mirror of
https://github.com/mastodon/mastodon
synced 2025-04-12 00:56:38 +02:00

The whole point of verified_webfinger? is to check the WebFinger-discoverable URI maps back to the known author URI. This was not actually verified if the first Webfinger request was not a redirection.