PeerTube issueshttps://framagit.org/groups/framasoft/peertube/-/issues2024-02-23T14:20:12Zhttps://framagit.org/framasoft/peertube/official-plugins/-/issues/69peertube-plugin-akismet: Check for spam in profiles2024-02-23T14:20:12Zkontrollantenpeertube-plugin-akismet: Check for spam in profilesIt seems to common that spammers create accounts and add links to different sites, without posting any comments.
To handle this it would be nice if this plugin could spam check profile updates as well.
The question is what the plugin s...It seems to common that spammers create accounts and add links to different sites, without posting any comments.
To handle this it would be nice if this plugin could spam check profile updates as well.
The question is what the plugin should do when spam is detected? Just disallow the updated profile description? Maybe the account should be flagged as potential spammer and a notification could be sent to admins whom can decide whether to delete the account or not.https://framagit.org/framasoft/peertube/official-plugins/-/issues/67peertube-plugin-auth-openid-connect: end_session_endpoint support2024-02-07T11:50:25ZSteelAlloypeertube-plugin-auth-openid-connect: end_session_endpoint supportCurrently, logout via openid connect is not a fully functional process. If you check the "remember me" checkbox on an oidc provider, when you log out of peertube you can't log out properly or switch accounts. If you click on login again,...Currently, logout via openid connect is not a fully functional process. If you check the "remember me" checkbox on an oidc provider, when you log out of peertube you can't log out properly or switch accounts. If you click on login again, you'll be reconnected directly to your previous account.
The missing element is support for `end_session_endpoint`, which enables the provider to correctly disconnect the user. Documentation for openid-client is available here https://github.com/panva/node-openid-client/blob/main/docs/README.md#clientendsessionurlparameters
Official docs here https://openid.net/specs/openid-connect-rpinitiated-1_0.html#RPLogout
I'm willing to work on this issue, but in order to comply with the specs we need to retain the id_token issued for the session. This is one of the parameters (`id_token_hint`) used to disconnect the user.
I'd like to know the best approach for this: should it be retained in the `PluginStorageManager`?https://framagit.org/framasoft/peertube/official-plugins/-/issues/66Akismet: Check already created comments/users2024-01-03T15:52:13ZkontrollantenAkismet: Check already created comments/usersSince some instances has a lot of spam users before installing the Akismet API it would be good to have the possibility to check already created comments and users. Since Akismet API has an API call limit it would be great if the admin h...Since some instances has a lot of spam users before installing the Akismet API it would be good to have the possibility to check already created comments and users. Since Akismet API has an API call limit it would be great if the admin has the possibility to limit how many "historical checks" should be done each month. A more sophisticated solution would be if the plugin would check the [usage API](https://akismet.com/developers/detailed-docs/usage-limit/) the last day of the month and use 90% of the API calls to check the history.https://framagit.org/framasoft/peertube/joinpeertube/-/issues/63better show rtl strings in peertube with english layout2023-12-02T21:27:09Zss mnsbetter show rtl strings in peertube with english layoutI prefer to use peer-tube in English language but the title and some description of my videos written in Persian (a RTL language).
so, in English layout my title and etc not shown correctly. i suggestion add `dir=auto` attribute to `<te...I prefer to use peer-tube in English language but the title and some description of my videos written in Persian (a RTL language).
so, in English layout my title and etc not shown correctly. i suggestion add `dir=auto` attribute to `<textarea>`, `<input>`, `<p>`,`<h1>`-`<h6>` elements in HTML and also add the below code to global CSS file :
```
:dir(rtl){
text-align:right;
}
```https://framagit.org/framasoft/peertube/search-index/-/issues/54Add sorting by views, likes and comments2023-12-05T07:27:51ZHauiAdd sorting by views, likes and comments**Preamble**
Using sepiasearch.org is my main way of discovering new channels and instances to follow. Imo, one reason peertube gets discarded in public opinion is for the "lack of content" which is untrue. It is the discoverability that...**Preamble**
Using sepiasearch.org is my main way of discovering new channels and instances to follow. Imo, one reason peertube gets discarded in public opinion is for the "lack of content" which is untrue. It is the discoverability that is severely lacking [Source](https://lemmy.giftedmc.com/comment/181391). People cant just type in a search term and find the best video for them.
**Issue**
A lot of the videos are not relevant to me/my instance.
**Expected behaviour**
Assuming a video best fitting the search term would get more views, upvotes and a controversial video (which some people would want to see) get more comments. As the sorting says "best match" I would assume it shows me content that fits my search term best.
**Suggestion**
Add sorting by amount of views, likes, dislikes and amount of comments. Maybe add filter (minimum/maximum amount of views, likes, comments). Optionally adding these numbers into "best match" sorting.https://framagit.org/framasoft/peertube/search-index/-/issues/52Open result in own instance2023-11-06T07:54:35ZDavid BOpen result in own instanceHello,
so on peertube I can watch videos from other instances, but in the context of my instance.
So I can directly like, comment and subscribe.
When I find an interesting video on sepiasearch, it will send me to another instance. In ...Hello,
so on peertube I can watch videos from other instances, but in the context of my instance.
So I can directly like, comment and subscribe.
When I find an interesting video on sepiasearch, it will send me to another instance. In order to interact, I will need to copy the url and paste it into the search bar on my own instance.
It would be nice if on sepiasearch.org you could define your own instance and then be directly send to it, instead of the foreign one.
David.https://framagit.org/framasoft/peertube/official-plugins/-/issues/64peertube-plugin-auth-openid-connect: jwt expires on login2023-10-02T11:39:03Zxundeenergiepeertube-plugin-auth-openid-connect: jwt expires on loginI updated my peertube to 5.2.1. Then my openid plugin did not work. It produced an error (could not show the /about page).
Updating the plugin did not work too... so i de- and reinstalled it. This worked.
But now i can not login via ope...I updated my peertube to 5.2.1. Then my openid plugin did not work. It produced an error (could not show the /about page).
Updating the plugin did not work too... so i de- and reinstalled it. This worked.
But now i can not login via openid any more.
I run my own keycloak-instance and i get this error in peertube-log
```
Sep 11 08:16:14 tube peertube[300504]: [kino.schuerz.at:443 peertube-plugin-auth-openid-connect] 2023-09-11 08:16:14.752 error: Error in handle callback. {
Sep 11 08:16:14 tube peertube[300504]: "err": {
Sep 11 08:16:14 tube peertube[300504]: "stack": "RPError: JWT expired, now 1694412974, exp 1694412972\n at Client.validateJWT (/var/www/peertube/storage/plugins/node_modules/openid-client/lib/client.js:956:15)\n at Client.validateIdToken (/var/www/peertube/storage/plugins/node_modules/openid-client/lib/client.js:745:60)\n at Client.callback (/var/www/peertube/storage/plugins/node_modules/openid-client/lib/client.js:488:18)\n at process.processTicksAndRejections (node:internal/process/task_queues:95:5)\n at async handleCb (/var/www/peertube/storage/plugins/node_modules/peertube-plugin-auth-openid-connect/main.js:270:22)",
Sep 11 08:16:14 tube peertube[300504]: "message": "JWT expired, now 1694412974, exp 1694412972",
Sep 11 08:16:14 tube peertube[300504]: "now": 1694412974,
Sep 11 08:16:14 tube peertube[300504]: "tolerance": 0,
Sep 11 08:16:14 tube peertube[300504]: "exp": 1694412972,
Sep 11 08:16:14 tube peertube[300504]: "jwt": "aVeryLong.....JWT",
Sep 11 08:16:14 tube peertube[300504]: "name": "RPError"
Sep 11 08:16:14 tube peertube[300504]: }
Sep 11 08:16:14 tube peertube[300504]: }
```
The exp-timestamp is on each login-try the same or 1-2 seconds before "now"-timestamp in the "message"-field.
This is a blocker!https://framagit.org/framasoft/peertube/official-plugins/-/issues/63peertube-plugin-auth-openid-connect: Account Takeover by E-Mail Change2023-09-02T14:44:10ZDominik Georgepeertube-plugin-auth-openid-connect: Account Takeover by E-Mail ChangePeertube uses the e-mail address as the primary and only identification factor when relating external OpenID Connect identities to local accounts. This results in a possible account takeover if the OIDC provider allows changing the e-mai...Peertube uses the e-mail address as the primary and only identification factor when relating external OpenID Connect identities to local accounts. This results in a possible account takeover if the OIDC provider allows changing the e-mail address.
Using the e-mail address alone means that if the authentication provider allows changing the e-mail address of an account, the Peertube account can immediately be hijacked.
In OpenID Connect, the only field ever used to reliably identify a user is the `sub` field (OIDC subject), as laid out by the [OpenID Connect Basic Client Implementer's Guide](https://openid.net/specs/openid-connect-basic-1_0.html#ClaimStability):
> The sub (subject) and iss (issuer) Claims, used together, are the only Claims that an RP can rely upon as a stable identifier for the End-User, since the sub Claim MUST be locally unique and never reassigned within the Issuer for a particular End-User, as described in [Section 2.2](https://openid.net/specs/openid-connect-basic-1_0.html#IDToken). Therefore, the only guaranteed unique identifier for a given End-User is the combination of the iss Claim and the sub Claim.
>
> All other Claims carry no such guarantees across different issuers in terms of stability over time or uniqueness across users, and Issuers are permitted to apply local restrictions and policies. For instance, an Issuer MAY re-use an email Claim Value across different End-Users at different points in time, and the claimed email address for a given End-User MAY change over time. Therefore, other Claims such as email, phone_number, and preferred_username and **MUST NOT** be used as unique identifiers for the End-User.
All users logging in through OIDC are affected. The severity is medium, as it also requires the OIDC provider to misbehave.
However, some well-known OIDC providers (like Microsoft Azure) make it very easy to accidentally allow unverified e-mail changes. Moreover, OpenID Connect also allows dybamic client registration. Ideally, at some point, Peertube instances should allow login using an arbitrary OIDC identifier connected to a user via Webfinger. Although Peertube does not allow this right now, the issue should be solved before it at some point does.https://framagit.org/framasoft/peertube/documentation/-/issues/24Cannot create merge request2023-03-20T09:31:52ZElam MONNOTCannot create merge requestI asked as a comment reply in my previous issue but got no response. My commit is ready but I can't push because I dont have rights to do so.
I really want to contribute to the PeerTube project and will be pleased to be able to :smile:I asked as a comment reply in my previous issue but got no response. My commit is ready but I can't push because I dont have rights to do so.
I really want to contribute to the PeerTube project and will be pleased to be able to :smile:https://framagit.org/framasoft/peertube/documentation/-/issues/23Add Helm chart for PeerTube v5.0.12023-03-15T07:59:50ZElam MONNOTAdd Helm chart for PeerTube v5.0.1I have created a helm chart for PeerTube v5.0.1 and wanted to contribute.
[I have allready spoked with Chocobuzzz about my contribution.](https://github.com/Chocobozzz/PeerTube/issues/5685)
I want to make a merge request containing link ...I have created a helm chart for PeerTube v5.0.1 and wanted to contribute.
[I have allready spoked with Chocobuzzz about my contribution.](https://github.com/Chocobozzz/PeerTube/issues/5685)
I want to make a merge request containing link to my [Helm chart](https://github.com/Elam-Monnot/Peertube-helm) and proper credit to [LecygneNoir](https://git.lecygnenoir.info/LecygneNoir).
Thanks a lot :smile:https://framagit.org/framasoft/peertube/official-plugins/-/issues/60Akismet: submit false positives?2024-03-05T12:16:49ZFlorentAkismet: submit false positives?We have regularly the same kind of spam against which we struggle.
It would be neat that, when banning an account or suppressing a spam comment, to be able to report that as a false-negative to Akismet.
https://github.com/chrisfosterel...We have regularly the same kind of spam against which we struggle.
It would be neat that, when banning an account or suppressing a spam comment, to be able to report that as a false-negative to Akismet.
https://github.com/chrisfosterelli/akismet-api#submitting-false-negativeshttps://framagit.org/framasoft/peertube/official-plugins/-/issues/59peertube-plugin-video-annotation / Annotation in the middle by default2023-02-15T06:32:25ZUstimpeertube-plugin-video-annotation / Annotation in the middle by defaultHi! I want to make the annotation appear at the top in the center by default, and not on the right.
How do I do this?Hi! I want to make the annotation appear at the top in the center by default, and not on the right.
How do I do this?https://framagit.org/framasoft/peertube/official-plugins/-/issues/57peertube-plugin-video-annotation Enhancement: add common input for all videos2023-02-07T05:50:08ZGuillaume Desjardinspeertube-plugin-video-annotation Enhancement: add common input for all videosThat would be awesome to add an annotation input field in the admin section so we can add the same annotation on all of the videos.
Even more awesome: Add a annotation input field in the channel settings, so we can add the same annotatio...That would be awesome to add an annotation input field in the admin section so we can add the same annotation on all of the videos.
Even more awesome: Add a annotation input field in the channel settings, so we can add the same annotation on all videos of this channel.https://framagit.org/framasoft/peertube/official-plugins/-/issues/56Add multiple LDAP sources for peertube-plugin-auth-ldap2022-12-09T08:46:26ZStormkoopaAdd multiple LDAP sources for peertube-plugin-auth-ldapI would like to provide multiple sources for LDAP authentification since in our structure there is more than one domain where users want to enter our peertube instance from. Right now only users from one single domain can authenticate.I would like to provide multiple sources for LDAP authentification since in our structure there is more than one domain where users want to enter our peertube instance from. Right now only users from one single domain can authenticate.https://framagit.org/framasoft/peertube/search-index/-/issues/45Search by URL2022-11-28T09:04:13ZFlorentSearch by URLOn PeerTube, the native search can take a PeerTube URL to lookup for a specific video / channel / playlist.
It would be neat that the same feature exist for the search index, so we don't miss a feature of the native search.
How hard wo...On PeerTube, the native search can take a PeerTube URL to lookup for a specific video / channel / playlist.
It would be neat that the same feature exist for the search index, so we don't miss a feature of the native search.
How hard would it be to implement it?https://framagit.org/framasoft/peertube/joinpeertube/-/issues/57add PWA support2022-11-05T11:13:10ZKiara Grouwstraadd PWA supporti love the cross-instance search, and i've added it to my home screen on mobile.
it feels like that UX we can maybe still iterate on.
i think one improvement could be to add PWA support here, such this would no longer need to open a brow...i love the cross-instance search, and i've added it to my home screen on mobile.
it feels like that UX we can maybe still iterate on.
i think one improvement could be to add PWA support here, such this would no longer need to open a browser tab.
(a further step could perhaps be to have such a search accessible from the app.)https://framagit.org/framasoft/peertube/official-plugins/-/issues/54OpenID: Expected 200 OK, got 302 Found2023-07-21T05:35:32ZNormen HansenOpenID: Expected 200 OK, got 302 FoundHi, first of all thanks for this plugin.
While trying to use my NextCloud instance as an OpenID provider for Peertube I ran into a problem where apparently Peertube can't access the provider information because it expects a 200 OK.
```...Hi, first of all thanks for this plugin.
While trying to use my NextCloud instance as an OpenID provider for Peertube I ran into a problem where apparently Peertube can't access the provider information because it expects a 200 OK.
```
23:13:48 peertube_peertube_1[31485]: "err": {
23:13:48 peertube_peertube_1[31485]: "stack": "OPError: expected 200 OK, got: 302 Found\n at processResponse (/data/plugins/node_modules/openid-client/lib/helpers/process_
response.js:41:11)\n at Function.discover (/data/plugins/node_modules/openid-client/lib/issuer.js:179:18)\n at runMicrotasks (<anonymous>)\n at processTicksAndRejections
(node:internal/process/task_queues:96:5)\n at async loadSettingsAndCreateClient (/data/plugins/node_modules/peertube-plugin-auth-openid-connect/main.js:185:18)",
23:13:48 peertube_peertube_1[31485]: "message": "expected 200 OK, got: 302 Found",
23:13:48 peertube_peertube_1[31485]: "error": "expected 200 OK, got: 302 Found",
```
The configuration URL is at https://cloud.bitwaves.de/index.php/apps/oidc/openid-configuration and seems to be accessible just fine without any login, maybe peertube is a bit too strict here?
Cheers,
Normenhttps://framagit.org/framasoft/peertube/documentation/-/issues/20Document video channel synchronization2022-10-10T15:23:47ZFlorentDocument video channel synchronizationIt would be nice to document the video channel synchronization.
I made a document for internal usage only of my instance (in French):
https://yunohost.skeptikon.fr/nextcloud/s/KjrPsJHkpnP2oE8
If you think it would also be a nice idea, ...It would be nice to document the video channel synchronization.
I made a document for internal usage only of my instance (in French):
https://yunohost.skeptikon.fr/nextcloud/s/KjrPsJHkpnP2oE8
If you think it would also be a nice idea, I can adapt the documentation (and also make it available in English) and propose a PR so the documentation would benefit to everyone.https://framagit.org/framasoft/peertube/official-plugins/-/issues/51Matomo plugin limit to instance only option2022-09-30T22:27:17ZMike35538Matomo plugin limit to instance only optionIt seems my Matomo stats show all analytics from everywhere, example: visitor data on my instance, embeds on external sites etc.
I'm not sure where to do this but is there a way you can limit Matomo to gathering analytics from page/vide...It seems my Matomo stats show all analytics from everywhere, example: visitor data on my instance, embeds on external sites etc.
I'm not sure where to do this but is there a way you can limit Matomo to gathering analytics from page/video loads just on my instance. When it is collecting data from all of my video embeds on external websites it really adds a lot of visitor data which makes my Matomo paid subscription go up a lot.
Thankshttps://framagit.org/framasoft/peertube/plugin-index/-/issues/1plugins broken2022-09-20T13:19:11ZROBERT MCDOWELLplugins brokena non exhaustive list of broken non working or 404 homepage or host not found
hive-tube
videojs-vr
ungamify-plus
custome-page
background-play
beetoons-tv
hide-channels-in-search-result
telegram
player-api
vigilante-tva non exhaustive list of broken non working or 404 homepage or host not found
hive-tube
videojs-vr
ungamify-plus
custome-page
background-play
beetoons-tv
hide-channels-in-search-result
telegram
player-api
vigilante-tv