#dev 2017-08-18

2017-08-18 UTC

aaronpk when a token endpoint like tokens.indieauth.com (which has no database and no state) receives a request with an authorization code, it uses the "me" value to find out which authorization server to use to verify the code