@fedify/fedify 2.1.1 → 2.1.3

package/dist/federation/{handler.test.js → handler.test.mjs}

@@ -1,47 +1,23 @@
-
-      import { Temporal } from "@js-temporal/polyfill";
-      import { URLPattern } from "urlpattern-polyfill";
-      globalThis.addEventListener = () => {};
-    
-import { assertEquals } from "../assert_equals-DSbWqCm3.js";
-import { assert } from "../assert-MZs1qjMx.js";
-import "../assert_instance_of-DHz7EHNU.js";
-import { MemoryKvStore } from "../kv-QzKcOQgP.js";
-import "../deno-DH972JvX.js";
-import { createFederation, handleActor, handleCollection, handleCustomCollection, handleInbox, handleObject, respondWithObject, respondWithObjectIfAcceptable } from "../middleware-BHJ0xm0L.js";
-import "../client-CoCIaTNO.js";
-import "../router-D9eI0s4b.js";
-import "../types-CPz01LGH.js";
-import { parseAcceptSignature } from "../accept-D7sAxyNa.js";
-import "../key-CypuWa94.js";
-import { signRequest } from "../http-DFzT4YFG.js";
-import "../ld-CXLtTc0G.js";
-import "../owner-CwMai3jn.js";
-import "../proof-ZuJBOUoi.js";
-import "../docloader-Ck0SCLXX.js";
-import "../kv-cache-Bw2F2ABq.js";
-import { InboxListenerSet } from "../inbox-BMLz_-pL.js";
-import "../builder-DbKYZdSy.js";
-import "../collection-CSzG2j1P.js";
-import "../keycache-CpGWAUbj.js";
-import "../negotiation-BlAuS_nr.js";
-import "../retry-mqLf4b-R.js";
-import "../send-BW73dy6Q.js";
-import "../std__assert-X-_kMxKM.js";
-import "../assert_rejects-0h7I2Esa.js";
-import "../assert_throws-rjdMBf31.js";
-import "../assert_not_equals-f3m3epl3.js";
-import { createInboxContext, createRequestContext } from "../context-Aqenou7c.js";
-import { rsaPrivateKey3, rsaPublicKey2, rsaPublicKey3 } from "../keys-BFve7QQv.js";
+import { Temporal } from "@js-temporal/polyfill";
+import "urlpattern-polyfill";
+globalThis.addEventListener = () => {};
+import { n as createRequestContext, t as createInboxContext } from "../context-Juj6bdHC.mjs";
+import { t as assertEquals } from "../assert_equals-Ew3jOFa3.mjs";
+import "../std__assert-Duiq_YC9.mjs";
+import { t as assert } from "../assert-ddO5KLpe.mjs";
+import { r as parseAcceptSignature } from "../accept-Dd__NiUL.mjs";
+import { s as signRequest } from "../http-B53alCGi.mjs";
+import { a as rsaPrivateKey3, c as rsaPublicKey3, s as rsaPublicKey2 } from "../keys-BAK-tUlf.mjs";
+import { t as MemoryKvStore } from "../kv-tL2TOE9X.mjs";
+import { a as createFederation, c as handleCollection, d as handleObject, f as respondWithObject, l as handleCustomCollection, p as respondWithObjectIfAcceptable, s as handleActor, u as handleInbox } from "../middleware-dFn6ozt5.mjs";
+import { t as InboxListenerSet } from "../inbox-CHsLu5ai.mjs";
 import { createTestTracerProvider, mockDocumentLoader, test } from "@fedify/fixture";
 import { Create, Note, Person } from "@fedify/vocab";
 import { FetchError } from "@fedify/vocab-runtime";
-
 //#region src/federation/handler.test.ts
 test("handleActor()", async () => {
-	const federation = createFederation({ kv: new MemoryKvStore() });
 	let context = createRequestContext({
-		federation,
+		federation: createFederation({ kv: new MemoryKvStore() }),
 		data: void 0,
 		url: new URL("https://example.com/"),
 		getActorUri(identifier) {
@@ -231,9 +207,8 @@ test("handleActor()", async () => {
 	assertEquals(onUnauthorizedCalled, null);
 });
 test("handleObject()", async () => {
-	const federation = createFederation({ kv: new MemoryKvStore() });
 	let context = createRequestContext({
-		federation,
+		federation: createFederation({ kv: new MemoryKvStore() }),
 		data: void 0,
 		url: new URL("https://example.com/"),
 		getObjectUri(_cls, values) {
@@ -444,9 +419,8 @@ test("handleObject()", async () => {
 	assertEquals(onUnauthorizedCalled, null);
 });
 test("handleCollection()", async () => {
-	const federation = createFederation({ kv: new MemoryKvStore() });
 	let context = createRequestContext({
-		federation,
+		federation: createFederation({ kv: new MemoryKvStore() }),
 		data: void 0,
 		url: new URL("https://example.com/"),
 		getActorUri(identifier) {
@@ -1045,7 +1019,7 @@ test("handleInbox()", async () => {
 	});
 	assertEquals(onNotFoundCalled, null);
 	assertEquals(response.status, 202);
-	const invalidRequest = new Request("https://example.com/", {
+	const signedInvalidRequest = await signRequest(new Request("https://example.com/", {
 		method: "POST",
 		body: JSON.stringify({
 			"@context": [
@@ -1060,8 +1034,7 @@ test("handleInbox()", async () => {
 			},
 			actor: "https://example.com/users/alice"
 		})
-	});
-	const signedInvalidRequest = await signRequest(invalidRequest, rsaPrivateKey3, rsaPublicKey3.id);
+	}), rsaPrivateKey3, rsaPublicKey3.id);
 	const signedInvalidContext = createRequestContext({
 		federation,
 		request: signedInvalidRequest,
@@ -1217,9 +1190,8 @@ test("respondWithObjectIfAcceptable", async () => {
 	assertEquals(response, null);
 });
 test("handleCustomCollection()", async () => {
-	const federation = createFederation({ kv: new MemoryKvStore() });
 	let context = createRequestContext({
-		federation,
+		federation: createFederation({ kv: new MemoryKvStore() }),
 		data: void 0,
 		url: new URL("https://example.com/")
 	});
@@ -1516,12 +1488,11 @@ test("handleInbox() records OpenTelemetry span events", async () => {
 			content: "Hello, world!"
 		})
 	});
-	const request = new Request("https://example.com/users/someone/inbox", {
+	const signed = await signRequest(new Request("https://example.com/users/someone/inbox", {
 		method: "POST",
 		headers: { "Content-Type": "application/activity+json" },
 		body: JSON.stringify(await activity.toJsonLd())
-	});
-	const signed = await signRequest(request, rsaPrivateKey3, new URL("https://example.com/users/someone#main-key"));
+	}), rsaPrivateKey3, new URL("https://example.com/users/someone#main-key"));
 	const context = createRequestContext({
 		federation,
 		request: signed,
@@ -1544,10 +1515,10 @@ test("handleInbox() records OpenTelemetry span events", async () => {
 	};
 	const listeners = new InboxListenerSet();
 	let receivedActivity = null;
-	listeners.add(Create, (_ctx, activity$1) => {
-		receivedActivity = activity$1;
+	listeners.add(Create, (_ctx, activity) => {
+		receivedActivity = activity;
 	});
-	const response = await handleInbox(signed, {
+	assertEquals((await handleInbox(signed, {
 		recipient: "someone",
 		context,
 		inboxContextFactory(_activity) {
@@ -1569,8 +1540,7 @@ test("handleInbox() records OpenTelemetry span events", async () => {
 		signatureTimeWindow: false,
 		skipSignatureVerification: true,
 		tracerProvider
-	});
-	assertEquals(response.status, 202);
+	})).status, 202);
 	assert(receivedActivity != null);
 	const spans = exporter.getSpans("activitypub.inbox");
 	assertEquals(spans.length, 1);
@@ -1604,12 +1574,11 @@ test("handleInbox() records unverified HTTP signature details", async () => {
 			content: "Hello, world!"
 		})
 	});
-	const request = new Request("https://example.com/users/someone/inbox", {
+	const signed = await signRequest(new Request("https://example.com/users/someone/inbox", {
 		method: "POST",
 		headers: { "Content-Type": "application/activity+json" },
 		body: JSON.stringify(await activity.toJsonLd())
-	});
-	const signed = await signRequest(request, rsaPrivateKey3, keyId);
+	}), rsaPrivateKey3, keyId);
 	const documentLoader = (url) => {
 		if (url === keyId.href) throw new FetchError(keyId, `HTTP 410: ${keyId.href}`, new Response(null, { status: 410 }));
 		return mockDocumentLoader(url);
@@ -1634,7 +1603,7 @@ test("handleInbox() records unverified HTTP signature details", async () => {
 			publicKey: rsaPublicKey2
 		});
 	};
-	const response = await handleInbox(signed, {
+	assertEquals((await handleInbox(signed, {
 		recipient: "someone",
 		context,
 		inboxContextFactory(_activity) {
@@ -1659,8 +1628,7 @@ test("handleInbox() records unverified HTTP signature details", async () => {
 		signatureTimeWindow: false,
 		skipSignatureVerification: false,
 		tracerProvider
-	});
-	assertEquals(response.status, 202);
+	})).status, 202);
 	const verifySpans = exporter.getSpans("http_signatures.verify");
 	assertEquals(verifySpans.length, 1);
 	assertEquals(verifySpans[0].attributes["http_signatures.failure_reason"], "keyFetchError");
@@ -1686,9 +1654,8 @@ test("handleInbox() challenge policy enabled + unsigned request", async () => {
 		method: "POST",
 		body: JSON.stringify(await activity.toJsonLd())
 	});
-	const federation = createFederation({ kv: new MemoryKvStore() });
 	const context = createRequestContext({
-		federation,
+		federation: createFederation({ kv: new MemoryKvStore() }),
 		request: unsignedRequest,
 		url: new URL(unsignedRequest.url),
 		data: void 0
@@ -1697,7 +1664,6 @@ test("handleInbox() challenge policy enabled + unsigned request", async () => {
 		if (identifier !== "someone") return null;
 		return new Person({ name: "Someone" });
 	};
-	const kv = new MemoryKvStore();
 	const response = await handleInbox(unsignedRequest, {
 		recipient: "someone",
 		context,
@@ -1708,7 +1674,7 @@ test("handleInbox() challenge policy enabled + unsigned request", async () => {
 				recipient: "someone"
 			});
 		},
-		kv,
+		kv: new MemoryKvStore(),
 		kvPrefixes: {
 			activityIdempotence: ["_fedify", "activityIdempotence"],
 			publicKey: ["_fedify", "publicKey"],
@@ -1740,11 +1706,10 @@ test("handleInbox() challenge policy enabled + invalid signature", async () => {
 			content: "Hello!"
 		})
 	});
-	const originalRequest = new Request("https://example.com/", {
+	const signedRequest = await signRequest(new Request("https://example.com/", {
 		method: "POST",
 		body: JSON.stringify(await activity.toJsonLd())
-	});
-	const signedRequest = await signRequest(originalRequest, rsaPrivateKey3, rsaPublicKey3.id);
+	}), rsaPrivateKey3, rsaPublicKey3.id);
 	const jsonLd = await activity.toJsonLd();
 	const tamperedBody = JSON.stringify({
 		...jsonLd,
@@ -1755,9 +1720,8 @@ test("handleInbox() challenge policy enabled + invalid signature", async () => {
 		headers: signedRequest.headers,
 		body: tamperedBody
 	});
-	const federation = createFederation({ kv: new MemoryKvStore() });
 	const context = createRequestContext({
-		federation,
+		federation: createFederation({ kv: new MemoryKvStore() }),
 		request: tamperedRequest,
 		url: new URL(tamperedRequest.url),
 		data: void 0,
@@ -1767,7 +1731,6 @@ test("handleInbox() challenge policy enabled + invalid signature", async () => {
 		if (identifier !== "someone") return null;
 		return new Person({ name: "Someone" });
 	};
-	const kv = new MemoryKvStore();
 	const response = await handleInbox(tamperedRequest, {
 		recipient: "someone",
 		context,
@@ -1778,7 +1741,7 @@ test("handleInbox() challenge policy enabled + invalid signature", async () => {
 				recipient: "someone"
 			});
 		},
-		kv,
+		kv: new MemoryKvStore(),
 		kvPrefixes: {
 			activityIdempotence: ["_fedify", "activityIdempotence"],
 			publicKey: ["_fedify", "publicKey"],
@@ -1791,8 +1754,7 @@ test("handleInbox() challenge policy enabled + invalid signature", async () => {
 		inboxChallengePolicy: { enabled: true }
 	});
 	assertEquals(response.status, 401);
-	const acceptSig = response.headers.get("Accept-Signature");
-	assert(acceptSig != null, "Accept-Signature header must be present");
+	assert(response.headers.get("Accept-Signature") != null, "Accept-Signature header must be present");
 	assertEquals(response.headers.get("Cache-Control"), "no-store");
 });
 test("handleInbox() challenge policy enabled + valid signature", async () => {
@@ -1821,7 +1783,6 @@ test("handleInbox() challenge policy enabled + valid signature", async () => {
 		if (identifier !== "someone") return null;
 		return new Person({ name: "Someone" });
 	};
-	const kv = new MemoryKvStore();
 	const response = await handleInbox(signedRequest, {
 		recipient: "someone",
 		context,
@@ -1832,7 +1793,7 @@ test("handleInbox() challenge policy enabled + valid signature", async () => {
 				recipient: "someone"
 			});
 		},
-		kv,
+		kv: new MemoryKvStore(),
 		kvPrefixes: {
 			activityIdempotence: ["_fedify", "activityIdempotence"],
 			publicKey: ["_fedify", "publicKey"],
@@ -1861,9 +1822,8 @@ test("handleInbox() challenge policy disabled + unsigned request", async () => {
 		method: "POST",
 		body: JSON.stringify(await activity.toJsonLd())
 	});
-	const federation = createFederation({ kv: new MemoryKvStore() });
 	const context = createRequestContext({
-		federation,
+		federation: createFederation({ kv: new MemoryKvStore() }),
 		request: unsignedRequest,
 		url: new URL(unsignedRequest.url),
 		data: void 0
@@ -1872,7 +1832,6 @@ test("handleInbox() challenge policy disabled + unsigned request", async () => {
 		if (identifier !== "someone") return null;
 		return new Person({ name: "Someone" });
 	};
-	const kv = new MemoryKvStore();
 	const response = await handleInbox(unsignedRequest, {
 		recipient: "someone",
 		context,
@@ -1883,7 +1842,7 @@ test("handleInbox() challenge policy disabled + unsigned request", async () => {
 				recipient: "someone"
 			});
 		},
-		kv,
+		kv: new MemoryKvStore(),
 		kvPrefixes: {
 			activityIdempotence: ["_fedify", "activityIdempotence"],
 			publicKey: ["_fedify", "publicKey"],
@@ -1911,9 +1870,8 @@ test("handleInbox() actor/key mismatch → plain 401 (no challenge)", async () =
 		method: "POST",
 		body: JSON.stringify(await maliciousActivity.toJsonLd())
 	}), rsaPrivateKey3, rsaPublicKey3.id);
-	const federation = createFederation({ kv: new MemoryKvStore() });
 	const context = createRequestContext({
-		federation,
+		federation: createFederation({ kv: new MemoryKvStore() }),
 		request: maliciousRequest,
 		url: new URL(maliciousRequest.url),
 		data: void 0,
@@ -1923,7 +1881,6 @@ test("handleInbox() actor/key mismatch → plain 401 (no challenge)", async () =
 		if (identifier !== "someone") return null;
 		return new Person({ name: "Someone" });
 	};
-	const kv = new MemoryKvStore();
 	const response = await handleInbox(maliciousRequest, {
 		recipient: "someone",
 		context,
@@ -1934,7 +1891,7 @@ test("handleInbox() actor/key mismatch → plain 401 (no challenge)", async () =
 				recipient: "someone"
 			});
 		},
-		kv,
+		kv: new MemoryKvStore(),
 		kvPrefixes: {
 			activityIdempotence: ["_fedify", "activityIdempotence"],
 			publicKey: ["_fedify", "publicKey"],
@@ -1964,9 +1921,8 @@ test("handleInbox() nonce issuance in challenge", async () => {
 		method: "POST",
 		body: JSON.stringify(await activity.toJsonLd())
 	});
-	const federation = createFederation({ kv: new MemoryKvStore() });
 	const context = createRequestContext({
-		federation,
+		federation: createFederation({ kv: new MemoryKvStore() }),
 		request: unsignedRequest,
 		url: new URL(unsignedRequest.url),
 		data: void 0
@@ -2014,8 +1970,7 @@ test("handleInbox() nonce issuance in challenge", async () => {
 		"acceptSignatureNonce",
 		parsed[0].parameters.nonce
 	];
-	const stored = await kv.get(nonceKey);
-	assertEquals(stored, true, "Nonce must be stored in KV store");
+	assertEquals(await kv.get(nonceKey), true, "Nonce must be stored in KV store");
 });
 test("handleInbox() nonce consumption on valid signed request", async () => {
 	const activity = new Create({
@@ -2042,9 +1997,8 @@ test("handleInbox() nonce consumption on valid signed request", async () => {
 		spec: "rfc9421",
 		rfc9421: { nonce }
 	});
-	const federation = createFederation({ kv: new MemoryKvStore() });
 	const context = createRequestContext({
-		federation,
+		federation: createFederation({ kv: new MemoryKvStore() }),
 		request: signedRequest,
 		url: new URL(signedRequest.url),
 		data: void 0,
@@ -2054,7 +2008,7 @@ test("handleInbox() nonce consumption on valid signed request", async () => {
 		if (identifier !== "someone") return null;
 		return new Person({ name: "Someone" });
 	};
-	const response = await handleInbox(signedRequest, {
+	assertEquals((await handleInbox(signedRequest, {
 		recipient: "someone",
 		context,
 		inboxContextFactory(_activity) {
@@ -2079,14 +2033,12 @@ test("handleInbox() nonce consumption on valid signed request", async () => {
 			requestNonce: true,
 			nonceTtlSeconds: 300
 		}
-	});
-	assertEquals(response.status, 202);
-	const stored = await kv.get([
+	})).status, 202);
+	assertEquals(await kv.get([
 		"_fedify",
 		"acceptSignatureNonce",
 		nonce
-	]);
-	assertEquals(stored, void 0, "Nonce must be consumed after use");
+	]), void 0, "Nonce must be consumed after use");
 });
 test("handleInbox() nonce replay prevention", async () => {
 	const activity = new Create({
@@ -2108,9 +2060,8 @@ test("handleInbox() nonce replay prevention", async () => {
 		spec: "rfc9421",
 		rfc9421: { nonce }
 	});
-	const federation = createFederation({ kv: new MemoryKvStore() });
 	const context = createRequestContext({
-		federation,
+		federation: createFederation({ kv: new MemoryKvStore() }),
 		request: signedRequest,
 		url: new URL(signedRequest.url),
 		data: void 0,
@@ -2189,9 +2140,8 @@ test("handleInbox() nonce bypass: valid sig without nonce + invalid sig with non
 		headers: tamperedHeaders,
 		body: await signedRequest.clone().arrayBuffer()
 	});
-	const federation = createFederation({ kv: new MemoryKvStore() });
 	const context = createRequestContext({
-		federation,
+		federation: createFederation({ kv: new MemoryKvStore() }),
 		request: tamperedRequest,
 		url: new URL(tamperedRequest.url),
 		data: void 0,
@@ -2201,7 +2151,7 @@ test("handleInbox() nonce bypass: valid sig without nonce + invalid sig with non
 		if (identifier !== "someone") return null;
 		return new Person({ name: "Someone" });
 	};
-	const response = await handleInbox(tamperedRequest, {
+	assertEquals((await handleInbox(tamperedRequest, {
 		recipient: "someone",
 		context,
 		inboxContextFactory(_activity) {
@@ -2226,14 +2176,12 @@ test("handleInbox() nonce bypass: valid sig without nonce + invalid sig with non
 			requestNonce: true,
 			nonceTtlSeconds: 300
 		}
-	});
-	assertEquals(response.status, 401, "Request with nonce only in a non-verified signature must be rejected (nonce verification must be bound to the verified signature label)");
-	const stored = await kv.get([
+	})).status, 401, "Request with nonce only in a non-verified signature must be rejected (nonce verification must be bound to the verified signature label)");
+	assertEquals(await kv.get([
 		"_fedify",
 		"acceptSignatureNonce",
 		storedNonce
-	]);
-	assertEquals(stored, true, "Nonce must not be consumed when it comes from a non-verified signature");
+	]), true, "Nonce must not be consumed when it comes from a non-verified signature");
 });
 test("handleInbox() actor/key mismatch does not consume nonce", async () => {
 	const maliciousActivity = new Create({
@@ -2260,9 +2208,8 @@ test("handleInbox() actor/key mismatch does not consume nonce", async () => {
 		spec: "rfc9421",
 		rfc9421: { nonce }
 	});
-	const federation = createFederation({ kv: new MemoryKvStore() });
 	const context = createRequestContext({
-		federation,
+		federation: createFederation({ kv: new MemoryKvStore() }),
 		request: maliciousRequest,
 		url: new URL(maliciousRequest.url),
 		data: void 0,
@@ -2300,12 +2247,11 @@ test("handleInbox() actor/key mismatch does not consume nonce", async () => {
 	});
 	assertEquals(response.status, 401);
 	assertEquals(await response.text(), "The signer and the actor do not match.");
-	const stored = await kv.get([
+	assertEquals(await kv.get([
 		"_fedify",
 		"acceptSignatureNonce",
 		nonce
-	]);
-	assertEquals(stored, true, "Nonce must not be consumed when actor/key ownership check fails");
+	]), true, "Nonce must not be consumed when actor/key ownership check fails");
 });
 test("handleInbox() challenge policy enabled + unverifiedActivityHandler returns undefined", async () => {
 	const activity = new Create({
@@ -2317,11 +2263,10 @@ test("handleInbox() challenge policy enabled + unverifiedActivityHandler returns
 			content: "Hello!"
 		})
 	});
-	const originalRequest = new Request("https://example.com/", {
+	const signedRequest = await signRequest(new Request("https://example.com/", {
 		method: "POST",
 		body: JSON.stringify(await activity.toJsonLd())
-	});
-	const signedRequest = await signRequest(originalRequest, rsaPrivateKey3, rsaPublicKey3.id);
+	}), rsaPrivateKey3, rsaPublicKey3.id);
 	const jsonLd = await activity.toJsonLd();
 	const tamperedBody = JSON.stringify({
 		...jsonLd,
@@ -2332,9 +2277,8 @@ test("handleInbox() challenge policy enabled + unverifiedActivityHandler returns
 		headers: signedRequest.headers,
 		body: tamperedBody
 	});
-	const federation = createFederation({ kv: new MemoryKvStore() });
 	const context = createRequestContext({
-		federation,
+		federation: createFederation({ kv: new MemoryKvStore() }),
 		request: tamperedRequest,
 		url: new URL(tamperedRequest.url),
 		data: void 0,
@@ -2344,7 +2288,6 @@ test("handleInbox() challenge policy enabled + unverifiedActivityHandler returns
 		if (identifier !== "someone") return null;
 		return new Person({ name: "Someone" });
 	};
-	const kv = new MemoryKvStore();
 	const response = await handleInbox(tamperedRequest, {
 		recipient: "someone",
 		context,
@@ -2355,7 +2298,7 @@ test("handleInbox() challenge policy enabled + unverifiedActivityHandler returns
 				recipient: "someone"
 			});
 		},
-		kv,
+		kv: new MemoryKvStore(),
 		kvPrefixes: {
 			activityIdempotence: ["_fedify", "activityIdempotence"],
 			publicKey: ["_fedify", "publicKey"],
@@ -2371,8 +2314,7 @@ test("handleInbox() challenge policy enabled + unverifiedActivityHandler returns
 	assertEquals(response.status, 401);
 	const acceptSig = response.headers.get("Accept-Signature");
 	assert(acceptSig != null, "Accept-Signature header must be present when unverifiedActivityHandler returns undefined and challenge policy is enabled");
-	const parsed = parseAcceptSignature(acceptSig);
-	assert(parsed.length > 0, "Accept-Signature must have at least one entry");
+	assert(parseAcceptSignature(acceptSig).length > 0, "Accept-Signature must have at least one entry");
 	assertEquals(response.headers.get("Cache-Control"), "no-store", "Cache-Control: no-store must be set for challenge-response");
 	assertEquals(response.headers.get("Vary"), "Accept, Signature", "Vary header must include Accept and Signature");
 });
@@ -2386,11 +2328,10 @@ test("handleInbox() challenge policy enabled + unverifiedActivityHandler throws
 			content: "Hello!"
 		})
 	});
-	const originalRequest = new Request("https://example.com/", {
+	const signedRequest = await signRequest(new Request("https://example.com/", {
 		method: "POST",
 		body: JSON.stringify(await activity.toJsonLd())
-	});
-	const signedRequest = await signRequest(originalRequest, rsaPrivateKey3, rsaPublicKey3.id);
+	}), rsaPrivateKey3, rsaPublicKey3.id);
 	const jsonLd = await activity.toJsonLd();
 	const tamperedBody = JSON.stringify({
 		...jsonLd,
@@ -2401,9 +2342,8 @@ test("handleInbox() challenge policy enabled + unverifiedActivityHandler throws
 		headers: signedRequest.headers,
 		body: tamperedBody
 	});
-	const federation = createFederation({ kv: new MemoryKvStore() });
 	const context = createRequestContext({
-		federation,
+		federation: createFederation({ kv: new MemoryKvStore() }),
 		request: tamperedRequest,
 		url: new URL(tamperedRequest.url),
 		data: void 0,
@@ -2413,7 +2353,6 @@ test("handleInbox() challenge policy enabled + unverifiedActivityHandler throws
 		if (identifier !== "someone") return null;
 		return new Person({ name: "Someone" });
 	};
-	const kv = new MemoryKvStore();
 	const response = await handleInbox(tamperedRequest, {
 		recipient: "someone",
 		context,
@@ -2424,7 +2363,7 @@ test("handleInbox() challenge policy enabled + unverifiedActivityHandler throws
 				recipient: "someone"
 			});
 		},
-		kv,
+		kv: new MemoryKvStore(),
 		kvPrefixes: {
 			activityIdempotence: ["_fedify", "activityIdempotence"],
 			publicKey: ["_fedify", "publicKey"],
@@ -2442,10 +2381,9 @@ test("handleInbox() challenge policy enabled + unverifiedActivityHandler throws
 	assertEquals(response.status, 401);
 	const acceptSig = response.headers.get("Accept-Signature");
 	assert(acceptSig != null, "Accept-Signature header must be present when unverifiedActivityHandler throws and challenge policy is enabled");
-	const parsed = parseAcceptSignature(acceptSig);
-	assert(parsed.length > 0, "Accept-Signature must have at least one entry");
+	assert(parseAcceptSignature(acceptSig).length > 0, "Accept-Signature must have at least one entry");
 	assertEquals(response.headers.get("Cache-Control"), "no-store", "Cache-Control: no-store must be set for challenge-response");
 	assertEquals(response.headers.get("Vary"), "Accept, Signature", "Vary header must include Accept and Signature");
 });
-
-//#endregion
+//#endregion
+export {};

package/dist/federation/idempotency.test.d.mts

@@ -0,0 +1,2 @@
+import { Temporal } from "@js-temporal/polyfill";
+import { URLPattern } from "urlpattern-polyfill";