- # Note: :following and :followers must be served even without authentication (as via :api)
- @auth_only_actions [:read_inbox, :update_outbox, :whoami, :upload_media]
-
- # Always accessible actions (must perform entity accessibility checks)
- @no_auth_no_federation_actions [:user, :activity, :object]
-
- @authenticated_or_federating_actions @federating_only_actions ++
- @auth_only_actions ++ @no_auth_no_federation_actions
-