When double-knocking for RFC 9421, Lemmy will respond with a 400 Bad Request
, so I need to check that as well as a 401 in order to figure out if I should send a follow-up cavage-12 request.
In other news, I still have not debugged why only POST requests are not valid on Mastodon for RFC 9421. There is something unique about comparing the signatures when only content-digest
is included, but it is not the digest itself because otherwise Mastodon would raise a validation error earlier. At the moment, only one Mastodon instance I federate with is accepting those requests anyway. Hopefully the error messages aren't too bad.
Read more →