From be347e674bf85b9f9b15fd3000766da671d6a74e Mon Sep 17 00:00:00 2001 From: Julian Lam Date: Mon, 30 Mar 2026 10:29:23 -0400 Subject: [PATCH] fix: loosen actor-matching check in Undo activity --- public/language/en-GB/error.json | 1 - src/activitypub/inbox.js | 4 ---- 2 files changed, 5 deletions(-) diff --git a/public/language/en-GB/error.json b/public/language/en-GB/error.json index 7ef3978faa..3a99dba7e1 100644 --- a/public/language/en-GB/error.json +++ b/public/language/en-GB/error.json @@ -307,6 +307,5 @@ "activitypub.get-failed": "Unable to retrieve the specified resource.", "activitypub.pubKey-not-found": "Unable to resolve public key, so payload verification cannot take place.", "activitypub.origin-mismatch": "The received object's origin does not match the sender's origin", - "activitypub.actor-mismatch": "The received activity is being carried out by an actor that is different from expected.", "activitypub.not-implemented": "The request was denied because it or an aspect of it is not implemented by the recipient server" } diff --git a/src/activitypub/inbox.js b/src/activitypub/inbox.js index bfa19d7823..c9dbf5192a 100644 --- a/src/activitypub/inbox.js +++ b/src/activitypub/inbox.js @@ -627,10 +627,6 @@ inbox.undo = async (req) => { const { actor, object } = req.body; const { type } = object; - if (actor !== object.actor) { - throw new Error('[[error:activitypub.actor-mismatch]]'); - } - const assertion = await activitypub.actors.assert(actor); if (!assertion) { throw new Error('[[error:activitypub.invalid-id]]');