2023-07-27 UTC
# 
havenmatt How come we require the 'profile' scope in order to ask for the 'email' scope? I'm building an IndieAuth provider and I plan to give the user the option to approve or deny individual scopes among those that are requested. I'd like them to be able to say "sure, have my email, but I don't want you to know my display name"