0 Fork 0

T

thepraandClaude Opus 5.5 2cd75176a4 One sign-in for decePubClient: the root JWT exchanged for a persona's token

The first-party client signs in on /clientapi and exchanges that JWT on
/oauth/token (RFC 8693, subject_token_type jwt, avatar_id) for one
persona's Mastodon token. Only the seeded public application `decepub`
holds the grant; RootJwtSubjectToken validates the JWT through RootJwt,
which JwtBearer now shares (signature, lifetime, ban, deletion, session
stamp). The issued token names the avatar, never the root.

Owner decision recorded in ROADMAP; it supersedes "moving decePubClient
onto the Mastodon API is out of scope".

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01LsXgEaXee4GCU1hwYgPJXw

2026-10-04 10:03:46 +02:00

.gitea/workflows

Everything on, phase 2 completed: SecureMode on in production, checked by the deploy

2026-10-04 03:34:48 +02:00

deploy

Everything on, phase 1: geolocation fetches itself, the deploy signs in as @thepra , the crawler is on, sign-up by invitation

2026-10-04 02:37:38 +02:00

docs

One sign-in for decePubClient: the root JWT exchanged for a persona's token

2026-10-04 10:03:46 +02:00

PrivaPub

One sign-in for decePubClient: the root JWT exchanged for a persona's token

2026-10-04 10:03:46 +02:00

PrivaPub.ClientModels

Everything on, phase 3: sign-in and recovery tell nothing, recovered passwords end sessions, deleted roots are gone everywhere

2026-10-04 03:16:59 +02:00

PrivaPub.Tests

One sign-in for decePubClient: the root JWT exchanged for a persona's token

2026-10-04 10:03:46 +02:00

tools

docs: FEDERATION.md tested against six peers with signed fetches, the shipped FEPs; v1.19.1 and v1.20.0 in ROADMAP

2026-10-04 04:16:16 +02:00

.gitignore

T9: the pasture as plugins

2026-10-03 11:42:03 +02:00

CLAUDE.md

One sign-in for decePubClient: the root JWT exchanged for a persona's token

2026-10-04 10:03:46 +02:00

Directory.Build.props

net10, the refactor finished, and federation that works

2026-10-01 08:05:56 +02:00

FEDERATION.md

docs: FEDERATION.md tested against six peers with signed fetches, the shipped FEPs; v1.19.1 and v1.20.0 in ROADMAP

2026-10-04 04:16:16 +02:00

global.json

net10, the refactor finished, and federation that works

2026-10-01 08:05:56 +02:00

LICENSE

Initial commit

2023-02-18 08:50:05 +01:00

PrivaPub.sln

Every outbound federation request goes through one guarded client

2026-10-01 10:46:09 +02:00

README.md

CLAUDE.md, a README, and the roadmap to full ActivityPub interop

2026-10-01 10:38:35 +02:00

README.md

PrivaPub

A self-hosted ActivityPub server in C# (.NET 10, MongoDB) where one private login owns several unlinkable public personas. It federates with Mastodon, GoToSocial, Pleroma/Akkoma, Misskey and Lemmy.

Live: https://privapub.thepra.dev
Client: decePubClient, https://decepub.thepra.dev
Architecture, conventions and deploy: CLAUDE.md
Decisions and the plan to full ActivityPub interop: docs/ROADMAP.md

dotnet build PrivaPub.sln -c Release