Absence of GET param seems to break Mintoken about php-mintoken HOT 1 CLOSED

The Mintoken design is old in IndieAuth terms. It is from before 2020. You would have to go back to at least January 2020 to find the latest spec that still included a me parameter on the § 6.3.1 Token Request. This is because later versions of IndieAuth dropped the me parameter. This was done when the entire communication channel between authorization and token endpoint was scrapped from the spec.

Because Mintoken does not come with an authorization endpoint at all, it is up to the user to make sure that their chosen authorization endpoint still uses the early-2020 way of communicating and that applications that come to get a token do the same.

For history:

1. Discussions on GitHub:
   • indieweb/indieauth/issues/19
   • indieweb/indieauth/issues/44
2. PR that did the work: indieweb/indieauth/pull/49
   • Specific commit that documents the out of scope: indieweb/indieauth@28c414c
3. Discussion note from the 2020-08-08 IndieAuth Pop-up

Hope that shines enough light on things! 😎

from php-mintoken.