Conversation

@J12t #ActivityPub test case:

Claim: An instance should reject an unsigned POST request to a user inbox

Expected: The Activity should not be appended to the user inbox.

Observed: The application promptly crashed because it did not anticipate the possibility of someone sending in an unsigned POST to the inbox... but also the activity was not added to the inbox.

Result: ✅

😆

/cc @helge