#dev 2021-07-10

2021-07-10 UTC

sknebel thinking about it a bit more, I feel like "path below the resource" (or maybe even same origin) + "advertises the same token endpoint" works as "is this token usable here" best