2026-09-17 UTC
# 
aaronpk one of the last things that makes indieauth not compatible with OAuth is the text about exchanging the authorization code at the authorization endpoint when no access token is expected https://indieauth.spec.indieweb.org/#profile-url-response I would like to remove that behavior and switch to the normal OAuth behavior of exchanging it at the token endpoint. I can't find a github issue about