2021-02-18 UTC
# 
[schmarty] one problem is that a client will not tell the auth server what endpoints they intend to use the token with afterwards. so the auth server would have to discovery for each type of endpoint it is expected to protect.