2025-11-02 UTC
# 
[schmarty] aaronpk: i am having trouble understanding something with http://indielogin.com. using it with my indieauth server. i see indielogin make an auth request with no scopes, seems good, but then it tries to redeem the code at my _token_ endpoint. since there were no scopes requested, my server barfs at this point. i believe that indielogin should only be making requests to the authorization endpoint?