@rmdes/indiekit-endpoint-activitypub 1.0.24 → 1.0.26

package/lib/federation-bridge.js

@@ -44,8 +44,9 @@ export function fromExpressRequest(req) {
  *
  * @param {import("express").Response} res - Express response
  * @param {Response} response - Standard Response from federation.fetch()
+ * @param {Request} [request] - Original request (for targeted patching)
  */
-async function sendFedifyResponse(res, response) {
+async function sendFedifyResponse(res, response, request) {
   res.status(response.status);
   response.headers.forEach((value, key) => {
     res.setHeader(key, value);
@@ -56,6 +57,33 @@ async function sendFedifyResponse(res, response) {
     return;
   }
 
+  // WORKAROUND: Fedify serializes endpoints with "type": "as:Endpoints"
+  // which is not a real ActivityStreams type (fails browser.pub validation).
+  // For actor JSON responses, buffer the body and strip the invalid type.
+  // See: https://github.com/fedify-dev/fedify/issues/576
+  // TODO: Remove this workaround when Fedify fixes the upstream issue.
+  const contentType = response.headers.get("content-type") || "";
+  const isActorJson =
+    contentType.includes("activity+json") ||
+    contentType.includes("ld+json");
+
+  if (isActorJson) {
+    const body = await response.text();
+    try {
+      const json = JSON.parse(body);
+      if (json.endpoints?.type) {
+        delete json.endpoints.type;
+      }
+      const patched = JSON.stringify(json);
+      res.setHeader("content-length", Buffer.byteLength(patched));
+      res.end(patched);
+    } catch {
+      // Not valid JSON — send as-is
+      res.end(body);
+    }
+    return;
+  }
+
   const reader = response.body.getReader();
   await new Promise((resolve) => {
     function read({ done, value }) {

package/lib/federation-setup.js

@@ -212,13 +212,14 @@ export function setupFederation(options) {
       return null;
     })
     .mapAlias((_ctx, alias) => {
-      // Resolve profile URL and /@handle patterns via WebFinger
+      // Resolve profile URL and /@handle patterns via WebFinger.
+      // Must return { identifier } or { username }, not a bare string.
       if (!publicationUrl) return null;
       try {
         const pub = new URL(publicationUrl);
         if (alias.hostname !== pub.hostname) return null;
         const path = alias.pathname.replace(/\/$/, "");
-        if (path === "" || path === `/@${handle}`) return handle;
+        if (path === "" || path === `/@${handle}`) return { identifier: handle };
       } catch { /* ignore */ }
       return null;
     })

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rmdes/indiekit-endpoint-activitypub",
-  "version": "1.0.24",
+  "version": "1.0.26",
   "description": "ActivityPub federation endpoint for Indiekit via Fedify. Adds full fediverse support: actor, inbox, outbox, followers, following, syndication, and Mastodon migration.",
   "keywords": [
     "indiekit",