2021-06-15 UTC
# 
barnaby cweiske: regarding your indieauth questions: AFAIK the response_type=id flow has been deprecated. You can still support an auth-only flow without a token endpoint, but it takes two steps: a response_type=code request to get an authorization code, which is redirected back to the client. The client then makes a grant_type=authorization_code request to the authorization endpoint to exchange the code for profile information