#indieweb 2015-12-20

2015-12-20 UTC

aaronpk well one easy thing if you don't want to switch to JWT auth codes is you can delete them after they're used once, or you can set an expiration time and then every time a new one is generated, delete all the old ones that expired