#wordpress 2018-04-08

2018-04-08 UTC

aaronpk also i'm gonna have to double check whether it's considered safe to store the authorization endpoint in a cookie. my inclination is that should be stored server-side or in a signed cookie so the client can't tamper with it.