AIOWPS blocks some ActivityPub 1.0 actions

  • Resolved cybeardjm

    (@didierjm)


    1 year, 2 months ago

    Hi,

    ActivityPub is a protocol used in the Fediverse to allow servers, such as Mastodon, Pixelfed, FireFIsh/Calckey/Misskey and others, to communicate. Automattic is now taking care of the protocol plugin for WordPress, with the original creator and version 1.0 was just released. The protocol uses JSON data to exchange information, between instances (servers) and a WordPress blog with ActivityPub is mostly “fedified” and seen as a server by other servers, allowing posts, followers, comments etc.

    I did multiple tests since the 1.0 release, as it seems AIOWPS blocks some data exchanges. My latest update, shared to AP support, is available here: https://www.ads-software.com/support/topic/comments-blocked-by-firewall/#post-17067811

    As you’ll see, depending on the state of the Firewall, the results vary.

    I already had to deactivate a few options such as “Deny bad query strings”, “Enable advanced character string filter” or most 6G options, to allow the embedding of Mastodon posts in WordPress posts and their rendering via the Beta “Fediverse Embeds” plugin.

    Sincerely
    DJM

Viewing 13 replies - 1 through 13 (of 13 total)
  • Plugin Support hjogiupdraftplus

    (@hjogiupdraftplus)

    Hi @didierjm

    I have created internal ticket for this, I will get back to you on this asap.

    Regards

    srvissir

    (@alihosseini20368)

    This 127.0.0.1 page can’t be found

    No webpage was found for the web address: https://127.0.0.1/

    HTTP ERROR 404

    Plugin Support hjogiupdraftplus

    (@hjogiupdraftplus)

    @alihosseini20368

    I have replied on another ticket you have created. Please do not add your comment here It might be annoying for the actual ticket owner as he gets notification.

    Regards

    Plugin Support hjogiupdraftplus

    (@hjogiupdraftplus)

    Hi @didierjm,

    Sorry for the late reply.

    We are looking into more detail this issue as seems ActivityPub and Madston integration require more knowledge of how it works.

    Regards

    I am the maintainer of the ActivityPub plugin, let me know if I can help in any way!

    Plugin Support hjogiupdraftplus

    (@hjogiupdraftplus)

    Hi @pfefferle

    I do have All in one security plugin removed and checked below.

    I have installed the ActivityPub plugin and required other plugins ( Friends, Hum, Webfinger) are installed.

    https://snipboard.io/dIxmSf.jpg

    I do have created the [email protected] account and added it as friend

    https://snipboard.io/sjRQXa.jpg

    And created the posts below according to me these posts should be shown on mastadon.social account also but it seems not showing.

    https://snipboard.io/KxT9yS.jpg

    Friends > feeds – Show posts on friends page is checked and clicking Refresh it gives the error

    https://snipboard.io/idW6BY.jpg

    Fatal error: Uncaught TypeError: openssl_pkey_get_details(): Argument #1 ($key) must be of type OpenSSLAsymmetricKey, bool given in C:\laragon\www\aios021023\wp-content\plugins\activitypub\includes\class-signature.php:99 Stack trace: #0 C:\laragon\www\aios021023\wp-content\plugins\activitypub\includes\class-signature.php(99): openssl_pkey_get_details(false) #1 C:\laragon\www\aios021023\wp-content\plugins\activitypub\includes\class-signature.php(65): Activitypub\Signature::generate_key_pair_for(-1) #2 C:\laragon\www\aios021023\wp-content\plugins\activitypub\includes\class-signature.php(48): Activitypub\Signature::get_keypair_for(-1) #3 C:\laragon\www\aios021023\wp-content\plugins\activitypub\includes\class-signature.php(188): Activitypub\Signature::get_private_key_for(-1) #4 C:\laragon\www\aios021023\wp-content\plugins\activitypub\includes\class-http.php(76): Activitypub\Signature::generate_signature(-1, 'get', 'https://mastodo...', 'Fri, 06 Oct 202...') #5 C:\laragon\www\aios021023\wp-content\plugins\activitypub\includes\functions.php(25): Activitypub\Http::get('https://mastodo...') #6 C:\laragon\www\aios021023\wp-content\plugins\friends\feed-parsers\class-feed-parser-activitypub.php(417): Activitypub\safe_remote_get('https://mastodo...', 1) #7 C:\laragon\www\aios021023\wp-content\plugins\friends\includes\class-feed.php(208): Friends\Feed_Parser_ActivityPub->fetch_feed('https://mastodo...', Object(Friends\User_Feed)) #8 C:\laragon\www\aios021023\wp-content\plugins\friends\includes\class-user.php(483): Friends\Feed->retrieve_feed(Object(Friends\User_Feed)) #9 C:\laragon\www\aios021023\wp-content\plugins\friends\includes\class-user.php(469): Friends\User->retrieve_posts_from_feeds(Array) #10 C:\laragon\www\aios021023\wp-content\plugins\friends\includes\class-admin.php(347): Friends\User->retrieve_posts_from_active_feeds() #11 C:\laragon\www\aios021023\wp-includes\class-wp-hook.php(310): Friends\Admin->admin_refresh_friend_posts('') #12 C:\laragon\www\aios021023\wp-includes\class-wp-hook.php(334): WP_Hook->apply_filters('', Array) #13 C:\laragon\www\aios021023\wp-includes\plugin.php(517): WP_Hook->do_action(Array) #14 C:\laragon\www\aios021023\wp-admin\admin.php(259): do_action('friends_page_fr...') #15 {main} thrown in C:\laragon\www\aios021023\wp-content\plugins\activitypub\includes\class-signature.php on line 99

    Hi @hjogiupdraftplus thanks for testing.

    Please only test the ActivityPub plugin, no additional plugins, they are not needed and might cause issues itself.

    To test the interaction, you have to federate a post with mastodon or any other fediverse platform, add a comment on that platform and then check if it will be created as comment in the blog.

    I am not sure if this will work on a local instance, because it will not properly federated then.

    Plugin Support hjogiupdraftplus

    (@hjogiupdraftplus)

    Hi @pfefferle

    Thanks for you help in understanding how the ActivityPub plugin works.

    I will cross-check in one of my live sites as per the information.

    Regards

    Plugin Support hjogiupdraftplus

    (@hjogiupdraftplus)

    Hi @didierjm

    I try replicate the issue but could not. If I cross-check the post created on my site gets added and the reply created there gets added as a comment on the WordPress site even when the Firewall is on with basic, advanced and 6G, 5G firewall rules.

    https://mastodon.social/@hjogiupdraftplus/with_replies

    https://snipboard.io/nH2ehM.jpg

    So have to cross-check the post and reply content have any issues?

    Or any other settings of AIOS making issues for example Spam comment with the Discard feature on so it is not showing comment added?

    Regards

    Thread Starter cybeardjm

    (@didierjm)

    Thx,

    One blog seems to be working, after I removed many AIOWPS options, to the bare minimum (score is 260).

    Only change today: updated to the latest version of the AP plugin, but review of the changelog didn’t show anything special.

    The second one (both are subdomains on the same domain and host), still not working, although it has been working for a few years (since 2019)… Will review all options one by one…

    Plugin Support hjogiupdraftplus

    (@hjogiupdraftplus)

    Hi

    Ok, I will try check in more detail also.

    Please keep me posted. Just make sure as I said WP Security > Spam prevention > Comment spam do not have the spambots posting comments on and spam comments detected should be Discarded on.

    Regards

    Plugin Support hjogiupdraftplus

    (@hjogiupdraftplus)

    Hi @didierjm

    Can please cross check below list of settings?

    if any one on it is making issue that reply added on mastodon do not appear as comment on post.

    WP Security > Miscellaneous > WP REST API – make sure it is not

    WP Security > Spam prevention > Comment spam do not have the spambots posting comments on and spam comments detected should be Discarded on

    WP Security > Bruteforce > Captcha settings – Enable captcha on the comment form

    Thread Starter cybeardjm

    (@didierjm)

    Hi,

    After a few tests:

    • new posts weren’t visible in the Fediverse, although they appeared in the JSON feed.
      => it seems, IMHO, that the order in which plugins are activated matters. If AIOWPS is activated first, then AP, posts aren’t “broadcast”. If AP is activated while AIOWPS is off (deactivated), and works, then AIOWPS can be activated and new posts will be broadcast.
    • The Spam prevention is on “discard” by default. Switch to “marked as spam” first to validate that comments are indeed incoming, then disable this option.

    Rest API: ofc
    Captcha: I disabled the feature completely as it generates troubles in various other uses (worst being reCaptcha slowing the overall site).
    6G blacklist: I disabled all options, as they generated other errors when embedding content from Mastodon via other plugins, etc.

    Will check, but for some other plugins (such as “Mastodon Apps”), the application password option shouldn’t be disabled.

    FYI @pfefferle

    Sincerely
    DJM

    • This reply was modified 1 year ago by cybeardjm.
Viewing 13 replies - 1 through 13 (of 13 total)
  • The topic ‘AIOWPS blocks some ActivityPub 1.0 actions’ is closed to new replies.

Tags