2014-04-29 UTC
# 
kbs aaronpk: more about something before bearer tokens are even issued I guess. So as an authorization endpoint, I get a call that says client_id=https://ownyourgram.com - how can I tell that it's really the ownyourgram client calling me, and not someone else.