From f3eeec93df5d5d681d734685290499095b2b0501 Mon Sep 17 00:00:00 2001
From: Julian Lam <julian@nodebb.org>
Date: Sun, 29 Mar 2026 21:19:38 -0400
Subject: [PATCH] fix: #14130, set addressee on follow, undo(follow), and
 accept(follow)

---
 src/activitypub/inbox.js | 2 ++
 src/activitypub/out.js   | 2 ++
 2 files changed, 4 insertions(+)

diff --git a/src/activitypub/inbox.js b/src/activitypub/inbox.js
index b8967cbef5..bfa19d7823 100644
--- a/src/activitypub/inbox.js
+++ b/src/activitypub/inbox.js
@@ -529,6 +529,7 @@ inbox.follow = async (req) => {
 		activitypub.send('uid', id, actor, {
 			id: `${nconf.get('url')}/${type}/${id}#activity/accept:follow/${handle}/${Date.now()}`,
 			type: 'Accept',
+			to: [actor],
 			object: {
 				id: followId,
 				type: 'Follow',
@@ -556,6 +557,7 @@ inbox.follow = async (req) => {
 		activitypub.send('cid', id, actor, {
 			id: `${nconf.get('url')}/${type}/${id}#activity/accept:follow/${handle}/${Date.now()}`,
 			type: 'Accept',
+			to: [actor],
 			object: {
 				id: followId,
 				type: 'Follow',
diff --git a/src/activitypub/out.js b/src/activitypub/out.js
index 5242e6df6d..d92c8dc29c 100644
--- a/src/activitypub/out.js
+++ b/src/activitypub/out.js
@@ -65,6 +65,7 @@ Out.follow = enabledCheck(async (type, id, actor) => {
 		await activitypub.send(type, id, [actor], {
 			id: `${nconf.get('url')}/${type}/${id}#activity/follow/${encodeURIComponent(actor)}/${timestamp}`,
 			type: 'Follow',
+			to: [actor],
 			object: actor,
 		});
 	} catch (e) {
@@ -462,6 +463,7 @@ Out.undo.follow = enabledCheck(async (type, id, actor) => {
 	await activitypub.send(type, id, [actor], {
 		id: `${nconf.get('url')}/${type}/${id}#activity/undo:follow/${encodeURIComponent(actor)}/${timestamp}`,
 		type: 'Undo',
+		to: [actor],
 		actor: object.actor,
 		object,
 	});