2018-08-08 UTC
# 
@neth_6 ↩️ Got a #IndieAuth question. Since there is no client pre-registration, there is no client secret. Thus during code/access token exchange no client secret is used. Less secure than Authorization Code and more like Implicit perhaps? (twitter.com/_/status/1027087974335270913)