1
0

convert Authorized Fetch to a setting and add support for hybrid mode (essential metadata only)

This commit is contained in:
Hazelnoot
2025-02-21 22:04:36 -05:00
parent e3d949ced6
commit a35c2f214b
28 changed files with 517 additions and 103 deletions
+15
View File
@@ -514,3 +514,18 @@ fetchLinkedNote: "Fetch linked note"
_processErrors:
quoteUnavailable: "Unable to process quote. This post may be missing context."
authorizedFetchSection: "Authorized Fetch"
authorizedFetchLabel: "Allow unsigned ActivityPub requests:"
authorizedFetchDescription: "This setting controls the behavior when a remote instance or user attempts to access your content without verifying their identity. If disabled, any remote user can access your profile and posts - even one who has been blocked or defederated."
_authorizedFetchValue:
never: "Never"
always: "Always"
essential: "Only for essential metadata"
staff: "Use staff recommendation"
_authorizedFetchValueDescription:
never: "Block all unsigned requests. Improves privacy and makes blocks more effective, but is not compatible with some very old or uncommon instance software."
always: "Allow all unsigned requests. Provides the greatest compatibility with other instances, but reduces privacy and weakens blocks."
essential: "Allow some limited unsigned requests. Provides a hybrid between \"Never\" and \"Always\" by exposing only the minimum profile metadata that is required for federation with older software."
staff: "Use the default value of \"{value}\" recommended by the instance staff."
authorizedFetchLegacyWarning: "The configuration property 'checkActivityPubGetSignature' has been deprecated and replaced with the new Authorized Fetch setting. Please remove it from your configuration file."