Lain Soykaf e5481b4c28 fix(federation): enforce the signature policy on incoming requests ... HTTPSignaturePlug checks the policy before the cryptographic check. A signed GET that fails it counts as unsigned; the inbox answers 401 to a POST that fails it instead of queueing a failed-signature retry, which only re-checks the signature. signature_policy: :log only logs. Based on Akkoma's HTTP signature hardening.		2026-10-27 21:46:40 +04:00
..
mix	Fix malformed is_active qualifiers in User.Query usages	2026-10-27 17:24:58 +04:00
pleroma	fix(federation): enforce the signature policy on incoming requests	2026-10-27 21:46:40 +04:00