2022-11-15 UTC
# 
paulrobertlloyd @aaronpk Hello. I’m building my own IndieAuth endpoints, and looking to insure some level of interoperability with IndieAuth.com, which I know is somewhat outdated. I’ve noticed that a POST to /auth at IndieAuth.com returns a `scope` value as well as `me`. Is this a valid response? The spec suggests only `me` should be returned. Should implementations ignore anything besides `me`?