#dev 2021-02-04

2021-02-04 UTC

aaronpk yeah in indieauth and oauth, the authorization code and access token only need to be understood by the authorization server, so you're free to use any format you want