@mario 61cf explains how to log in to "target" instance using "home" credentials, but I can't follow the algorithm past this step:
>2. The /magic endpoint at the user's home instance first checks that the user is logged in.
How does it check that the user is logged in? Does it present a login form?
And then, after login, which instance generates activities?
What URI is being put into actor field of activity, and what URI is being put into keyId parameter of HTTP signature?
cc @fentiger