work on validating incoming fed requests

internal/db/gtsmodel/account.go

@@ -115,6 +115,8 @@ type Account struct {
 	PrivateKey *rsa.PrivateKey
 	// Publickey for encoding activitypub requests, will be defined for both local and remote accounts
 	PublicKey *rsa.PublicKey
+	// Web-reachable location of this account's public key
+	PublicKeyURI string
 
 	/*
 		ADMIN FIELDS

internal/db/pg.go

@@ -465,6 +465,7 @@ func (ps *postgresService) NewSignup(username string, reason string, requireAppr
 		URL:                   newAccountURIs.UserURL,
 		PrivateKey:            key,
 		PublicKey:             &key.PublicKey,
+		PublicKeyURI:          newAccountURIs.PublicKeyURI,
 		ActorType:             gtsmodel.ActivityStreamsPerson,
 		URI:                   newAccountURIs.UserURI,
 		InboxURL:              newAccountURIs.InboxURI,