2023-07-23 UTC
# 
havenmatt Hey everyone, I'm trying to build an IndieAuth provider and I'm a bit confused on the spec for access token responses: https://indieauth.spec.indieweb.org/#x5-3-3-access-token-response The spec describes responding with access_token, me, profile, expires_in, and refresh_token; but the example below shows a response including token_type and scope which aren't mentioned in the previous section. Any advice?