Owner decision 2026-10-04: fix the mismatches and every other mismatch of the same kind.
- One counting rule (Domain/Privacy/Counted), Mastodon's. It is used for a persona's statuses_count, its outbox
totalItems, NodeInfo localPosts and the instance status_count, which used to count four different things. It
counts every post that is neither deleted nor a DM, boosts included, and circle and located posts too (owner
decision). A group's count includes its remote members' posts.
- Users. Personas of banned or deleted roots no longer count, and are not found in search. NodeInfo now gives
activeMonth and activeHalfyear, and the v2 instance gives active_month instead of a constant 0.
- replies_count counts only public and unlisted replies, so it no longer tells anyone that a private reply exists.
Migration _012 recounts it.
- A remote account that deletes itself takes everything out of every count (GoneActors): its likes, downvotes,
reactions and poll votes go and their counters come back, as do its boosts', replies' and quotes' counts, and its
notifications. Lookups, account lists, search and favourited_by no longer show it. Migration _012 applies this to
accounts already gone.
- Deleting a post also deletes its pins and the local boosts of it.
- /stalking gives the same total as following_count. Members are still never listed, and hide_collections is now
always true, since the setting never did anything.
- Joining a community by invitation is following it, so /flock and /groupies agree; leaving unfollows.
- Search. Anyone may search, as on Mastodon; resolve and offset need a sign-in, offset pages, and deleted accounts
are never found.
- notifications/unread_count counts what the list shows, and the owner's follower and following lists page with
Link.
- The instance API advertises what is enforced:
- max_characters, now enforced with a 422;
- max_pinned_statuses = MaxPins;
- the media types and limits MediaService and MediaOptions accept;
- PollService's limits;
- the configured languages;
- no streaming URL until streaming exists.
domain_count counts the servers we have exchanged with; which ones stays unpublished (peers is empty).
- Routes Mastodon answers now answer instead of 404:
- directory, tags/{name}, timelines/link and identity_proofs;
- instance/languages, translation_languages, domain_blocks and privacy_policy;
- the v1 and v2 notification policy, and notification requests.
Also, from phase 3: a recovered password ends /clientapi sessions through a per-root SessionStamp claim instead of
comparing the JWT's whole-second nbf with the change time. That comparison let a token issued in the same second
survive, which made a test flaky.
671 tests pass.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01ELjqpznMFMNrJoJUj6K5p2
143 lines
5.8 KiB
C#
143 lines
5.8 KiB
C#
using Microsoft.AspNetCore.Authorization;
|
|
using Microsoft.AspNetCore.Mvc;
|
|
using Microsoft.Extensions.Options;
|
|
|
|
using MongoDB.Entities;
|
|
|
|
using PrivaPub.Api.Mastodon.Infrastructure;
|
|
using PrivaPub.Domain.Privacy;
|
|
using PrivaPub.Federation.Actors;
|
|
using PrivaPub.Infrastructure;
|
|
using PrivaPub.Models.User;
|
|
|
|
using PostEntity = PrivaPub.Models.Post.Post;
|
|
|
|
namespace PrivaPub.Api.Mastodon.Controllers
|
|
{
|
|
public class InstanceController : MastodonController
|
|
{
|
|
public const string Version = "4.2.0 (compatible; PrivaPub)";
|
|
const string Description = "A small ActivityPub server where one private login keeps several unlinkable public personas.";
|
|
|
|
readonly ILocalActorService _localActors;
|
|
readonly IOptionsMonitor<RegistrationOptions> _registrations;
|
|
|
|
public InstanceController(ILocalActorService localActors, IOptionsMonitor<RegistrationOptions> registrations)
|
|
{
|
|
_localActors = localActors;
|
|
_registrations = registrations;
|
|
}
|
|
|
|
bool Open => _registrations.CurrentValue.IsOpen;
|
|
|
|
// the languages this server is set up for (AppConfiguration:SupportedLanguages), "en" when none are named
|
|
public static IReadOnlyList<string> LanguageCodes(IServiceProvider services)
|
|
{
|
|
var configured = services.GetRequiredService<Microsoft.Extensions.Options.IOptionsMonitor<Models.AppConfiguration>>().CurrentValue.SupportedLanguages;
|
|
var codes = (configured ?? new List<string>()).Where(c => !string.IsNullOrWhiteSpace(c)).Select(c => c.Split('-')[0].ToLowerInvariant()).Distinct().ToList();
|
|
return codes.Count == 0 ? new[] { "en" } : codes;
|
|
}
|
|
|
|
string Domain => new Uri(_localActors.BaseAddress).Authority;
|
|
|
|
// every limit is what the server enforces, read from where it is enforced
|
|
static object Statuses => new { max_characters = PrivaPub.Domain.Statuses.StatusService.MaxCharacters, max_media_attachments = 4, characters_reserved_per_url = 23 };
|
|
|
|
object MediaAttachments
|
|
{
|
|
get
|
|
{
|
|
var media = HttpContext.RequestServices.GetRequiredService<IOptionsMonitor<PrivaPub.Domain.Media.MediaOptions>>().CurrentValue;
|
|
return new
|
|
{
|
|
supported_mime_types = PrivaPub.Domain.Media.MediaService.SupportedTypes,
|
|
image_size_limit = media.MaxImageBytes,
|
|
image_matrix_limit = media.MaxImageSide * media.MaxImageSide,
|
|
video_size_limit = media.MaxVideoBytes,
|
|
video_frame_rate_limit = 60,
|
|
video_matrix_limit = 2_304_000
|
|
};
|
|
}
|
|
}
|
|
|
|
static object Polls => new
|
|
{
|
|
max_options = PrivaPub.Domain.Statuses.PollService.MaxOptions,
|
|
max_characters_per_option = PrivaPub.Domain.Statuses.PollService.MaxOptionLength,
|
|
min_expiration = PrivaPub.Domain.Statuses.PollService.MinExpiration,
|
|
max_expiration = PrivaPub.Domain.Statuses.PollService.MaxExpiration
|
|
};
|
|
|
|
[HttpGet("/api/v1/instance"), AllowAnonymous]
|
|
public async Task<IActionResult> V1(CancellationToken token)
|
|
{
|
|
var users = await Counted.Users(token);
|
|
var statuses = await Counted.LocalPosts(token);
|
|
var domains = await KnownServers(token);
|
|
return Json(new
|
|
{
|
|
uri = Domain,
|
|
title = "PrivaPub",
|
|
short_description = Description,
|
|
description = Description,
|
|
email = string.Empty,
|
|
version = Version,
|
|
urls = new { },//no streaming API yet, so none is advertised
|
|
stats = new { user_count = users, status_count = statuses, domain_count = domains },
|
|
thumbnail = $"{_localActors.BaseAddress}/media/missing-header.png",
|
|
languages = LanguageCodes(HttpContext.RequestServices),
|
|
registrations = Open,
|
|
approval_required = false,
|
|
invites_enabled = true,//a group invitation always creates an account
|
|
configuration = new { accounts = new { max_featured_tags = 0 }, statuses = Statuses, media_attachments = MediaAttachments, polls = Polls },
|
|
contact_account = default(object),
|
|
rules = Array.Empty<object>()
|
|
});
|
|
}
|
|
|
|
// the servers we have exchanged activities with, as the statistics count them. Which ones is not published
|
|
// (/instance/peers stays empty, as on a Mastodon with its peers API off): on a small server it would say who its
|
|
// personas talk to.
|
|
static async Task<long> KnownServers(CancellationToken token) =>
|
|
await DB.Default.CountAsync<Models.Jobs.RemoteInstance>(i => i.Seen == "touched", token);
|
|
|
|
[HttpGet("/api/v2/instance"), AllowAnonymous]
|
|
public async Task<IActionResult> V2(CancellationToken token) => Json(new
|
|
{
|
|
domain = Domain,
|
|
title = "PrivaPub",
|
|
version = Version,
|
|
api_versions = new { mastodon = 7 },
|
|
source_url = "https://git.thepra.dev/thepra/SocialPub",
|
|
description = Description,
|
|
usage = new { users = new { active_month = await Counted.ActiveUsers(30, token) } },
|
|
thumbnail = new { url = $"{_localActors.BaseAddress}/media/missing-header.png" },
|
|
languages = LanguageCodes(HttpContext.RequestServices),
|
|
configuration = new
|
|
{
|
|
urls = new { },//no streaming API yet, so none is advertised
|
|
accounts = new { max_featured_tags = 0, max_pinned_statuses = StatusesController.MaxPins },
|
|
statuses = Statuses,
|
|
media_attachments = MediaAttachments,
|
|
polls = Polls,
|
|
translation = new { enabled = false }
|
|
},
|
|
registrations = new { enabled = Open, approval_required = false, message = Open ? default : RegistrationOptions.ClosedMessage },
|
|
contact = new { email = string.Empty, account = default(object) },
|
|
rules = Array.Empty<object>()
|
|
});
|
|
|
|
[HttpGet("/api/v1/instance/peers"), AllowAnonymous]
|
|
public IActionResult Peers() => Json(Array.Empty<string>());
|
|
|
|
[HttpGet("/api/v1/instance/activity"), AllowAnonymous]
|
|
public IActionResult Activity() => Json(Array.Empty<object>());
|
|
|
|
[HttpGet("/api/v1/instance/rules"), AllowAnonymous]
|
|
public IActionResult Rules() => Json(Array.Empty<object>());
|
|
|
|
[HttpGet("/api/v1/instance/extended_description"), AllowAnonymous]
|
|
public IActionResult ExtendedDescription() => Json(new { updated_at = MastodonJson.Day(DateTime.UtcNow), content = $"<p>{Description}</p>" });
|
|
}
|
|
}
|