fedipod-server 0.29.0 → 0.30.0

package/web/app/atproto-browser.mjs

@@ -1,86 +0,0 @@
-// atproto-browser.mjs — the Bluesky connection, in the browser.
-//
-// Same Atproto client the Node agent uses (lib/atproto.mjs). Two browser edges:
-//
-//  1. Storage is the owner's choice, per connection. "browser" keeps the
-//     credential in IndexedDB on this device (default — a full-access token
-//     stays here); "pod" keeps it in the owner-only pod state so it follows the
-//     owner to any browser they sign in from. The record carries which, and
-//     read/write route to that backend; moving between them is just a re-write.
-//  2. The mirror can be paused (feedPaused) without disconnecting.
-//
-// Bluesky's API answers CORS, so the fetches go direct, not through the relay.
-import { Atproto } from '../../lib/connections/atproto.mjs';
-import { kvGet, kvPut, kvDel } from './idb-kv.mjs';
-
-const IDB_KEY = 'atproto';
-const POD_DOC = 'atproto.json';
-
-export class BrowserAtproto extends Atproto {
-  constructor({ store, actorId = null, log = console.log } = {}) {
-    super({ localDir: '/atproto', actorId, log });   // localDir unused; storage below
-    this.store = store;
-    this._idbRec = null;     // the browser-stored record, cached at boot
-  }
-
-  // The IndexedDB copy into memory, so read() stays synchronous as the base
-  // class expects. The pod copy is already in the loaded store.
-  async load() { this._idbRec = await kvGet(IDB_KEY).catch(() => null); return this; }
-
-  // Whichever backend holds it, tagged with where it lives. The stamped-record
-  // guard is the base class's.
-  read() {
-    let rec = null; let where = null;
-    if (this._idbRec) { rec = this._idbRec; where = 'browser'; }
-    else { const p = this.store.read(POD_DOC, null); if (p) { rec = p; where = 'pod'; } }
-    if (!rec) return null;
-    if (rec.mintedFor && this.actorId && rec.mintedFor !== this.actorId) {
-      this.log(`atproto belongs to ${rec.mintedFor} — not reusing it for ${this.actorId}`);
-      return null;
-    }
-    return { ...rec, storage: where };
-  }
-
-  // Write to the record's chosen backend (default browser), and clear the other
-  // so a moved credential leaves no copy behind.
-  write(rec) {
-    const where = rec.storage || 'browser';
-    const clean = { ...rec, storage: where };
-    if (where === 'pod') {
-      this.store.write(POD_DOC, clean); this.store.flush?.().catch(() => {});
-      this._idbRec = null; kvDel(IDB_KEY).catch(() => {});
-    } else {
-      this._idbRec = clean; kvPut(IDB_KEY, clean).catch((e) => this.log(`atproto persist: ${e.message}`));
-      this.store.write(POD_DOC, null); this.store.flush?.().catch(() => {});
-    }
-  }
-
-  status() {
-    const rec = this.read();
-    return {
-      connected: !!rec?.did, service: rec?.service || null, handle: rec?.handle || null,
-      did: rec?.did || null, lastError: this.lastError,
-      cooldownFor: Math.max(0, Math.round((this.pausedUntil - Date.now()) / 1000)),
-      storage: rec?.storage || null, feedPaused: !!rec?.feedPaused,
-    };
-  }
-
-  // The mirror runs unless paused; the account stays connected either way.
-  feedActive() { return this.connected() && !this.read()?.feedPaused; }
-  setFeedPaused(on) { const rec = this.read(); if (rec) this.write({ ...rec, feedPaused: !!on }); }
-
-  // Move the credential between backends (the Options menu's Storage control).
-  setStorage(where) { const rec = this.read(); if (rec && (where === 'pod' || where === 'browser')) this.write({ ...rec, storage: where }); }
-
-  async disconnect() {
-    const rec = this.read();
-    if (rec?.refreshJwt) {
-      await this._fetch(`${rec.service}/xrpc/com.atproto.server.deleteSession`, {
-        method: 'POST', headers: { authorization: `Bearer ${rec.refreshJwt}` },
-      }).catch(() => {});
-    }
-    this._idbRec = null; await kvDel(IDB_KEY).catch(() => {});
-    this.store.write(POD_DOC, null); await this.store.flush?.().catch(() => {});
-    this.log('bluesky disconnected');
-  }
-}

package/web/app/authorize_interaction.html

@@ -1,56 +0,0 @@
-<!doctype html>
-<html lang="en">
-<head>
-<meta charset="utf-8">
-<meta name="viewport" content="width=device-width, initial-scale=1">
-<!-- The remote-follow door, at the path every Fediverse server sends its
-     readers to: /authorize_interaction?uri=<who>. Another server's Follow
-     button asks its reader which server they are on; when they say this one,
-     that server looks up the subscribe link in our WebFinger (front-core.mjs)
-     and lands them here. A static page, not a function: the account that does
-     the following is the agent in THIS browser, and the page asks it over the
-     same origin routes the record page uses. The underscore is Mastodon's
-     spelling of the path, kept so the address is the one other servers
-     already know. -->
-<title>Follow — FediPod</title>
-<link rel="icon" href="/icons/local.svg" type="image/svg+xml">
-<link rel="stylesheet" href="/admin/tokens.css">
-<style>
-  body { margin: 0; background: var(--surface); color: var(--fg); font-family: var(--font); }
-  main { max-width: 34rem; margin: 0 auto; padding: 2.5rem 1.25rem 3rem; }
-  h1 { color: var(--heading); margin: 0 0 1.5rem; font-size: 1.6rem; }
-  .address { background: var(--raised); border: 1px solid var(--line); border-radius: 8px;
-             padding: 1rem 1.1rem; margin: 0 0 1.25rem; word-break: break-word; }
-  .as { color: var(--ok); margin: 0 0 1.5rem; }
-  .row { margin: 0 0 1.25rem; }
-  button { font: inherit; padding: 0.6rem 1.4rem; border-radius: 8px; border: 1px solid var(--btn);
-           background: var(--btn); color: var(--btn-text); cursor: pointer; }
-  button:hover { background: var(--btn-hover); }
-  button:focus-visible { outline: 3px solid var(--focus); outline-offset: 2px; }
-  .msg { margin: 0 0 1.25rem; }
-  .msg.err { color: var(--err); }
-  .msg.ok { color: var(--ok); }
-  p { line-height: 1.55; }
-  a { color: var(--accent); }
-  .hint { color: var(--sub); }
-</style>
-<script src="/authorize_interaction.js" defer></script>
-</head>
-<body>
-<main>
-  <h1>Follow</h1>
-  <p class="address" id="target">…</p>
-  <p class="as" id="as" hidden></p>
-  <p class="row"><button id="go" hidden>Follow</button></p>
-  <p class="msg" id="msg" role="status" aria-live="polite"></p>
-  <div id="by-hand" hidden>
-    <p>No FediPod account is signed in to this browser, so the follow cannot be
-      sent from here. If your agent runs on your own machine, or you are signed
-      in somewhere else, paste the address above into your client's search box
-      and follow from the profile it finds.</p>
-    <p><a href="/">Sign in to FediPod</a></p>
-  </div>
-  <p class="hint"><a href="/admin/client/">Your account</a></p>
-</main>
-</body>
-</html>

package/web/app/authorize_interaction.js

@@ -1,69 +0,0 @@
-// authorize_interaction.js — the script for the remote-follow page.
-//
-// It reads who is to be followed out of the `uri` parameter, asks the agent in
-// this browser who it is, and sends the follow through the same same-origin
-// route the record page uses (/follow, admin-facade.mjs). The header is what
-// the service worker's gate reads: a cross-site form cannot set one, and a
-// cross-origin fetch that does is preflighted and never answered (sw-src.mjs).
-const PAGE = { 'x-fedipod-page': '1' };
-const $ = (id) => document.getElementById(id);
-
-const say = (text, kind = '') => { const m = $('msg'); m.textContent = text; m.className = `msg ${kind}`.trim(); };
-
-// What the other server put in `uri`: an acct URI, a bare or @-prefixed
-// handle, or the actor's address. Anything with a scheme is taken as the
-// actor itself — pasting an actor url is a normal way to follow.
-function readTarget(raw) {
-  const s = String(raw || '').trim();
-  if (!s) return null;
-  if (/^https?:\/\//iu.test(s)) return { actor: s, label: s };
-  const handle = s.replace(/^acct:/iu, '').replace(/^@/u, '');
-  if (!/^[^@\s/]+@[^@\s/]+$/u.test(handle)) return null;
-  return { handle, label: `@${handle}` };
-}
-
-const target = readTarget(new URLSearchParams(location.search).get('uri'));
-
-async function whoIsHere() {
-  try {
-    const res = await fetch('/config', { headers: PAGE });
-    if (!res.ok) return null;
-    const cfg = await res.json();
-    return cfg.address || (cfg.handle ? `@${cfg.handle}` : null);
-  } catch { return null; }
-}
-
-async function follow() {
-  $('go').disabled = true;
-  say('sending…');
-  try {
-    const res = await fetch('/follow', {
-      method: 'POST', headers: { ...PAGE, 'content-type': 'application/json' },
-      body: JSON.stringify(target.actor ? { actor: target.actor } : { handle: target.handle }),
-    });
-    const out = await res.json().catch(() => ({}));
-    if (!res.ok) { say(out.error || `the follow was refused (${res.status})`, 'err'); $('go').disabled = false; return; }
-    // A Follow is delivered, not granted: it counts once the other server
-    // answers it, and a locked account answers when its owner gets to it.
-    say(`sent to ${target.label} — it counts once their server accepts it`, 'ok');
-    $('go').hidden = true;
-  } catch (err) {
-    say(err.message || 'the follow could not be sent', 'err');
-    $('go').disabled = false;
-  }
-}
-
-(async () => {
-  if (!target) {
-    $('target').textContent = 'nobody';
-    say('This address opens from another server’s Follow button, and it did not name anybody to follow.', 'err');
-    return;
-  }
-  $('target').textContent = target.label;
-  const me = await whoIsHere();
-  if (!me) { $('by-hand').hidden = false; return; }
-  $('as').textContent = `signed in as ${me}`;
-  $('as').hidden = false;
-  $('go').hidden = false;
-  $('go').addEventListener('click', follow);
-})();