2024-12-02 UTC
# 
carrvo It works like this: follow indieauth-client-php (configuring all endpoints public), except the final step in the redirect is saved to a database instead of the session, then use mod_authnz_external to check their basic "username" against the database to see if they are actively logged in (touch the timestamp on the record).