khimaros
Answering my own question: the #activitypub specification is very ill-defined on authorization in general: https://www.w3.org/TR/activitypub/#authorization
The most detailed information I found about the #mastodon server-to-server protocol is https://github.com/tootsuite/mastodon/issues/4208
Jonkman Microblog is a social network, courtesy of SOBAC Microcomputer Services. It runs on GNU social, version 1.2.0-beta5, available under the GNU Affero General Public License.
All Jonkman Microblog content and data are available under the Creative Commons Attribution 3.0 license.