diff --git a/src/activitypub/user/outbox.rs b/src/activitypub/user/outbox.rs
index 25af528e..65572f9b 100644
--- a/src/activitypub/user/outbox.rs
+++ b/src/activitypub/user/outbox.rs
@@ -70,8 +70,8 @@ pub async fn page(
 pub async fn post(
 	State(ctx): State<Context>,
 	Path(id): Path<String>,
-	Json(activity): Json<serde_json::Value>,
 	AuthIdentity(auth): AuthIdentity,
+	Json(activity): Json<serde_json::Value>,
 ) -> Result<impl IntoResponse, StatusCode> {
 	match auth {
 		Identity::Anonymous => Err(StatusCode::UNAUTHORIZED),
diff --git a/src/router.rs b/src/router.rs
index 5db25d47..8f8c353a 100644
--- a/src/router.rs
+++ b/src/router.rs
@@ -24,6 +24,7 @@ pub async fn serve(db: DatabaseConnection, domain: String) {
 		.route("/users/:id/inbox", get(ap::user::inbox::get))
 		.route("/users/:id/inbox", post(ap::user::inbox::post))
 		.route("/users/:id/outbox", get(ap::user::outbox::get))
+		.route("/users/:id/outbox", post(ap::user::outbox::post))
 		.route("/users/:id/outbox/page", get(ap::user::outbox::page))
 		.route("/users/:id/followers", get(ap::user::follow___::<false>))
 		.route("/users/:id/following", get(ap::user::follow___::<true>))