#indieweb 2015-07-06

2015-07-06 UTC

aaronpk fkooman: in general (not specifically for indieauth.com which is running on 3 disparate servers) I would cache a nonce for the auth code and first check the cache, and if the nonce is in the cache, the code has already been used