#indieweb 2014-04-29

2014-04-29 UTC

aaronpk kbs: so one of the criticisms of OAuth 2 is that it doesn't actually do any sort of client verification because all you need is a bearer token, and bearer tokens can be shared around all day long if you want