From 1984416e3efeb987c94cfefb44d800bc0521e415 Mon Sep 17 00:00:00 2001
From: dakkar <dakkar@thenautilus.net>
Date: Thu, 21 Dec 2023 18:17:19 +0000
Subject: [PATCH] authorized fetch: let /@instance.actor through

this is probably never actually used, but it still looks like a good
idea (also, FireFish does it)

thanks @ShittyKoper for noticing!
---
 packages/backend/src/server/ActivityPubServerService.ts | 1 +
 1 file changed, 1 insertion(+)

diff --git a/packages/backend/src/server/ActivityPubServerService.ts b/packages/backend/src/server/ActivityPubServerService.ts
index a0ad4a134..967a69cb7 100644
--- a/packages/backend/src/server/ActivityPubServerService.ts
+++ b/packages/backend/src/server/ActivityPubServerService.ts
@@ -131,6 +131,7 @@ export class ActivityPubServerService {
 			const instanceActor = await this.instanceActorService.getInstanceActor();
 
 			if (userId === instanceActor.id) return false;
+			if (userId === instanceActor.username) return false;
 		}
 
 		let signature;