We just merged a commit that adds support for Discourse-to-Discourse linked actors on the ActivityPub plugin, however, on testing in two different instances, I am seeing issues. Filing them all here @angus so that they’re grouped together.
Discourse-to-Discourse verification: in a personal Discourse instance, I can’t add a Discourse Linked Actor from meta.discourse.org, initially I got a “failed to verify” client error, and then a timeout.
Same error when trying to link my personal instance account from meta.
Discourse-to-Mastodon verification: on the personal instance, this worked Ok! Here on meta though, I can’t seem to get past the verify step for mastodon.social, I get this error: An error occurred: The access token is invalid Failed to verify client.
@pmusaraj Just as an initial measure I’ve made a PR that adds settings for the rate limiting of user api key clients (which will make this hard to test this).
Could you also just check that discourse-activity-pub:read scope is added to the allow user_api key client scopes site setting. It should be automatically, but worth checking.
This change is now live on meta. With my own self-hosted instance (also up-to-date with this change), I am getting a step further, but got this error after authorizing:
I think this means we’ve fixed this issue. This error will currently occur if you don’t already have an actor on the instance as user actors are created on demand (i.e. it’s expected, albeit the message could be improved). I think this is one case where we should create them if they don’t exist. This will do that:
I think this may be indicative of an old/destroyed OAuth app on the Mastodon side of things. Just a note that in my own tests with mastodon.social (on production instances), I was able to verify without issue. I’ve raised a PR to address this potential cause of the issue:
@pmusaraj Thanks for the merge. Just a note that I was just able to successfully authorize my Mastodon account on mastodon.social here on meta, so it looks like that PR has fixed it, but let me know if you have any more issues.
that last PR fixes Discourse-to-Discourse authorization on my self-hosted instance, thanks!