2021-07-08 UTC
# 
[fluffy] Hm, the IndieAuth token grant stuff never mentions `expires_in` but that’s come up in a few discussions of token refresh. Is there some reason why that isn’t described in e.g. https://indieauth.spec.indieweb.org/#access-token-response ?