publisher/internal/verify/ at main · geofox.org/publisher · Tangled

geofox.org / publisher

0

A small go app to cross-post/publish to various social platforms.

0

publisher / internal / verify /

at main 1 folder 12 files

Geoffrey Richard Reply/quote in a full composer (Interact → Compose interaction mode) 2mo ago

Add signature verification for Nostr, Bluesky, Mastodon, and Threads Credential-free /api/verify endpoint and web "verify" tab reporting whether a post is authentically signed by the claimed author: - Nostr: offline event id + Schnorr signature check - Bluesky: repo commit signature + MST inclusion proof (indigo atproto SDK) - Mastodon: ActivityPub origin authority + FEP-8b32 (eddsa-jcs-2022) proof - Threads: ActivityPub origin authority (gated by Meta; reported honestly) Tri-state verdicts (verified/failed/error) with assurance levels (cryptographic/origin), optional expected-identity matching, and an SSRF-guarded HTTP client for all outbound fetches. Requires Go 1.26.

2 months ago

Reply/quote in a full composer (Interact → Compose interaction mode) Replying to or quoting an existing post now hands off from the Interact tab to the Compose tab in "interaction mode": a source banner over the full composer, so the reply/quote gets the live preview, auto-threading/splitting, media, and per-platform overrides. Repost stays a one-click action in Interact. - dispatch: runChain gains an optional head action (reply/quote head, tail threads as replies); Interact reworked to one threaded chain per platform. The source platform does the native action; selected other platforms fan out a full reproduction — your commentary + the original's text + re-hosted media + link — assembled then threaded. Mastodon native-quote-with-media degrades to reproduction. Per-platform text overrides honored. - api: POST /api/interact is now multipart (spec + image files); the original's media is re-hosted through an SSRF-guarded client (https-only, size-limited). - web: Compose interaction mode (state.interaction, source banner, source-locked + fan-out platform chips, hidden scheduling, multipart Send); Interact hands off reply/quote and keeps repost one-click. The v0.5.x inline action panel is removed. Normal posting, auto-threading, and resolve/preview are unchanged (additive).

2 months ago

bluesky_offline_test.go

Add signature verification for Nostr, Bluesky, Mastodon, and Threads Credential-free /api/verify endpoint and web "verify" tab reporting whether a post is authentically signed by the claimed author: - Nostr: offline event id + Schnorr signature check - Bluesky: repo commit signature + MST inclusion proof (indigo atproto SDK) - Mastodon: ActivityPub origin authority + FEP-8b32 (eddsa-jcs-2022) proof - Threads: ActivityPub origin authority (gated by Meta; reported honestly) Tri-state verdicts (verified/failed/error) with assurance levels (cryptographic/origin), optional expected-identity matching, and an SSRF-guarded HTTP client for all outbound fetches. Requires Go 1.26.

2 months ago

bluesky_test.go

Add signature verification for Nostr, Bluesky, Mastodon, and Threads Credential-free /api/verify endpoint and web "verify" tab reporting whether a post is authentically signed by the claimed author: - Nostr: offline event id + Schnorr signature check - Bluesky: repo commit signature + MST inclusion proof (indigo atproto SDK) - Mastodon: ActivityPub origin authority + FEP-8b32 (eddsa-jcs-2022) proof - Threads: ActivityPub origin authority (gated by Meta; reported honestly) Tri-state verdicts (verified/failed/error) with assurance levels (cryptographic/origin), optional expected-identity matching, and an SSRF-guarded HTTP client for all outbound fetches. Requires Go 1.26.

2 months ago

dispatch_test.go

Add signature verification for Nostr, Bluesky, Mastodon, and Threads Credential-free /api/verify endpoint and web "verify" tab reporting whether a post is authentically signed by the claimed author: - Nostr: offline event id + Schnorr signature check - Bluesky: repo commit signature + MST inclusion proof (indigo atproto SDK) - Mastodon: ActivityPub origin authority + FEP-8b32 (eddsa-jcs-2022) proof - Threads: ActivityPub origin authority (gated by Meta; reported honestly) Tri-state verdicts (verified/failed/error) with assurance levels (cryptographic/origin), optional expected-identity matching, and an SSRF-guarded HTTP client for all outbound fetches. Requires Go 1.26.

2 months ago

Reply/quote in a full composer (Interact → Compose interaction mode) Replying to or quoting an existing post now hands off from the Interact tab to the Compose tab in "interaction mode": a source banner over the full composer, so the reply/quote gets the live preview, auto-threading/splitting, media, and per-platform overrides. Repost stays a one-click action in Interact. - dispatch: runChain gains an optional head action (reply/quote head, tail threads as replies); Interact reworked to one threaded chain per platform. The source platform does the native action; selected other platforms fan out a full reproduction — your commentary + the original's text + re-hosted media + link — assembled then threaded. Mastodon native-quote-with-media degrades to reproduction. Per-platform text overrides honored. - api: POST /api/interact is now multipart (spec + image files); the original's media is re-hosted through an SSRF-guarded client (https-only, size-limited). - web: Compose interaction mode (state.interaction, source banner, source-locked + fan-out platform chips, hidden scheduling, multipart Send); Interact hands off reply/quote and keeps repost one-click. The v0.5.x inline action panel is removed. Normal posting, auto-threading, and resolve/preview are unchanged (additive).

2 months ago

mastodon_test.go

Add signature verification for Nostr, Bluesky, Mastodon, and Threads Credential-free /api/verify endpoint and web "verify" tab reporting whether a post is authentically signed by the claimed author: - Nostr: offline event id + Schnorr signature check - Bluesky: repo commit signature + MST inclusion proof (indigo atproto SDK) - Mastodon: ActivityPub origin authority + FEP-8b32 (eddsa-jcs-2022) proof - Threads: ActivityPub origin authority (gated by Meta; reported honestly) Tri-state verdicts (verified/failed/error) with assurance levels (cryptographic/origin), optional expected-identity matching, and an SSRF-guarded HTTP client for all outbound fetches. Requires Go 1.26.

2 months ago

Reply/quote in a full composer (Interact → Compose interaction mode) Replying to or quoting an existing post now hands off from the Interact tab to the Compose tab in "interaction mode": a source banner over the full composer, so the reply/quote gets the live preview, auto-threading/splitting, media, and per-platform overrides. Repost stays a one-click action in Interact. - dispatch: runChain gains an optional head action (reply/quote head, tail threads as replies); Interact reworked to one threaded chain per platform. The source platform does the native action; selected other platforms fan out a full reproduction — your commentary + the original's text + re-hosted media + link — assembled then threaded. Mastodon native-quote-with-media degrades to reproduction. Per-platform text overrides honored. - api: POST /api/interact is now multipart (spec + image files); the original's media is re-hosted through an SSRF-guarded client (https-only, size-limited). - web: Compose interaction mode (state.interaction, source banner, source-locked + fan-out platform chips, hidden scheduling, multipart Send); Interact hands off reply/quote and keeps repost one-click. The v0.5.x inline action panel is removed. Normal posting, auto-threading, and resolve/preview are unchanged (additive).

2 months ago

Reply/quote in a full composer (Interact → Compose interaction mode) Replying to or quoting an existing post now hands off from the Interact tab to the Compose tab in "interaction mode": a source banner over the full composer, so the reply/quote gets the live preview, auto-threading/splitting, media, and per-platform overrides. Repost stays a one-click action in Interact. - dispatch: runChain gains an optional head action (reply/quote head, tail threads as replies); Interact reworked to one threaded chain per platform. The source platform does the native action; selected other platforms fan out a full reproduction — your commentary + the original's text + re-hosted media + link — assembled then threaded. Mastodon native-quote-with-media degrades to reproduction. Per-platform text overrides honored. - api: POST /api/interact is now multipart (spec + image files); the original's media is re-hosted through an SSRF-guarded client (https-only, size-limited). - web: Compose interaction mode (state.interaction, source banner, source-locked + fan-out platform chips, hidden scheduling, multipart Send); Interact hands off reply/quote and keeps repost one-click. The v0.5.x inline action panel is removed. Normal posting, auto-threading, and resolve/preview are unchanged (additive).

2 months ago

Reply/quote in a full composer (Interact → Compose interaction mode) Replying to or quoting an existing post now hands off from the Interact tab to the Compose tab in "interaction mode": a source banner over the full composer, so the reply/quote gets the live preview, auto-threading/splitting, media, and per-platform overrides. Repost stays a one-click action in Interact. - dispatch: runChain gains an optional head action (reply/quote head, tail threads as replies); Interact reworked to one threaded chain per platform. The source platform does the native action; selected other platforms fan out a full reproduction — your commentary + the original's text + re-hosted media + link — assembled then threaded. Mastodon native-quote-with-media degrades to reproduction. Per-platform text overrides honored. - api: POST /api/interact is now multipart (spec + image files); the original's media is re-hosted through an SSRF-guarded client (https-only, size-limited). - web: Compose interaction mode (state.interaction, source banner, source-locked + fan-out platform chips, hidden scheduling, multipart Send); Interact hands off reply/quote and keeps repost one-click. The v0.5.x inline action panel is removed. Normal posting, auto-threading, and resolve/preview are unchanged (additive).

2 months ago

safehttp_test.go

Reply/quote in a full composer (Interact → Compose interaction mode) Replying to or quoting an existing post now hands off from the Interact tab to the Compose tab in "interaction mode": a source banner over the full composer, so the reply/quote gets the live preview, auto-threading/splitting, media, and per-platform overrides. Repost stays a one-click action in Interact. - dispatch: runChain gains an optional head action (reply/quote head, tail threads as replies); Interact reworked to one threaded chain per platform. The source platform does the native action; selected other platforms fan out a full reproduction — your commentary + the original's text + re-hosted media + link — assembled then threaded. Mastodon native-quote-with-media degrades to reproduction. Per-platform text overrides honored. - api: POST /api/interact is now multipart (spec + image files); the original's media is re-hosted through an SSRF-guarded client (https-only, size-limited). - web: Compose interaction mode (state.interaction, source banner, source-locked + fan-out platform chips, hidden scheduling, multipart Send); Interact hands off reply/quote and keeps repost one-click. The v0.5.x inline action panel is removed. Normal posting, auto-threading, and resolve/preview are unchanged (additive).

2 months ago

Add signature verification for Nostr, Bluesky, Mastodon, and Threads Credential-free /api/verify endpoint and web "verify" tab reporting whether a post is authentically signed by the claimed author: - Nostr: offline event id + Schnorr signature check - Bluesky: repo commit signature + MST inclusion proof (indigo atproto SDK) - Mastodon: ActivityPub origin authority + FEP-8b32 (eddsa-jcs-2022) proof - Threads: ActivityPub origin authority (gated by Meta; reported honestly) Tri-state verdicts (verified/failed/error) with assurance levels (cryptographic/origin), optional expected-identity matching, and an SSRF-guarded HTTP client for all outbound fetches. Requires Go 1.26.

2 months ago

Add signature verification for Nostr, Bluesky, Mastodon, and Threads Credential-free /api/verify endpoint and web "verify" tab reporting whether a post is authentically signed by the claimed author: - Nostr: offline event id + Schnorr signature check - Bluesky: repo commit signature + MST inclusion proof (indigo atproto SDK) - Mastodon: ActivityPub origin authority + FEP-8b32 (eddsa-jcs-2022) proof - Threads: ActivityPub origin authority (gated by Meta; reported honestly) Tri-state verdicts (verified/failed/error) with assurance levels (cryptographic/origin), optional expected-identity matching, and an SSRF-guarded HTTP client for all outbound fetches. Requires Go 1.26.

2 months ago