#dev 2021-07-10

2021-07-10 UTC

aaronpk the notes in the security consideration make sense though, you don't really gain any security by checking for the client_id for public clients since there's way worse things you can do if you are malicious and have the token