Reflecting on the existence of httpsig.org

httpsig.org is a site with one sole purpose, to advocate for the adoption of RFC 9421 HTTP Signatures. It has a "Libraries" tab that does exactly what it advertises, it lists a bunch of libraries for you to use so you don't have to roll your own.

If you want to integrate AP today, but you don't want to roll your own everything, where do you go? Who do you ask?

All I know is:

Do we even have a list sorted by language? This would be huge. What other AP frameworks do you know of?

Granted, I didn't do a lot of thinking and deep diving before I listed those two examples, but even then, that's 1 more example than is listed on https://activitypub.rocks, so I think I might be on to something here from a developer advocacy point of view.

If I were looking to integrate AP, one of the first conclusions I'd come to is that the protocol itself is fairly complex and a library or framework might help.

I don't think there is a list that plainly lists supported libraries by language.

www.rfc-editor.orgRFC 9421: HTTP Message Signatures This document describes a mechanism for creating, encoding, and verifying digital signatures or message authentication codes over components of an HTTP message. This mechanism supports use cases where the full HTTP message may not be known to the signer and where the message may be transformed (e.g., by intermediaries) before reaching the verifier. This document also describes a means for requesting that a signature be applied to a subsequent HTTP message in an ongoing HTTP exchange.
Article

Replying to @⁨julian@activitypub.space⁩

Tagging @j12t@j12t.social as this might be something worth discussing in relation to activitypub.rocks

Johannes' Mastodon placeJohannes Ernst (@j12t@j12t.social)2.52K Posts, 1K Following, 1.95K Followers · Engineer, founder, organizer. Let's put people back in control of their technology. The Open Social Web is a good start. Also wondering aloud where we are taking this planet. Check out my home page for more info and links. tfr

Replying to @⁨julian@activitypub.space⁩

What other AP frameworks do you know of?

This one is used in Mitra and all my other projects: https://docs.rs/apx_sdk/latest/apx_sdk/

There are many libraries, actually - the Delightful List has already been mentioned in this thread. But most of these libraries are not actively developed, or not used in any serious project.

So I've been thinking of adding a curated list of libraries to the ActivityPub developer guide.

docs.rsapx_sdk - RustAPx

Replying to an earlier post

I'd add in projects like Emissary, Bonfire, or https://github.com/evanp/activitypub-bot . They can all be used to build Fediverse servers from building blocks.

I think other parts might be more piecemeal. I thing HTTP Signature libraries are awesome. https://github.com/social-web-foundation/activitystrea.ms is an AS2 library that I've used a lot, even though it's weird.

https://github.com/social-web-foundation/ap-components is a Web Components library for ActivityPub objects. Also kind of cool!

I think a lot of of building a Fediverse server -- or client! -- is implementing behaviour, which an engine like Fedify can do, but most libraries aren't going to do for you.

An ActivityPub server-side bot framework. Contribute to evanp/activitypub-bot development by creating an account on GitHub.GitHubGitHub - evanp/activitypub-bot: An ActivityPub server-side bot frameworkAn ActivityPub server-side bot framework. Contribute to evanp/activitypub-bot development by creating an account on GitHub.

Replying to @⁨julian@activitypub.space⁩

@julian@activitypub.space @hongminhee @mariusor

there was a brief discussion about this in the fedify matrix channel a bit ago.

dev.funkwhale.audio/funkwhale/ (though not sure how active development is for this)

codeberg.org/bovine/bovine/ (also looks dead)

and @julian@fietkau.social is building a library for SciOp (blog.sciop.net/2025-12-08/sfn-)

dev.funkwhale.audio/funkwhale/pyfed
GitLabfunkwhale / pyfed · GitLabGet involved in Funkwhale development!

Replying to @⁨tom@tomkahe.com⁩

@tom @julian@activitypub.space The SciOp implementation and its AP plumbing are led by @jonny, that'll probably stay that way even with me now on board as well. I trust the direction, but I wouldn't count on a plug & play framework release within a plannable timeframe.

There have been other Python ActivityPub frameworks and libraries, from the top of my head I know git.fabiomanganiello.com/black by @fabio and github.com/fedi-libs/apkit by @cocoa. See also delightful.coding.social/delig curated by @smallcircles.

Summary card of repository blacklight/pubby, described as: #ActivityPub federation library for #Python web appsPlatypush Gitpubby#ActivityPub federation library for #Python web apps

Replying to @⁨julian@fietkau.social⁩

@julian@fietkau.social ah, of course @smallcircles@social.coop has a list for it. That's quite handy, thanks both!

fietkau.socialJulian Fietkau (@julian@fietkau.social)4.59K Posts, 1.7K Following, 1.32K Followers · Human-computer interaction #HCI, computer science & programming, home server & self-hosting, games and other fun stuff. Fediverse tool builder: @encyclia@fietkau.social, @canary@correct.webfinger-canary.fietkau.software, FediRoster, Pinhole, ... see https://fietkau.software/tag/fediverse for more. I also help out with @fedidevs@fosstodon.org. If you do HCI-related research, check out https://directory.hci.social. He/him. Posting mostly in English, but you might see the occasional German boost.

Replying to @⁨julian@activitypub.space⁩

@julian for the implementors of Go ActivityPub applications that need RFC9421 signatures, it's important to note that it's not FedBOX that provides the functionality, but two modules in the GoActivityPub library:

* the **client** module[1] wraps the signing of activities.
* the **auth** module[2] wraps the verification functionality.

Also for lower level use, there's the underlying module being wrapped by GoActivityPub: dadrus/httpsig [3]

[1] github.com/go-ap/client
[2] github.com/go-ap/auth
[3] github.com/dadrus/httpsig

Fed@hongminhee@hollo.social

A wrapper around regular http transfer package with some enhancements for using with ActivityPub services. - go-ap/clientGitHubGitHub - go-ap/client: A wrapper around regular http transfer package with some enhancements for using with ActivityPub services.A wrapper around regular http transfer package with some enhancements for using with ActivityPub services. - go-ap/client

Replying to @⁨mariusor@metalhead.club⁩

@mariusor@metalhead.club makes sense. It seems like even for some frameworks, depending on libraries for trickier bits is a better idea in the long run.

Metalhead.clubmarius (@mariusor@metalhead.club)7.44K Posts, 853 Following, 1K Followers · Mostly a programmer. Implementing #ActivityPub in the #Go programming language. Current projects: * #GoActivityPub - a library to use ActivityPub in Go. * #FedBOX - a generic ActivityPub service supporting the client to server API. * #brutalinks - a link aggregator inspired by (old) reddit, hacker news and lobste.rs built on top of FedBOX. * #oni - a single user ActivityPub server with minimal fuss.