#indieweb 2015-12-20

2015-12-20 UTC

aaronpk this also means that proper handling/validation of the "state" parameter is *super* important, so that you can't trick clients in to logging people in without the client expecting it