2019-04-22 UTC
# 
aaronpk so the hosted Aperture service makes a request to the token endpoint (part of the indieauth plugin) to check if it's valid. i'm guessing the web server is blocking the HTTP Authorization header from coming through. (Some micropub clients also send the access token in the post body and sidestep this issue)