2024-11-25 UTC
# 
carrvo I felt quite happy with setting up my first IndieAuth path (client login -> homepage -> authenticator -> client redirect) until I realized that with other authentication methods future requests also include request header values and my test IndieAuth client only had server-side session variables. I assume that I need a token endpoint, but I expected that to be for authorization that I am not convinced I need.