2020-08-03 UTC
# 
[tb] One of the major ones was that I completely removed the client validation from the token revocation endpoint, which I wasn't sure on since the OAuth2 specs have it in there as a requirement but it didn't seem like much use for IndieAuth clients