search

fediverse-devnet / feditest-tests-fediverse

The tests for the fediverse testsuite
MIT License
5 stars 4 forks source link

`Create` should check signature actor #32

Open snarfed opened 3 months ago

snarfed commented 3 months ago

Similar to #30: when you get a Create, you should check that the object's attributedTo is the same actor that owns the key used in the activity's signature, usually an HTTP Signature.

Background: https://www.w3.org/wiki/SocialCG/ActivityPub/Authentication_Authorization