Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support /authorize_interaction so that you can type elk.zone into the box for following #3104

Open
pandaninjas opened this issue Dec 24, 2024 · 1 comment
Labels
c: feature Request for new feature

Comments

@pandaninjas
Copy link

When someone is on Mastodon, clicking the follow button while logged out brings you to a box that looks like the following
Image


Typing elk.zone into the box and clicking "Take me home" brings you to https://elk.zone/authorize_interaction?uri=<original_uri>, e.g. https://elk.zone/authorize_interaction?uri=https%3A%2F%2Finfosec.exchange%2Fusers%2Fjerry.


The feature I am proposing is that elk.zone supports this type of interaction so that when clicking on "Take me home" with elk.zone, it will follow the account.

@pandaninjas pandaninjas added the s: pending triage Pending Triage label Dec 24, 2024
@shuuji3 shuuji3 added c: feature Request for new feature and removed s: pending triage Pending Triage labels Dec 24, 2024
@shuuji3
Copy link
Member

shuuji3 commented Dec 28, 2024

I think this is a nice-to-have feature.

Regarding the following behavior, I think it's safer to avoid directly following and just showing the account profile when accessing https://elk.zone/authorize_iteraction. That can prevent users from clicking a malicious URL and unintentionally following bad accounts (for example, someone might send a link to https://elk.zone/authorize_interaction?url=https://mastodon.social/users/bad_actor).

For notes, Mastodon implements this /authorize_interaction URL as their web UI feature (not as API) here: https://github.com/mastodon/mastodon/blob/main/app/controllers/authorize_interactions_controller.rb and it seems to simply redirect to corresponding pages depending on whether the url value is post or account.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
c: feature Request for new feature
Projects
None yet
Development

No branches or pull requests

2 participants