aaronpkas i'm going deeper into more of the OAuth specs, and also trying to rebuild everything in GNAP, i'm realizing that a lot of the problems and questions like this we have in IndieAuth have some overlap with other communities too, sometimes with already existing solutions
