#dev 2020-12-23

2020-12-23 UTC

aaronpk that whole side of things is left out of oauth and indieauth. that's where openid connect starts to define some more tools for managing it, but a session ID is usually "good enough"