2020-07-10 UTC
# 
[schmarty] aaronpk: indieauth.spec.indieweb.org does not mention PKCE (because it was published before that spec was a REC, i imagine). maybe a silly question but is it "cool" to have an auth endpoint support PKCE? seems like the token endpoint (if they're not the same) would need to know to pass long the values?