#indieweb 2017-04-11

2017-04-11 UTC

aaronpk as someone sending auth codes, I know I would be much more comfortable sending an unsolicited code that only lasts 60 seconds vs sending an access token that has no expiration