Untitled attachment

Notices where this attachment appears

1. Embed this notice
   silverpill (silverpill@mitra.social)'s status on Monday, 10-Feb-2025 05:49:50 JST silverpill

   in reply to

   @mariusor It is not invalid, just unusual.

   I enabled detailed logging on my server and posted an activity via C2S API as you suggested.

   It appears that POST requests are signed by https://federated.id/#main. My server tries to load the https://federated.id/ actor and rejects it because it doesn't have a preferredUsername property (not required by AP, but very common and my server needs it). My server also expects signing key to be owned by activity actor, but I can change that if needed (same origin is ok). Finally, https://federated.id/#main is an RSA key :)