Return 401s when logged out of more activitypub api endpoints (#750)

Co-authored-by: slothful-vassal <89943360+slothful-vassal@users.noreply.github.com>

db/federation/actor.go

@@ -4,6 +4,7 @@ import (
 	"crypto/x509"
 	"database/sql"
 	"encoding/json"
+	"errors"
 	"fmt"
 	"net/http"
 	"net/url"
@@ -19,6 +20,8 @@ import (
 	"github.com/pocketbase/pocketbase/tools/security"
 )
 
+var ErrProfilePrivate = errors.New("profile is private")
+
 type WebfingerResponse struct {
 	Subject string `json:"subject"`
 	Links   []struct {
@@ -220,7 +223,7 @@ func assembleActor(actor *core.Record, dbActor *core.Record, app core.App, inclu
 	}
 
 	if private {
-		return dbActor, fmt.Errorf("profile is private")
+		return dbActor, ErrProfilePrivate
 	}
 
 	return dbActor, nil
@@ -361,7 +364,7 @@ func FetchCollection(actor *core.Record, url string) (*pub.OrderedCollection, er
 	}
 	if resp.StatusCode != http.StatusOK {
 		if resp.StatusCode == http.StatusNotFound {
-			return nil, fmt.Errorf("profile is private")
+			return nil, ErrProfilePrivate
 		}
 		return nil, fmt.Errorf("collection fetch %s returned: %v", url, resp.StatusCode)
 	}

db/main.go

@@ -3,6 +3,7 @@ package main
 import (
 	"database/sql"
 	"encoding/json"
+	"errors"
 	"fmt"
 	"log"
 	"net/http"
@@ -1166,7 +1167,7 @@ func registerRoutes(se *core.ServeEvent, client meilisearch.ServiceManager) {
 			}
 			return err
 		} else if err != nil && actor != nil {
-			if err.Error() == "profile is private" {
+			if errors.Is(err, federation.ErrProfilePrivate) {
 				// this is our own profile
 				if e.Auth != nil && actor.GetString("user") == e.Auth.Id {
 					return e.JSON(http.StatusOK, map[string]any{"actor": actor, "error": nil})
@@ -1214,7 +1215,7 @@ func registerRoutes(se *core.ServeEvent, client meilisearch.ServiceManager) {
 		}
 		collection, err := federation.FetchCollection(userActor, fmt.Sprintf("%s?page=%d", url, intPage))
 		if err != nil {
-			if err.Error() == "profile is private" {
+			if errors.Is(err, federation.ErrProfilePrivate) {
 				return e.JSON(http.StatusNotFound, map[string]any{"error": "profile is private"})
 			}
 			return err