hj/pleroma
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
pleroma/changelog.d/ap-c2s-oauth-scopes.security

1 line
122 B
Text
Raw Normal View History

fix(activitypub): check OAuth scopes on C2S endpoints The C2S routes and the outbox/followers/following/replies collections accepted a token with any scope. Requests with an OAuth token now need the matching scope; HTTP signatures and Basic auth are not changed.
2026-10-26 12:46:59 +04:00
Check OAuth token scopes on the ActivityPub C2S endpoints; posting to the outbox with a token now needs the `write` scope
Reference in a new issue Copy permalink