2026-04-27 UTC
# 
gRegor simpleauthority, yeah the current IndieAuth spec specifies POST for the token validation. There are a couple other token implementations that might be helpful for self hosting, https://indieweb.org/Mintoken and https://indieweb.org/gimme_a_token