Follow Token

This token represents a follow intent created by a user.

The token must contain an audience (aud) field which points to the identity the user is following. For other constraints see the Action Tokens.

Content-Addressing

This token is content-addressed using SHA-256:

• The entire JWT token (header + payload + signature) is hashed
• Action ID format: a1~{base64_hash}
• See Content-Addressing & Merkle Trees for details

Database Key

The database key for a follow token is [iss, t, aud]

Purpose: This key ensures that a user can only have one active follow relationship to a specific identity. The key components are:

• iss: Issuer identity (who is following)
• t: Token type (“FLLW”)
• aud: Audience (who they’re following)

Example:

• Alice follows Bob → Stored with key [alice.example.com, "FLLW", bob.example.com]
• If Alice unfollows and re-follows → New token with same key, previous one is marked deleted
• Only ONE follow relationship from Alice to Bob at a time

Example

User @alice.cloudillo.net follows @bob.cloudillo.net: