#dev 2019-06-15

2019-06-15 UTC

sknebel if you'd want to stick with the OAuth token model throughout, I guess the login screen needs the ability to create a token for <url> with scope: read, and then get the client to use that token, e.g. in a cookie