2026-04-27 UTC
# 
simpleauthority Hi all, question. I'm reading the indieauth spec and it says to validate an access token, we "should" send a post request to the token endpoint with the token parameter. However, tokens.indieauth.com says to use a GET request with the token in the header. Does anyone know if tokens.indieauth.com also supports the "by spec" method or is this really