": "MIT",
     "exports": {
         ".": "./mod.ts",

package/esm/federation/middleware.js

@@ -58,6 +58,7 @@ export class FederationImpl {
     documentLoader;
     contextLoader;
     authenticatedDocumentLoaderFactory;
+    allowPrivateAddress;
     userAgent;
     onOutboxError;
     signatureTimeWindow;
@@ -112,6 +113,7 @@ export class FederationImpl {
             }
         }
         const { allowPrivateAddress, userAgent } = options;
+        this.allowPrivateAddress = allowPrivateAddress ?? false;
         this.documentLoader = options.documentLoader ?? kvCache({
             loader: getDocumentLoader({ allowPrivateAddress, userAgent }),
             kv: options.kv,
@@ -1818,6 +1820,8 @@ export class ContextImpl {
             contextLoader: options.contextLoader ?? this.contextLoader,
             userAgent: options.userAgent ?? this.federation.userAgent,
             tracerProvider: options.tracerProvider ?? this.tracerProvider,
+            // @ts-ignore: `allowPrivateAddress` is not in the type definition.
+            allowPrivateAddress: this.federation.allowPrivateAddress,
         });
     }
     traverseCollection(collection, options = {}) {

package/esm/vocab/lookup.js

@@ -95,6 +95,9 @@ async function lookupObjectInternal(identifier, options = {}) {
         const jrd = await lookupWebFinger(identifier, {
             userAgent: options.userAgent,
             tracerProvider: options.tracerProvider,
+            // @ts-ignore: `allowPrivateAddress` is not in the type definition.
+            allowPrivateAddress: "allowPrivateAddress" in options &&
+                options.allowPrivateAddress,
         });
         if (jrd?.links == null)
             return null;