Fediverse

28195 readers

364 users here now

A community to talk about the Fediverse and all it's related services using ActivityPub (Mastodon, Lemmy, KBin, etc).

If you wanted to get help with moderating your own community then head over to !moderators@lemmy.world!

Rules

Posts must be on topic.
Be respectful of others.
Cite the sources used for graphs and other statistics.
Follow the general Lemmy.world rules.

Learn more at these websites: Join The Fediverse Wiki, Fediverse.info, Wikipedia Page, The Federation Info (Stats), FediDB (Stats), Sub Rehab (Reddit Migration), Search Lemmy

founded 1 year ago

MODERATORS

ruud@lemmy.world

Xylinna@lemmy.world

MrCenny@lemmy.world

TragicNotCute@lemmy.world

automodbeta@lemmy.world

woelkchen@lemmy.world

Why can't we have a unified API across the fediverse to use in mobile apps? (kbin.social)

submitted 1 year ago* (last edited 1 year ago) by adonis@kbin.social to c/fediverse@lemmy.world

40 comments fedilink hide all child comments

Is there a reason why all the services, that use the ActivityPub protocol don't have a unified API?

None of the mastodon apps allow me to log in with a lemmy/kbin account.

Also none of the lemmy apps allow me to log in with a kbin account.

Even though kbin has both mastodon (microblogging) and lemmy (threads, communities) functionality.

Also, Pixelfed recently introduced "login with Mastodon", but all it really does is just create a new user on it's instance and copy over the mastodon followers and profile info.

Why can't we just have one account to rule them all?

you are viewing a single comment's thread
view the rest of the comments

[+] cwagner@lemmy.cwagner.me 2 points 1 year ago* (last edited 1 year ago) (1 children)

[deleted]

[–] adonis@kbin.social -2 points 1 year ago (1 children)

Why would there need to be a signature to every post? According to your statement, any service that provides OAuth/JWT would be prone to this fatal flaw, wouldn't it?

[–] cerevant@lemmy.world 3 points 1 year ago* (last edited 1 year ago)

No, because the model for ActivityPub is very different than how OAuth is used for authentication. What you describe is like wanting to log in to hotmail using your gmail account, and being able to send and receive e-mail from your gmail address.

It is a fundamental to ActivityPub that a user exists at a domain, and content coming from or going to that domain is sent from / to the relevant server at that domain.

Federated login is a good idea, and it's been done, both in closed and open forms. Combining federated login and federated ID over ActivityPub would fundamentally change ActivityPub.