Changeset d0cab9d in Klonkt for src/routes/posts.js

Timestamp:

06/24/2026 03:59:47 PM (3 months ago)

Author:

Robin Genis <roboburr@…>

Branches:

main

Children:

f5c3870

Parents:

00f669b

Message:

feat(security): enforce HTTP signatures on the inbox

Data-affecting activities (Create/Like/Announce/Follow/Delete/Undo/Accept/Reject)
must now carry a valid HTTP signature whose signer matches the claimed actor —
else 401. Stops forged replies/likes/follows/timeline posts. Discovery (GET) open.

Co-Authored-By: Claude <noreply@…>

(No files)