Social features / ActivityPub federation (#1629)

* Support webfinger requests for the live account. Closes https://github.com/owncast/owncast/issues/1193 * Support for actor requests. Returns response for live actor. Closes https://github.com/owncast/owncast/issues/1203 * Handle follow and unfollow requests. Closes https://github.com/owncast/owncast/issues/1191 and https://github.com/owncast/owncast/issues/1205 and https://github.com/owncast/owncast/issues/1206 and https://github.com/owncast/owncast/issues/1194 * Add basic support for sending out text activities. For https://github.com/owncast/owncast/issues/1192 * Some error handling and passing of dynamic local account names. * Add hardcoded example image attachment to test post * Centralize the map of accounts and inboxes * No longer disable the preview generator based on YP toggle * Send a federated message to followers when stream starts. For https://github.com/owncast/owncast/issues/1192 * Placeholder for attaching tags * Add image description * Save and get to outbox persistence. Return using outbox endpoint for actor * Pass payloads to be handled through the gochan * Handle undo follow requests explitly, not all undo requests * Add API for manually sending simple federated messages. Closes #1215 * Verify inbox requests. Closes #1321 * Add route to fetch a single AP object by ID. For #1329 * Add responses to fediverse nodeinfo requests * Set and get federation config values for admin * Handle host-meta requests * Do not send out message if disabled. Use saved go live message. * Require AP-compatible content types for AP-related requests * Rename ap models to apmodels for clarity * Change how content type matching takes place. * io -> ioutil * Add stub delete activity callback * Handle likes and announces to surface engagement in chat. Part of #1229 * Append url to go live posts * Do not require specific content types for nodeinfo requests * Add follow engagement chat message via AP * add owncast user-agent to requests * Set note visibility to public (for now) * Fix saving/fetching a single object * Add support for x-nodeinfo2 responses * Point to the dev admin branch for ap * Bundle in dev admin for testing * Add error logging * Add AP middleware back * Point to the new external compatible logo endpoint * Clean up more AP logging to help testing * Tweak go live text and link hashtags * Fix bug in fetching init time * Send update actor activities when server details/profile is updated * Add federation config overview to web client config * Add additional actor properties * Make the AP middleware checking more flexible when looking at types * First pass at remote fediverse follow flow. For #1371 * Added a basic AP actor followers endpoint * WIP client followers API * Add profile-page reference to webfinger response * Add aliases to webfinger response * Fix content-type returned to be expected activitypub+json * First pass at followers api * Point at local dev copy of go-fed/activity * Add custom toot Hashtag objects to posts * Store additional user details to followers table * Fix AP followers endpoint. Closes #1204 * Add owncast hashtag as an invisible tag to go live posts * Reject AP requests when it is disabled * Add actor util for generating full account user from person object * Verify inbox requests before performing any other work * Accept actor update requests * Fix linter errors in federation branch * Migrate AP SQL to sqlc for type safe queries * Use the @unclearParadigm REST parameter helper * Fix verifying post ID on AP engagement * WIP privacy/request approval * Style the remote follow modal * First pass at a followers list component w/ mock data. #1370 * Revert "Use the @unclearParadigm REST parameter helper" This reverts commit c8af8a413f6f53e7d1a15a7d823ff28be2db3c23. * Fix get followers API * Add support for requiring approval. Closes https://github.com/owncast/owncast/issues/1208 * Handle Applications as Actors partly for PeerTube support * add temp todo list * check route on load, this might change later * style followers * account for just 1 tab case * Remove mock data. Allow showing follow button even when there are no external actions defined * Point to actual followers API * Support fallback img for follower views * Remove duplicate verification. Add some additional verbose logging * Bundle dev admin * Add type to host-meta webfinger template response * Tweak remote follow modal content * WIP federation followers refactor * Do not send pointer to middleware * Update admin * Add setting for toggling displaying fediverse engagement. Closes #1404 * Add in-development admin * Do not enable cors on admin followers api * Add db migration for updating messages table * Enable empty string go live messages to disable * Remove debug messages * Rework some ActivityPub handling. Create new Actor->Person handling. Create new Actor->Service handling. Add engagement handlers to send chat events and store event objects. Store inbound activities to new ap_inbound_activities table. * Support federated engagement events. Store them in the messages table and surface them via chat events. * Support federated event engatement in the chat * Tweak web UI followers handling * Point go.mod at remote fork instead of local * Update admin * Merged in develop. Couple fixes * Update dev admin * Update fedi engagement posts. - Fix incorrect action text. - Add action icons. * Set public as to instead of cc for ap msg * Updated styling for federated actions in chat * Add support for blocking federated domains. Closes #1209 * Force checking of https in verify step * Update dev admin * Return user scopes in chat history api. Closes #1586 * Update dev admin * Add AP outbound request worker pool. Closes #1571 * Disable (temporarily?) owncast tag on AP posts * Consolidate creating activity+notes in outbound AP messages * Add inbox worker pool. Closes #1570 * Update dev admin bundle * Clean up some logs * Re-enable inbound verfication * Save full IRI to outbox instead of path * Reject if full IRI is not found in outbox * Use full ActivityPub user account in chat event * Fix and expand follower APIs - Add missing IDs to AP follower endpoints - Split AP follower endpoints into initial request and pages. - Support pagination in AP requests. * Include IRI in error message * Hide chat toggle when chat is hidden. Closes #1606 * Updates to followers pagination * Set default go live message * Remove log * indirect -> direct import * Updates for inbound federated event handling. - Keep track of existing events and reject duplicates. - Change what is sent to chat for surfing federated engagement. - Keep track if outbound events are automated "go live" events or not. * Update chat federated engagement. * Update dev admin. * Move from being a person to a bot (service). Closes #1619 * Only set server init date if not already set * Only save notes to outbox able * Rework private-mode followers/approvals * API for returning a list of federated actions for #1573 * Fix too-small follower cells and jumpy tabs. Closes #1616 and closes #1516 * Fix shortcuts getting fired on inputs. Fixes #1489 and #1201 * Add spinner, autoclose + other fixes to follow modal. Fixes #1593 * Fix fetching a single object by IRI * SendFederationMessage -> SendFederatedMessage * Autolink and create tag objects from manual posts. Closes #1620 * Update dev admin bundle * Handle engagement from non-automated/live posts * Reject federated engagement actions if they do not match a local post * Update dev admin bundle * A bunch of cleanup * Fix unused assignments and logic * Remove unused function * Add content warning and sentive content flag if stream is NSFW. Closes #1624 * Disable fetching objects by IRI when in private mode. Closes #1623 * Update the error message of the remote follow dialog. closes #1622 * Update dev admin * Fix NREs throwing in test content * Fix query that wasn't properly filtering out hidden messages * Test against user being disabled instead of message visibility * Fix automated test NRE * Update comment * Adjust federated engagement chat views. Closes #1617 * Add additional index to users table * Add support for removing followers/requests. Closes #1630 * Reject federated actions from blocked actors. #1631 * Use fallback avatar if it fails to load. Closes #1635 * Fix styling of follower list. Closes #1636 * Add basic blurb stating they should follow the server. Closes #1641 * Update dev admin * Set default go live message in migration. Closes #1642 * Reset the messages table on 0.0.11 schema migration * Fix js error with moderation actions. Closes #1621 * Add a bit more clarification on follow modal. Closes #1599 * Remove todos * Split out actor and domain blocking checks * Check for errors on default values being set * Clean up actor rejection due to being blocked * Update dev admin * Add colon to error to make it easier to read * Remove markdown rendering of go live message. Reorganize text. Remove content warning. Closes #1645 * Break out the sort+render messages logic so it can be fired on visibility change. Closes #1643 * Do not send profile updates if federation is disabled * Save follow references to inbound activities table * Update dev admin * Add blocked actor test * Remove the overloaded term of Follow from social links * Fix test running in memory only * Remove "just" in engagement messags * Replace star with heart for like action. * Update dev admin * Explicitly set cc as public * Remove overly using the stream name in fediverse engagement messages * Some federated/follow UI tweaks * Remove explicit cc and bcc as they are not required * Explicitly set the audience * Remove extra margin * Add Join Fediverse button to follow modal. Closes #1651 * Do not allow multiple follows to send multiple events. Closes #1650 * Give events a min height * Do not allow old posts to be liked/shared. Closes #1652 * Remove value from log message * Alert followers on private mode toggle * Ignore clicks to follow button if disabled * Remove underline from action buttons * Add moderator icon to join message * Update admin * Post-merge remove unused var * Remove pointing at feature branch Co-authored-by: Ginger Wong <omqmail@gmail.com>
2022-01-12 13:53:10 -08:00
parent c51d9cdbf4
commit 045a0a2afd
174 changed files with 7295 additions and 404 deletions
--- a/db/README.md
+++ b/db/README.md
@@ -0,0 +1,28 @@
+# SQL Queries
+
+sqlc generates **type-safe code** from SQL. Here's how it works:
+
+1. You define the schema in `schema.sql`.
+1. You write your queries in `query.sql` using regular SQL.
+1. You run `sqlc generate` to generate Go code with type-safe interfaces to those queries.
+1. You write application code that calls the generated code.
+
+Only those who need to create or update SQL queries will need to have `sqlc` installed on their system. **It is not a dependency required to build the codebase.**
+
+## Install sqlc
+
+### Snap
+
+`sudo snap install sqlc`
+
+### Go install
+
+`go install github.com/kyleconroy/sqlc/cmd/sqlc@latest`
+
+### macOS
+
+`brew install sqlc`
+
+### Download a release
+
+Visit <https://github.com/kyleconroy/sqlc/releases> to download a release for your environment.
--- a/db/db.go
+++ b/db/db.go
@@ -0,0 +1,29 @@
+// Code generated by sqlc. DO NOT EDIT.
+
+package db
+
+import (
+	"context"
+	"database/sql"
+)
+
+type DBTX interface {
+	ExecContext(context.Context, string, ...interface{}) (sql.Result, error)
+	PrepareContext(context.Context, string) (*sql.Stmt, error)
+	QueryContext(context.Context, string, ...interface{}) (*sql.Rows, error)
+	QueryRowContext(context.Context, string, ...interface{}) *sql.Row
+}
+
+func New(db DBTX) *Queries {
+	return &Queries{db: db}
+}
+
+type Queries struct {
+	db DBTX
+}
+
+func (q *Queries) WithTx(tx *sql.Tx) *Queries {
+	return &Queries{
+		db: tx,
+	}
+}
--- a/db/models.go
+++ b/db/models.go
@@ -0,0 +1,36 @@
+// Code generated by sqlc. DO NOT EDIT.
+
+package db
+
+import (
+	"database/sql"
+	"time"
+)
+
+type ApAcceptedActivity struct {
+	ID        int32
+	Iri       string
+	Actor     string
+	Type      string
+	Timestamp time.Time
+}
+
+type ApFollower struct {
+	Iri        string
+	Inbox      string
+	Name       sql.NullString
+	Username   string
+	Image      sql.NullString
+	Request    string
+	CreatedAt  sql.NullTime
+	ApprovedAt sql.NullTime
+	DisabledAt sql.NullTime
+}
+
+type ApOutbox struct {
+	Iri              string
+	Value            []byte
+	Type             string
+	CreatedAt        sql.NullTime
+	LiveNotification sql.NullBool
+}
--- a/db/query.sql
+++ b/db/query.sql
@@ -0,0 +1,57 @@
+-- Queries added to query.sql must be compiled into Go code with sqlc. Read README.md for details.
+
+-- Federation related queries.
+
+-- name: GetFollowerCount :one
+SElECT count(*) FROM ap_followers WHERE approved_at is not null;
+
+-- name: GetLocalPostCount :one
+SElECT count(*) FROM ap_outbox;
+
+-- name: GetFederationFollowersWithOffset :many
+SELECT iri, inbox, name, username, image, created_at FROM ap_followers WHERE approved_at is not null LIMIT $1 OFFSET $2;
+
+-- name: GetRejectedAndBlockedFollowers :many
+SELECT iri, name, username, image, created_at, disabled_at FROM ap_followers WHERE disabled_at is not null;
+
+-- name: GetFederationFollowerApprovalRequests :many
+SELECT iri, inbox, name, username, image, created_at FROM ap_followers WHERE approved_at IS null AND disabled_at is null;
+
+-- name: ApproveFederationFollower :exec
+UPDATE ap_followers SET approved_at = $1, disabled_at = null WHERE iri = $2;
+
+-- name: RejectFederationFollower :exec
+UPDATE ap_followers SET approved_at = null, disabled_at = $1 WHERE iri = $2;
+
+-- name: GetFollowerByIRI :one
+SELECT iri, inbox, name, username, image, request, created_at, approved_at, disabled_at FROM ap_followers WHERE iri = $1;
+
+-- name: GetOutboxWithOffset :many
+SELECT value FROM ap_outbox LIMIT $1 OFFSET $2;
+
+-- name: GetObjectFromOutboxByID :one
+SELECT value FROM ap_outbox WHERE iri = $1;
+
+-- name: GetObjectFromOutboxByIRI :one
+SELECT value, live_notification, created_at FROM ap_outbox WHERE iri = $1;
+
+-- name: RemoveFollowerByIRI :exec
+DELETE FROM ap_followers WHERE iri = $1;
+
+-- name: AddFollower :exec
+INSERT INTO ap_followers(iri, inbox, request, name, username, image, approved_at) values($1, $2, $3, $4, $5, $6, $7);
+
+-- name: AddToOutbox :exec
+INSERT INTO ap_outbox(iri, value, type, live_notification) values($1, $2, $3, $4);
+
+-- name: AddToAcceptedActivities :exec
+INSERT INTO ap_accepted_activities(iri, actor, type, timestamp) values($1, $2, $3, $4);
+
+-- name: GetInboundActivitiesWithOffset :many
+SELECT iri, actor, type, timestamp FROM ap_accepted_activities ORDER BY timestamp DESC LIMIT $1 OFFSET $2;
+
+-- name: DoesInboundActivityExist :one
+SELECT count(*) FROM ap_accepted_activities WHERE iri = $1 AND actor = $2 AND TYPE = $3;
+
+-- name: UpdateFollowerByIRI :exec
+UPDATE ap_followers SET inbox = $1, name = $2, username = $3, image = $4 WHERE iri = $5;
--- a/db/query.sql.go
+++ b/db/query.sql.go
@@ -0,0 +1,441 @@
+// Code generated by sqlc. DO NOT EDIT.
+// source: query.sql
+
+package db
+
+import (
+	"context"
+	"database/sql"
+	"time"
+)
+
+const addFollower = `-- name: AddFollower :exec
+INSERT INTO ap_followers(iri, inbox, request, name, username, image, approved_at) values($1, $2, $3, $4, $5, $6, $7)
+`
+
+type AddFollowerParams struct {
+	Iri        string
+	Inbox      string
+	Request    string
+	Name       sql.NullString
+	Username   string
+	Image      sql.NullString
+	ApprovedAt sql.NullTime
+}
+
+func (q *Queries) AddFollower(ctx context.Context, arg AddFollowerParams) error {
+	_, err := q.db.ExecContext(ctx, addFollower,
+		arg.Iri,
+		arg.Inbox,
+		arg.Request,
+		arg.Name,
+		arg.Username,
+		arg.Image,
+		arg.ApprovedAt,
+	)
+	return err
+}
+
+const addToAcceptedActivities = `-- name: AddToAcceptedActivities :exec
+INSERT INTO ap_accepted_activities(iri, actor, type, timestamp) values($1, $2, $3, $4)
+`
+
+type AddToAcceptedActivitiesParams struct {
+	Iri       string
+	Actor     string
+	Type      string
+	Timestamp time.Time
+}
+
+func (q *Queries) AddToAcceptedActivities(ctx context.Context, arg AddToAcceptedActivitiesParams) error {
+	_, err := q.db.ExecContext(ctx, addToAcceptedActivities,
+		arg.Iri,
+		arg.Actor,
+		arg.Type,
+		arg.Timestamp,
+	)
+	return err
+}
+
+const addToOutbox = `-- name: AddToOutbox :exec
+INSERT INTO ap_outbox(iri, value, type, live_notification) values($1, $2, $3, $4)
+`
+
+type AddToOutboxParams struct {
+	Iri              string
+	Value            []byte
+	Type             string
+	LiveNotification sql.NullBool
+}
+
+func (q *Queries) AddToOutbox(ctx context.Context, arg AddToOutboxParams) error {
+	_, err := q.db.ExecContext(ctx, addToOutbox,
+		arg.Iri,
+		arg.Value,
+		arg.Type,
+		arg.LiveNotification,
+	)
+	return err
+}
+
+const approveFederationFollower = `-- name: ApproveFederationFollower :exec
+UPDATE ap_followers SET approved_at = $1, disabled_at = null WHERE iri = $2
+`
+
+type ApproveFederationFollowerParams struct {
+	ApprovedAt sql.NullTime
+	Iri        string
+}
+
+func (q *Queries) ApproveFederationFollower(ctx context.Context, arg ApproveFederationFollowerParams) error {
+	_, err := q.db.ExecContext(ctx, approveFederationFollower, arg.ApprovedAt, arg.Iri)
+	return err
+}
+
+const doesInboundActivityExist = `-- name: DoesInboundActivityExist :one
+SELECT count(*) FROM ap_accepted_activities WHERE iri = $1 AND actor = $2 AND TYPE = $3
+`
+
+type DoesInboundActivityExistParams struct {
+	Iri   string
+	Actor string
+	Type  string
+}
+
+func (q *Queries) DoesInboundActivityExist(ctx context.Context, arg DoesInboundActivityExistParams) (int64, error) {
+	row := q.db.QueryRowContext(ctx, doesInboundActivityExist, arg.Iri, arg.Actor, arg.Type)
+	var count int64
+	err := row.Scan(&count)
+	return count, err
+}
+
+const getFederationFollowerApprovalRequests = `-- name: GetFederationFollowerApprovalRequests :many
+SELECT iri, inbox, name, username, image, created_at FROM ap_followers WHERE approved_at IS null AND disabled_at is null
+`
+
+type GetFederationFollowerApprovalRequestsRow struct {
+	Iri       string
+	Inbox     string
+	Name      sql.NullString
+	Username  string
+	Image     sql.NullString
+	CreatedAt sql.NullTime
+}
+
+func (q *Queries) GetFederationFollowerApprovalRequests(ctx context.Context) ([]GetFederationFollowerApprovalRequestsRow, error) {
+	rows, err := q.db.QueryContext(ctx, getFederationFollowerApprovalRequests)
+	if err != nil {
+		return nil, err
+	}
+	defer rows.Close()
+	var items []GetFederationFollowerApprovalRequestsRow
+	for rows.Next() {
+		var i GetFederationFollowerApprovalRequestsRow
+		if err := rows.Scan(
+			&i.Iri,
+			&i.Inbox,
+			&i.Name,
+			&i.Username,
+			&i.Image,
+			&i.CreatedAt,
+		); err != nil {
+			return nil, err
+		}
+		items = append(items, i)
+	}
+	if err := rows.Close(); err != nil {
+		return nil, err
+	}
+	if err := rows.Err(); err != nil {
+		return nil, err
+	}
+	return items, nil
+}
+
+const getFederationFollowersWithOffset = `-- name: GetFederationFollowersWithOffset :many
+SELECT iri, inbox, name, username, image, created_at FROM ap_followers WHERE approved_at is not null LIMIT $1 OFFSET $2
+`
+
+type GetFederationFollowersWithOffsetParams struct {
+	Limit  int32
+	Offset int32
+}
+
+type GetFederationFollowersWithOffsetRow struct {
+	Iri       string
+	Inbox     string
+	Name      sql.NullString
+	Username  string
+	Image     sql.NullString
+	CreatedAt sql.NullTime
+}
+
+func (q *Queries) GetFederationFollowersWithOffset(ctx context.Context, arg GetFederationFollowersWithOffsetParams) ([]GetFederationFollowersWithOffsetRow, error) {
+	rows, err := q.db.QueryContext(ctx, getFederationFollowersWithOffset, arg.Limit, arg.Offset)
+	if err != nil {
+		return nil, err
+	}
+	defer rows.Close()
+	var items []GetFederationFollowersWithOffsetRow
+	for rows.Next() {
+		var i GetFederationFollowersWithOffsetRow
+		if err := rows.Scan(
+			&i.Iri,
+			&i.Inbox,
+			&i.Name,
+			&i.Username,
+			&i.Image,
+			&i.CreatedAt,
+		); err != nil {
+			return nil, err
+		}
+		items = append(items, i)
+	}
+	if err := rows.Close(); err != nil {
+		return nil, err
+	}
+	if err := rows.Err(); err != nil {
+		return nil, err
+	}
+	return items, nil
+}
+
+const getFollowerByIRI = `-- name: GetFollowerByIRI :one
+SELECT iri, inbox, name, username, image, request, created_at, approved_at, disabled_at FROM ap_followers WHERE iri = $1
+`
+
+func (q *Queries) GetFollowerByIRI(ctx context.Context, iri string) (ApFollower, error) {
+	row := q.db.QueryRowContext(ctx, getFollowerByIRI, iri)
+	var i ApFollower
+	err := row.Scan(
+		&i.Iri,
+		&i.Inbox,
+		&i.Name,
+		&i.Username,
+		&i.Image,
+		&i.Request,
+		&i.CreatedAt,
+		&i.ApprovedAt,
+		&i.DisabledAt,
+	)
+	return i, err
+}
+
+const getFollowerCount = `-- name: GetFollowerCount :one
+
+
+SElECT count(*) FROM ap_followers WHERE approved_at is not null
+`
+
+// Queries added to query.sql must be compiled into Go code with sqlc. Read README.md for details.
+// Federation related queries.
+func (q *Queries) GetFollowerCount(ctx context.Context) (int64, error) {
+	row := q.db.QueryRowContext(ctx, getFollowerCount)
+	var count int64
+	err := row.Scan(&count)
+	return count, err
+}
+
+const getInboundActivitiesWithOffset = `-- name: GetInboundActivitiesWithOffset :many
+SELECT iri, actor, type, timestamp FROM ap_accepted_activities ORDER BY timestamp DESC LIMIT $1 OFFSET $2
+`
+
+type GetInboundActivitiesWithOffsetParams struct {
+	Limit  int32
+	Offset int32
+}
+
+type GetInboundActivitiesWithOffsetRow struct {
+	Iri       string
+	Actor     string
+	Type      string
+	Timestamp time.Time
+}
+
+func (q *Queries) GetInboundActivitiesWithOffset(ctx context.Context, arg GetInboundActivitiesWithOffsetParams) ([]GetInboundActivitiesWithOffsetRow, error) {
+	rows, err := q.db.QueryContext(ctx, getInboundActivitiesWithOffset, arg.Limit, arg.Offset)
+	if err != nil {
+		return nil, err
+	}
+	defer rows.Close()
+	var items []GetInboundActivitiesWithOffsetRow
+	for rows.Next() {
+		var i GetInboundActivitiesWithOffsetRow
+		if err := rows.Scan(
+			&i.Iri,
+			&i.Actor,
+			&i.Type,
+			&i.Timestamp,
+		); err != nil {
+			return nil, err
+		}
+		items = append(items, i)
+	}
+	if err := rows.Close(); err != nil {
+		return nil, err
+	}
+	if err := rows.Err(); err != nil {
+		return nil, err
+	}
+	return items, nil
+}
+
+const getLocalPostCount = `-- name: GetLocalPostCount :one
+SElECT count(*) FROM ap_outbox
+`
+
+func (q *Queries) GetLocalPostCount(ctx context.Context) (int64, error) {
+	row := q.db.QueryRowContext(ctx, getLocalPostCount)
+	var count int64
+	err := row.Scan(&count)
+	return count, err
+}
+
+const getObjectFromOutboxByID = `-- name: GetObjectFromOutboxByID :one
+SELECT value FROM ap_outbox WHERE iri = $1
+`
+
+func (q *Queries) GetObjectFromOutboxByID(ctx context.Context, iri string) ([]byte, error) {
+	row := q.db.QueryRowContext(ctx, getObjectFromOutboxByID, iri)
+	var value []byte
+	err := row.Scan(&value)
+	return value, err
+}
+
+const getObjectFromOutboxByIRI = `-- name: GetObjectFromOutboxByIRI :one
+SELECT value, live_notification, created_at FROM ap_outbox WHERE iri = $1
+`
+
+type GetObjectFromOutboxByIRIRow struct {
+	Value            []byte
+	LiveNotification sql.NullBool
+	CreatedAt        sql.NullTime
+}
+
+func (q *Queries) GetObjectFromOutboxByIRI(ctx context.Context, iri string) (GetObjectFromOutboxByIRIRow, error) {
+	row := q.db.QueryRowContext(ctx, getObjectFromOutboxByIRI, iri)
+	var i GetObjectFromOutboxByIRIRow
+	err := row.Scan(&i.Value, &i.LiveNotification, &i.CreatedAt)
+	return i, err
+}
+
+const getOutboxWithOffset = `-- name: GetOutboxWithOffset :many
+SELECT value FROM ap_outbox LIMIT $1 OFFSET $2
+`
+
+type GetOutboxWithOffsetParams struct {
+	Limit  int32
+	Offset int32
+}
+
+func (q *Queries) GetOutboxWithOffset(ctx context.Context, arg GetOutboxWithOffsetParams) ([][]byte, error) {
+	rows, err := q.db.QueryContext(ctx, getOutboxWithOffset, arg.Limit, arg.Offset)
+	if err != nil {
+		return nil, err
+	}
+	defer rows.Close()
+	var items [][]byte
+	for rows.Next() {
+		var value []byte
+		if err := rows.Scan(&value); err != nil {
+			return nil, err
+		}
+		items = append(items, value)
+	}
+	if err := rows.Close(); err != nil {
+		return nil, err
+	}
+	if err := rows.Err(); err != nil {
+		return nil, err
+	}
+	return items, nil
+}
+
+const getRejectedAndBlockedFollowers = `-- name: GetRejectedAndBlockedFollowers :many
+SELECT iri, name, username, image, created_at, disabled_at FROM ap_followers WHERE disabled_at is not null
+`
+
+type GetRejectedAndBlockedFollowersRow struct {
+	Iri        string
+	Name       sql.NullString
+	Username   string
+	Image      sql.NullString
+	CreatedAt  sql.NullTime
+	DisabledAt sql.NullTime
+}
+
+func (q *Queries) GetRejectedAndBlockedFollowers(ctx context.Context) ([]GetRejectedAndBlockedFollowersRow, error) {
+	rows, err := q.db.QueryContext(ctx, getRejectedAndBlockedFollowers)
+	if err != nil {
+		return nil, err
+	}
+	defer rows.Close()
+	var items []GetRejectedAndBlockedFollowersRow
+	for rows.Next() {
+		var i GetRejectedAndBlockedFollowersRow
+		if err := rows.Scan(
+			&i.Iri,
+			&i.Name,
+			&i.Username,
+			&i.Image,
+			&i.CreatedAt,
+			&i.DisabledAt,
+		); err != nil {
+			return nil, err
+		}
+		items = append(items, i)
+	}
+	if err := rows.Close(); err != nil {
+		return nil, err
+	}
+	if err := rows.Err(); err != nil {
+		return nil, err
+	}
+	return items, nil
+}
+
+const rejectFederationFollower = `-- name: RejectFederationFollower :exec
+UPDATE ap_followers SET approved_at = null, disabled_at = $1 WHERE iri = $2
+`
+
+type RejectFederationFollowerParams struct {
+	DisabledAt sql.NullTime
+	Iri        string
+}
+
+func (q *Queries) RejectFederationFollower(ctx context.Context, arg RejectFederationFollowerParams) error {
+	_, err := q.db.ExecContext(ctx, rejectFederationFollower, arg.DisabledAt, arg.Iri)
+	return err
+}
+
+const removeFollowerByIRI = `-- name: RemoveFollowerByIRI :exec
+DELETE FROM ap_followers WHERE iri = $1
+`
+
+func (q *Queries) RemoveFollowerByIRI(ctx context.Context, iri string) error {
+	_, err := q.db.ExecContext(ctx, removeFollowerByIRI, iri)
+	return err
+}
+
+const updateFollowerByIRI = `-- name: UpdateFollowerByIRI :exec
+UPDATE ap_followers SET inbox = $1, name = $2, username = $3, image = $4 WHERE iri = $5
+`
+
+type UpdateFollowerByIRIParams struct {
+	Inbox    string
+	Name     sql.NullString
+	Username string
+	Image    sql.NullString
+	Iri      string
+}
+
+func (q *Queries) UpdateFollowerByIRI(ctx context.Context, arg UpdateFollowerByIRIParams) error {
+	_, err := q.db.ExecContext(ctx, updateFollowerByIRI,
+		arg.Inbox,
+		arg.Name,
+		arg.Username,
+		arg.Image,
+		arg.Iri,
+	)
+	return err
+}
--- a/db/schema.sql
+++ b/db/schema.sql
@@ -0,0 +1,37 @@
+-- Schema update to query.sql must be referenced in queries located in query.sql
+-- and compiled into code with sqlc. Read README.md for details.
+
+CREATE TABLE IF NOT EXISTS ap_followers (
+		"iri" TEXT NOT NULL,
+		"inbox" TEXT NOT NULL,
+		"name" TEXT,
+		"username" TEXT NOT NULL,
+		"image" TEXT,
+    "request" TEXT NOT NULL,
+		"created_at" TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+		"approved_at" TIMESTAMP,
+    "disabled_at" TIMESTAMP,
+		PRIMARY KEY (iri));
+		CREATE INDEX iri_index ON ap_followers (iri);
+    CREATE INDEX approved_at_index ON ap_followers (approved_at);
+
+
+CREATE TABLE IF NOT EXISTS ap_outbox (
+		"iri" TEXT NOT NULL,
+		"value" BLOB,
+		"type" TEXT NOT NULL,
+		"created_at" TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+    "live_notification" BOOLEAN DEFAULT FALSE,
+		PRIMARY KEY (iri));
+		CREATE INDEX iri ON ap_outbox (iri);
+		CREATE INDEX type ON ap_outbox (type);
+    CREATE INDEX live_notification ON ap_outbox (live_notification);
+
+CREATE TABLE IF NOT EXISTS ap_accepted_activities (
+    "id" INTEGER NOT NULL PRIMARY KEY,
+		"iri" TEXT NOT NULL,
+    "actor" TEXT NOT NULL,
+    "type" TEXT NOT NULL,
+		"timestamp" TIMESTAMP NOT NULL
+	);
+	CREATE INDEX iri_actor_index ON ap_accepted_activities (iri,actor);