ActivityPub (Docker, self hosted): cannot access dashboard

Hi folks! My “Network” tab in the Ghost admin panel is throwing an error:

I took a look through my Docker logs, and am getting “Error verifying JWT” followed by “User role Anonymous is not allowed to access this resource”, after which I’m getting 404’d.

My guess is that something in the ActivityPub plugin isn’t handing out the correct access token? I’m the only site owner and there’s no staff- I’m wondering if that’s not where my bug is?

I figured the bug report might be valuable. Thanks all!


Steps to Reproduce

  1. Sign in to Ghost
  2. Click on the “Network” menu option to access ActivityPub

Setup information

Ghost Version
Installed via Docker, Ghost version 6.71.0

Node.js Version
v22.23.3 (via Docker)

How did you install Ghost?
Docker install per the self-hosting instructions at How To Install Ghost With Docker (preview) - Ghost Developer Docs (new install, not a migration)

Provide details of your host & operating system
Debian 13 (Trixie), Docker 29.9.1

Database type
MySQL 8

Browser & OS version
Firefox 158 as well as Chromium 154

Relevant log / error output

18:53:59.225 ERR activitypub: Error verifying JWT
18:53:59.230 ERR activitypub: Error verifying JWT
18:53:59.236 ERR activitypub: Error verifying JWT
18:53:59.241 ERR activitypub: Error verifying JWT
18:53:59.246 ERR activitypub: User role 'Anonymous' is not allowed to access this resource
18:53:59.248 ERR activitypub: User role 'Anonymous' is not allowed to access this resource
18:53:59.251 ERR activitypub: User role 'Anonymous' is not allowed to access this resource
18:53:59.252 WRN fedify·federation·http: 'GET' '/.ghost/activitypub/v1/recommendations?limit=3': 404
18:53:59.268 ERR activitypub: Error verifying JWT
18:53:59.269 ERR activitypub: Error verifying JWT
18:53:59.270 ERR activitypub: Error verifying JWT
18:53:59.272 WRN fedify·federation·http: 'GET' '/.ghost/activitypub/v1/topics': 404
18:53:59.273 WRN fedify·federation·http: 'GET' '/.ghost/activitypub/v1/preferences': 404
18:53:59.278 WRN fedify·federation·actor: You configured inbox listeners, but the actor does not have a endpoints.sharedInbox property.  Set the property with Context.getInboxUri().
18:53:59.278 WRN fedify·federation·actor: You configured a key pairs dispatcher, but the actor does not have an assertionMethod property.  Set the property with Context.getActorKeyPairs(identifier).

Ghost has changed some stuff in the way tokens are verified lately. That also affects the ActivityPub sidecar.

Have you updated that lately? If not, I’d try that. Chances are that’ll make things work again.

Yup, that was it. I hadn’t performed a git pull and was pulling the newest Ghost but the older ActivityPub container. Things appear to be working as expected, thanks for the tip!