2018-08-08 UTC
# 
@aaronpk ↩️ Regular OAuth 2.0 also supports the Authorization Code flow with no secret. In fact, many companies recommend Auth Code w/no secret instead of Implicit.
IndieAuth is like taking Auth Code w/no secret and adding back some layers of security because of the client ID being a URL. (twitter.com/_/status/1027203489565306882)