Anders Pitman

Users need to be able to delete old identities and login history as desired

Should be safe as long as we don't have an open redirector

Now that we're storing everything in JWTs, state isn't really doing anything, and it's optional https://datatracker.ietf.org/doc/html/rfc6749#section-4.1.1

Currently using `obligator_` as a prefix for all cookies. This should be controllable by the user as it is for the login key cookie

Update to use the token endpoint

5

Seeing some weird behavior while trying to implement IndieAuth support [for obligator](https://github.com/lastlogin-io/obligator/tree/indieauth). The token request is coming back to my authorization endpoint. I've triple checked that I'm setting them to...

Set y axis scale?

7

Is it possible to set the Y axis scale, rather than have it automatically set from the data?

I'm trying to add a few charts to my app, but still allow normal stdout/stderr logs to be shown. Is this possible?

Any testing tools available?

2

I'm trying to implement IndieAuth for https://anderspitman.com/users/anders. I'm returning the indieauth-metadata Link header, but IndieLogin.com is never making a request to the metadata endpoint. Are there any debugging clients available...