indieauth
indieauth copied to clipboard
Path component in client_id considered optional
According to https://indieauth.spec.indieweb.org/#client-identifier
Client identifier URLs ... MUST contain a path component
Example clients which provide no path component in client_id:
- indiebookclub.biz
- indigenous.realize.be (Indigenous for Android, as of 2020-06-16)
- omnibear.com
- teacup.p3k.io
It is understood that most IndieAuth servers permit clients with valid-in-common-usage client_ids.
Suggestion: modify the spec to match the common usage.