Could you perhaps share the contents of https://okitwo.solid.community/public/shoutbox/note1578150875.ttl.acl?
As something to try in the meantime, although I’m not too familiar with the
trustedApp spec, reading through it I think user1.solid.community might be the one who’d need to add localhost:3000 as a
trustedApp to their profile, rather than user2? Which would make sense, since there’s really no way for the client to know to look in user2’s profile given just the information provided by that resource.
(Since the Pod needn’t necessarily be on the same domain, you can get to a Document in user2’s Pod from their profile, but you can’t get to their profile from that Document unless it explicitly links back to it.)