A reasonably practical guide to validating RFC 9421 HTTP Signatures for ActivityPub in PHP
ActivityBot ActivityPub mastodon php webdev · 900 words
If you're reading this, you've probably been hitting your head against a brick wall trying to parse and decipher the new HTTP Signatures sent by Mastodon and other Fediverse servers. This is a basic and somewhat incomplete guide to accepting these signatures. I'm sure there are various gotchas, but it works with the signatures I've seen in the wild. Shut Up And Show Me The Code! OK, wow, no…
Continue reading →