mirrors/fep
1
0
Fork 0
mirror of https://codeberg.org/fediverse/fep.git synced 2026-08-08 13:35:51 +00:00
Code Packages Wiki Activity

FEP-baf5: authorization, not authentication (#850)

Browse Source 
Minor wording fix per silverpill

Co-authored-by: Julian Lam <julian@nodebb.org>
Reviewed-on: https://codeberg.org/fediverse/fep/pulls/850
This commit is contained in:
devnull
2026-05-26 20:23:10 +02:00
committed by silverpill
parent 3fa9c4a7f2
commit 39a8ca9a37
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
fep/baf5/fep-baf5.md
+1 -1
View File
@@ -114,7 +114,7 @@ Support for this FEP is indicated by the implementation of [FEP 844e][844e], whe
This FEP supersedes the same-origin assumption described in [FEP fe34][fe34]. The administrators collection (in conjunction with the [FEP 1b12][1b12] moderator collection if applicable) determines whether a same-origin or cross-origin actor has administrative privilege.
When verifying the authenticity of a moderation action (such as `Update`, `Delete`, or other object mutations), a receiver SHOULD:
When verifying the whether a moderation action (such as `Update`, `Delete`, or other object mutations) is authorized, a receiver SHOULD:
1. Resolve the actor of the activity.
1. Verify that the sending instance supports the Administrator Collection (this FEP), as indicated by [FEP 844e][844e]. If the FEP is not advertised, fall back to the standard origin-based security model as defined in [FEP fe34][fe34].