diff --git a/src/routes/activitypub.js b/src/routes/activitypub.js
index 5d136398f5..68747c1d1e 100644
--- a/src/routes/activitypub.js
+++ b/src/routes/activitypub.js
@@ -12,24 +12,28 @@ module.exports = function (app, middleware, controllers) {
 	 * - See middleware.activitypub.assertS2S
 	 */
 
-	const middlewares = [middleware.activitypub.enabled, middleware.activitypub.assertS2S];
+	const middlewares = [
+		middleware.activitypub.enabled,
+		middleware.activitypub.assertS2S,
+		middleware.activitypub.configureResponse,
+	];
 
 	app.get('/actor', middlewares, controllers.activitypub.actors.application);
 
-	app.get('/uid/:uid', middlewares, controllers.activitypub.actors.user);
-	app.get('/user/:userslug', [...middlewares, middleware.exposeUid], controllers.activitypub.actors.userBySlug);
-	app.get('/uid/:uid/inbox', middlewares, controllers.activitypub.getInbox);
-	app.post('/uid/:uid/inbox', [...middlewares, middleware.activitypub.validate], controllers.activitypub.postInbox);
-	app.get('/uid/:uid/outbox', middlewares, controllers.activitypub.getOutbox);
-	app.post('/uid/:uid/outbox', middlewares, controllers.activitypub.postOutbox);
-	app.get('/uid/:uid/following', middlewares, controllers.activitypub.getFollowing);
-	app.get('/uid/:uid/followers', middlewares, controllers.activitypub.getFollowers);
+	app.get('/uid/:uid', [...middlewares, middleware.assert.user], controllers.activitypub.actors.user);
+	app.get('/user/:userslug', [...middlewares, middleware.assert.user, middleware.exposeUid], controllers.activitypub.actors.userBySlug);
+	app.get('/uid/:uid/inbox', [...middlewares, middleware.assert.user], controllers.activitypub.getInbox);
+	app.post('/uid/:uid/inbox', [...middlewares, middleware.assert.user, middleware.activitypub.validate], controllers.activitypub.postInbox);
+	app.get('/uid/:uid/outbox', [...middlewares, middleware.assert.user], controllers.activitypub.getOutbox);
+	app.post('/uid/:uid/outbox', [...middlewares, middleware.assert.user], controllers.activitypub.postOutbox);
+	app.get('/uid/:uid/following', [...middlewares, middleware.assert.user], controllers.activitypub.getFollowing);
+	app.get('/uid/:uid/followers', [...middlewares, middleware.assert.user], controllers.activitypub.getFollowers);
 
-	app.get('/post/:pid', middlewares, controllers.activitypub.actors.note);
+	app.get('/post/:pid', [...middlewares, middleware.assert.post], controllers.activitypub.actors.note);
 
-	app.get('/category/:cid', middlewares, controllers.activitypub.actors.category);
-	app.get('/category/:cid/inbox', middlewares, controllers.activitypub.getInbox);
-	app.post('/category/:cid/inbox', [...middlewares, middleware.activitypub.validate], controllers.activitypub.postInbox);
-	app.get('/category/:cid/outbox', middlewares, controllers.activitypub.getCategoryOutbox);
-	app.post('/category/:cid/outbox', middlewares, controllers.activitypub.postOutbox);
+	app.get('/category/:cid', [...middlewares, middleware.assert.category], controllers.activitypub.actors.category);
+	app.get('/category/:cid/inbox', [...middlewares, middleware.assert.category], controllers.activitypub.getInbox);
+	app.post('/category/:cid/inbox', [...middlewares, middleware.assert.category, middleware.activitypub.validate], controllers.activitypub.postInbox);
+	app.get('/category/:cid/outbox', [...middlewares, middleware.assert.category], controllers.activitypub.getCategoryOutbox);
+	app.post('/category/:cid/outbox', [...middlewares, middleware.assert.category], controllers.activitypub.postOutbox);
 };