2019-10-30 UTC
# 
[fluffy] https://github.com/PlaidWeb/Publ/blob/f1baa08baa2e1bc7cf771b35ec457fc3784f7aea/publ/tokens.py#L38 is where Publ’s token endpoint does the whitelisting. If I’m instead just supposed to make the validation request with all of the POST parameters converted to GET parameters, that’s fine