2022-11-15 UTC
# 
paulrobertlloyd @aaronpk IndieLogin only does authentication, not authorisation, right? I’m getting a bit lost with where a token endpoint would know the desired scope, assuming the auth and token endpoints are completely separate.