#dev 2025-07-30

2025-07-30 UTC
grufwub, box4649, [Sophia_wood], srxl, box46490, Maxpm and dagardner joined the channel
#
dagardner
I am in the process of building my own micropub endpoint and would like to confirm if I understood one aspect of it correctly: a specific endpoint (fully qualified url) can practically only be tied to one identity (i.e. one site) since the micropub endpoints needs to have „out-of-band“ knowledge how to verify the access token. I cannot easily have a single micropub endpoint available on say cms.example.com/micropub and
#
dagardner
have multiple users use that and have my cms micropub endpoint direct the posts to the correct sites. It would need to be something like cms.example.com/{site}/micropub (I hope to articulated my pondering well enough to not be just some rambling)
dagardner, gRegor, ttybitnik and sp1ff``` joined the channel
#
aaronpk
hm no you can share an endpoint with multiple users as long as you are issuing the access tokens that the endpoint validates
#
stillforge
dagardner: If I understand your question correctly: nope. Access tokens can be used by whomever and whatever has them.
#
aaronpk
i dont think that’s the question
#
aaronpk
so, two separate things:
dagardner joined the channel
#
aaronpk
if you’re building a standalone micropub endpoint that you want to be able to plug in to anyone’s indieauth server, where you dont control the access tokens being issued, then you need to know which indieauth server to validate the token from, meaning you need to use a unique path in the micropub endpoint for each user
#
aaronpk
but that’s not a required assumption of the architecture
#
aaronpk
you can absolutely run a micropub endpoint at a single URL for multiple users, as long as you have a way to know which user it’s for given the access token itself, which is totally normal if you are the one issuing the access tokens
rozodru, NaomiAmethyst, gRegor, [KevinMarks], ttybitnik, mika1, jack, cow_2001, alephalpha0, [marksuth], [schmarty], bugliker02 and grufwub joined the channel