indieauth
indieauth copied to clipboard
Adopt Resource Indicators or similar system to limit token access to resources
https://datatracker.ietf.org/doc/html/rfc8707 is the resource indicator specification
Suggest, unlike the specification, that resource optionally be in the return...that would allow an endpoint not requesting any specific resource to be told what the endpoint opted to grant.