#Zegnatjeremycherfas: had you done any Grav plugin work before? It may be easier to implement selfauth than you think. And for first version, you could still outsource token endpoint to https://tokens.indieauth.com/ if you did not want to also merge in full token handling