🚀 Private Feeds & Follow-Acceptance with Pinata-backed Private Storage (MVP)#

Labels: feature, privacy, storage, MVP

Summary#

Introduce private feeds and a follow-acceptance flow for Community Stream, using Pinata’s private filesystem for secure media storage. Approved followers gain time-limited access via signed tokens, enabling privacy-aware PDS hosting.

Goals#

• Implement followers-only visibility for posts and media.
• Add follow request → approval workflow.
• Store private media in Pinata private FS.
• Grant access via short-lived JWTs/signed URLs for Pinata gateway.
• Deliver a minimal web client showing private feeds for approved followers.

Architecture#

graph TD
    subgraph "Community Stream"
        A[PDS Instance (per tenant)]
        B[Privacy Service]
        C[Database: follows, ACL, tokens]
    end

    subgraph "Pinata"
        D[Private FS Namespace (per user)]
        E[Private Gateway]
    end

    subgraph "Clients"
        F[Web App / Bluesky-compatible Client]
    end

    F -->|Login + DID session| A
    F -->|Follow/Approve API| B
    F -->|Private Feed + Token Request| B
    B -->|ACL Check + Token Issue| C
    B -->|Media Upload| D
    F -->|Fetch Private Media (JWT)| E
    D --> E