• Profile page
• Outbox page
• Inbox
• ActivityStreams serializers

Implement an ActivityPub actor

This feature requires two feature flags:

• activity_pub: Enables or disables all ActivityPub-related features.
• activity_pub_project: Enables and disable ActivityPub features specific to projects. Requires the activity_pub flag to also be enabled.

ActivityPub is based on three standard documents:

• ActivityPub defines the HTTP requests happening to implement federation.
• ActivityStreams defines the format of the JSON messages exchanged by the users of the protocol.
• Activity Vocabulary defines the various messages recognized by default.

The first one is typically handled by controllers, while the two others are related to what happen in serializers.

To implement an ActivityPub actor, you must:

• Implement the profile page of the resource.
• Implement the outbox page.
• Handle incoming requests on the inbox.

All requests are made using application/ld+json; profile="https://www.w3.org/ns/activitystreams" as Accept HTTP header.

The actors we’ve implemented for the social features:

• Releases

For more information on planned actors, see epic 11247.

Profile page

Querying the profile page is used to retrieve:

• General information about it, like name and description.
• URLs for the inbox and the outbox.

To implement a profile page, create an ActivityStreams serializer in app/serializers/activity_pub/, making your serializer inherit from ActivityStreamsSerializer. See below in the serializers section about the mandatory fields.

To call your serializer in your controller:

opts = {
  inbox: nil,
  outbox: outbox_project_releases_url(project)
}

render json: ActivityPub::ReleasesActorSerializer.new.represent(project, opts)

• outbox is the endpoint where to find the activities feed for this actor.
• inbox is where to POST to subscribe to the feed. Not yet implemented, so pass nil.

Outbox page

The outbox is the list of activities for the resource. It’s a feed for the resource, and it allows ActivityPub clients to show public activities for this actor without having yet subscribed to it.

To implement an outbox page, create an ActivityStreams serializer in app/serializers/activity_pub/, making your serializer inherit from ActivityStreamsSerializer. See below in the serializers section about the mandatory fields.

You call your serializer in your controller like this:

serializer = ActivityPub::ReleasesOutboxSerializer.new.with_pagination(request, response)
render json: serializer.represent(releases)

This converts the response to an OrderedCollection ActivityPub type, with all the correct fields.

Inbox

Not yet implemented.

The inbox is where the ActivityPub compatible third-parties makes their requests, to subscribe to the actor or send it messages.

ActivityStreams serializers

The serializers implement half the core of ActivityPub support: they’re all about ActivityStreams, the message format used by ActivityPub.

To leverage the features doing most of the formatting for you, your serializer should inherit from ActivityPub::ActivityStreamsSerializer.

To use it, call the #represent method. It requires you to provide inbox and outbox options (as mentioned above) if it is an actor profile page. You don’t need those if your serializer represents an object that is just meant to be embedded as part of actors, like the object representing the contact information for a user.

Each resource serialized (included other objects embedded in your actor) must provide an id and a type field.

id is a URL. It’s meant to be a unique identifier for the resource, and it must point to an existing page: ideally, an actor. Otherwise, you can just reference the closest actor and use an anchor, like this:

https://gitlab.com/user/project/-/releases#release-1

type should be taken from ActivityStreams core vocabulary:

• Activity types
• Actor types
• Object types

The properties you can use are all documented in the ActivityStreams vocabulary document. Given the type you have chosen for your resource, find the properties list, telling you all available properties, direct or inherited.

It’s worth noting that Mastodon adds one more property, preferredName. Mastodon expects it to be set on any actor, or that actor is not recognized by Mastodon.