fedipod 0.11.0 → 0.13.0

package/lib/front-core.mjs

@@ -130,6 +130,8 @@ function identFor(rec, policy = null) {
 //   host        the front's own host, e.g. "fedipod.net" (for WebFinger subjects)
 //   frontOrigin "https://fedipod.net"
 //   lookup(handle) -> record | null       the directory
+//   listDirectory() -> { handle: record }  every row, for the admin roster
+//   removeDirectory(handle) -> boolean     drop a row; false when a seeded row remains
 //   podPut(url, body, ct) -> boolean      append to a user's pod (per-user cred inside)
 //   podGet(url) -> Response                read a user's pod (public reads; plain fetch is fine)
 export async function routeFront(request, ctx) {
@@ -155,6 +157,51 @@ export async function routeFront(request, ctx) {
     return { status: 200, headers: { 'content-type': 'text/html; charset=utf-8' }, body: ctx.runPage };
   }
 
+  // The admin page: the host reading who has accounts here. The page signs in
+  // and calls the roster API below; a deploy with no admin supplies no page.
+  if (pathname === '/admin') {
+    if (request.method !== 'GET' && request.method !== 'HEAD') return { status: 405, headers: {}, body: '' };
+    if (!ctx.adminPage) return notFound();
+    return { status: 200, headers: { 'content-type': 'text/html; charset=utf-8' }, body: ctx.adminPage };
+  }
+
+  // The roster: every directory row, secrets stripped, for the host's own
+  // eyes. The reader proves themself the way attach proves a pod — a
+  // Solid-OIDC token — and must be the WebID the deploy names as admin.
+  if (pathname === '/api/roster') {
+    if (!ctx.listDirectory || !ctx.adminWebId) return j(501, { error: 'this front has no roster to offer' });
+    const webid = await verifyPodToken(request, pathname, ctx.verifier);
+    if (!webid) return j(401, { error: 'a Solid-OIDC token is required' });
+    if (webid !== ctx.adminWebId) return j(403, { error: 'that WebID is not the admin of this front' });
+    const rows = await ctx.listDirectory();
+    const accounts = Object.values(rows)
+      .map((r) => ({
+        handle: r.handle, kind: r.kind || 'person', fronted: !r.inboxOnly,
+        podHome: r.podHome, webId: r.webId || null, actorUrl: r.actorUrl,
+        address: `@${r.handle}@${ctx.host}`,
+      }))
+      .sort((a, b) => a.handle.localeCompare(b.handle));
+    return j(200, { host: ctx.host, accounts });
+  }
+
+  // Revoke: the admin removes an account's row, so the server stops answering
+  // for the name. Nothing on the user's pod is touched. Attach-created rows go
+  // for good; a row seeded in the deploy's environment can only be removed there.
+  if (pathname === '/api/revoke' && request.method === 'POST') {
+    if (!ctx.removeDirectory || !ctx.adminWebId) return j(501, { error: 'this front cannot revoke accounts' });
+    const webid = await verifyPodToken(request, pathname, ctx.verifier);
+    if (!webid) return j(401, { error: 'a Solid-OIDC token is required' });
+    if (webid !== ctx.adminWebId) return j(403, { error: 'that WebID is not the admin of this front' });
+    let body;
+    try { body = JSON.parse(await request.clone().text()); } catch { return j(400, { error: 'bad JSON' }); }
+    const handle = String(body.handle || '').toLowerCase();
+    if (!(await ctx.lookup(handle))) return j(404, { error: 'no such account' });
+    const removed = (await ctx.removeDirectory(handle)) === true;
+    return j(200, removed ? { handle, removed }
+      : { handle, removed: false,
+          reason: 'this row is seeded in the deploy environment (FEDIPOD_DIRECTORY_JSON) — remove it there and redeploy' });
+  }
+
   // Live handle check for the page: valid shape AND not already in the
   // directory. Also tells the page whether this host offers pods.
   if (pathname === '/api/handle') {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fedipod",
-  "version": "0.11.0",
+  "version": "0.13.0",
   "description": "Standalone single-actor ActivityPub agent whose wire face, RDF truth and state all live on a Solid pod (CSS). Bundles a Phanpy UI and a Mastodon client-API facade.",
   "type": "module",
   "license": "MIT",

package/web/front/admin.html

@@ -0,0 +1,129 @@
+<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>FediPod — accounts on this server</title>
+<style>
+  :root { color-scheme: light dark; --line:#d9d4c7; --dim:#45443d; --accent:#6a8a5a; }
+  @media (prefers-color-scheme: dark) { :root { --dim:#c2c0b4; } }
+  body { font: 19px/1.6 system-ui, sans-serif; max-width: 44rem; margin: 2rem auto; padding: 0 1.1rem; }
+  h1 { font-size: 1.7rem; margin: 0 0 .2rem; }
+  p.lede { color: var(--dim); margin-top: 0; }
+  label { display: block; font-weight: 600; margin: .8rem 0 .2rem; }
+  input[type=url] { width: 100%; padding: .5rem .6rem; font: inherit;
+    border: 1px solid var(--line); border-radius: 8px; box-sizing: border-box; }
+  .hint { color: var(--dim); font-size: .95rem; }
+  .primary { background: var(--accent); color: #fff; border: none; border-radius: 9px;
+    padding: .6rem 1.1rem; font: inherit; cursor: pointer; }
+  .primary[disabled] { opacity: .5; cursor: not-allowed; }
+  button { font: inherit; cursor: pointer; }
+  [hidden] { display: none !important; }
+  table { border-collapse: collapse; width: 100%; margin: 1.2rem 0; }
+  th, td { text-align: left; padding: .5rem .7rem; border-bottom: 1px solid var(--line); }
+  th { font-weight: 600; }
+</style>
+</head>
+<body>
+<h1>Accounts on this server</h1>
+<p class="lede">Every name this server answers for: accounts whose identity lives here, and
+accounts that only use it as their gateway. Sign in as the server's admin to see them.</p>
+
+<form id="roster-form">
+  <p class="field">
+  <label for="roster-issuer">Your identity provider</label>
+  <input type="url" id="roster-issuer" autocomplete="off" value="https://solidcommunity.net">
+  </p>
+  <p class="actions">
+    <button type="submit" id="roster-signin" class="primary">Sign in &amp; list accounts</button>
+  </p>
+  <p class="hint" id="roster-note" hidden></p>
+</form>
+
+<table id="roster-table" hidden>
+  <thead>
+    <tr><th>Account</th><th>Kind</th><th>Identity</th><th>Pod</th><th>Remove</th></tr>
+  </thead>
+  <tbody id="roster-rows"></tbody>
+</table>
+
+<script src="/solid-client-authn.bundle.js"></script>
+<script>
+  const $ = (id) => document.getElementById(id);
+  const note = (text) => { const n = $('roster-note'); n.hidden = !text; n.textContent = text || ''; };
+
+  $('roster-issuer').addEventListener('input', () => {
+    $('roster-signin').disabled = !/^https?:\/\/\S+/.test($('roster-issuer').value.trim());
+  });
+
+  $('roster-form').addEventListener('submit', (ev) => {
+    ev.preventDefault();
+    const auth = window.solidClientAuthentication;
+    if (!auth) { note('the sign-in library did not load — reload and try again'); return; }
+    auth.login({
+      oidcIssuer: $('roster-issuer').value.trim(),
+      redirectUrl: location.origin + '/admin',
+      clientName: 'FediPod admin',
+    }).catch((e) => note('sign-in failed to start: ' + e.message));
+  });
+
+  // Back from the identity provider: read the roster with the proven login.
+  (async () => {
+    const auth = window.solidClientAuthentication;
+    if (!auth) return;
+    const info = await auth.handleIncomingRedirect().catch(() => null);
+    if (!info?.isLoggedIn) return;
+
+    // Signed fetches build a DPoP proof from the URL, so it must be absolute.
+    const load = async () => {
+      let res;
+      try { res = await auth.fetch(location.origin + '/api/roster'); }
+      catch (e) { note('the roster request failed: ' + e.message); return; }
+      const d = await res.json().catch(() => ({}));
+      if (res.status === 403) { note('signed in as ' + info.webId + ', which is not this server’s admin'); return; }
+      if (res.status === 501) { note('this server names no admin — set FEDIPOD_ADMIN_WEBID and redeploy'); return; }
+      if (res.status !== 200) { note('roster unavailable: ' + (d.error || 'HTTP ' + res.status)); return; }
+      const rows = $('roster-rows');
+      rows.textContent = '';
+      for (const a of d.accounts || []) {
+        const tr = document.createElement('tr');
+        const cell = (child) => { const td = document.createElement('td'); td.append(child); tr.append(td); };
+        cell(a.address);
+        cell(a.kind);
+        cell(a.fronted ? 'lives here' : 'gateway only');
+        const pod = document.createElement('a');
+        pod.href = a.podHome; pod.textContent = new URL(a.podHome).host;
+        cell(pod);
+        const rm = document.createElement('button');
+        rm.type = 'button'; rm.textContent = 'Remove';
+        rm.onclick = () => revoke(a);
+        cell(rm);
+        rows.append(tr);
+      }
+      $('roster-table').hidden = false;
+      note((d.accounts || []).length + ' account(s) on ' + d.host);
+    };
+
+    const revoke = async (a) => {
+      if (!confirm('Remove ' + a.address + ' from this server? The name stops resolving here; nothing on their pod is touched.')) return;
+      let res;
+      try {
+        res = await auth.fetch(location.origin + '/api/revoke', {
+          method: 'POST', headers: { 'content-type': 'application/json' },
+          body: JSON.stringify({ handle: a.handle }),
+        });
+      } catch (e) { note('the remove request failed: ' + e.message); return; }
+      const d = await res.json().catch(() => ({}));
+      if (res.status !== 200) { note('remove refused: ' + (d.error || 'HTTP ' + res.status)); return; }
+      if (!d.removed) { note(a.address + ' stays: ' + d.reason); return; }
+      await load();
+      note('removed ' + a.address);
+    };
+
+    note('signed in as ' + info.webId + ' — reading the roster…');
+    await load();
+  })();
+</script>
+<i>(cc) 4.0 By, Jeff Zucker, 2026</i>
+</body>
+</html>

package/web/front/run.html

@@ -114,7 +114,8 @@ you to keep running. Sign in with your pod to prove it is yours.</p>
     const n = $('run-note');
     n.hidden = false;
     n.textContent = 'signed in as ' + info.webId + ' — asking the server…';
-    const res = await auth.fetch('/api/agent', {
+    // The signed fetch builds a DPoP proof from the URL, so it must be absolute.
+    const res = await auth.fetch(location.origin + '/api/agent', {
       method: 'POST', headers: { 'content-type': 'application/json' },
       body: JSON.stringify({ action: p.action, podBase: p.podBase }),
     }).catch(() => null);