fr33domloverjesopo, possibly it's not even related to the request body, it would be because of missing webfinger or http signature authentication failing. Have you seen the 2 blog posts on the Mastodon blog? They'd be a good starting point to figure out what you need