go-fed / apcore

Golang ActivityPub Server Framework
GNU Affero General Public License v3.0
104 stars 10 forks source link

Fix scope checking for GetOutbox in actor #48

Open cjslep opened 3 years ago

cjslep commented 3 years ago

Reviewing the go-fed/activity integration, in common there is the issue where the common utility function authenticateGetRequest is hardcoded to ask for the GetInbox scope, and never the GetOutbox scope. Both auths for GetInbox and GetOutbox call into this helper, so the GetOutbox is incorrect.