After obtaining the End-User’s profile URL, the client fetches the URL and looks for the authorization_endpoint and token_endpoint rel values in the HTTP Link headers and HTML tags. After the state parameter is validated, the client makes a POST request to the token endpoint to verify the authorization code and retrieve the final user profile URL. (W3C TR IndieAuth)


Return to list of all ( Link Relations | Web Concepts )