19 |
20 | page . '.php'); ?>
21 |
22 |
23 |
28 |
2 |
3 |
4 |
5 |
Token Endpoint
6 |
This is an IndieAuth Token Endpoint that you can use to jump-start the development of your Micropub endpoint.
7 |
8 |
9 |
10 |
11 |
Use it on your site
12 |
13 |
No registration is required to begin using this endpoint.
14 |
15 |
On your home page, add a link tag pointing to the token endpoint.
16 |
17 |
'); ?>
18 |
19 |
Micropub clients will be able to obtain an access token from this endpoint after you have granted authorization. The Micropub client will then use this access token when making requests to your Micropub endpoint.
20 |
21 |
22 |
23 |
Verify Access Tokens
24 |
25 |
When your Micropub endpoint gets a request containing an access token, you can verify the access token and return info about the token by asking the token endpoint.
26 |
27 |
Your Micropub endpoint will get a request like the following:
28 |
29 |
POST https://example.com/micropub
30 | Authorization: Bearer xxxxxxxx
31 |
32 | h=entry&
33 | content=Hello World!
34 |
35 |
Your Micropub endpoint can query the token endpoint to verify the access token given. To verify the access token, make a GET request to the token endpoint with the access token in the header:
36 |
37 |
GET https://tokens.indieauth.com/token
38 | Accept: application/json
39 | Authorization: Bearer xxxxxxxx
40 |
41 |
The token endpoint will verify the token and the response will include information about the user and scope of the token.
42 |
The scope value will be a space-separated list of strings representing all the scopes that were granted. It may also be blank or contain just one value.
43 |
44 |
HTTP/1.1 200 OK
45 | Content-Type: application/json
46 |
47 | {
48 | "me": "https://aaronparecki.com/",
49 | "client_id": "https://ownyourgram.com",
50 | "scope": "post",
51 | "issued_at": 1399155608,
52 | "nonce": 501884823
53 | }
54 |
55 |
Your Micropub endpoint can inspect the values and use them to determine whether to proceed with processing the request. For example, for a Micropub endpoint for posting notes to your own site, you would likely only accept requests where the "me" value is your own site.
56 |
57 |
58 |
59 |
Using with IndieAuth.com
60 |
61 |
It is likely that you will use this token endpoint in conjunction with the IndieAuth.com authorization endpoint. By doing so, you can focus on building your Micropub endpoint, and you can swap out the token endpoint or authorization server later.
62 |
63 |
To delegate the authorization and token endpoints to indieauth.com, use the following link tags on your site:
64 |
65 |
'); ?>
66 |
67 | '); ?>
68 |
69 |
70 |
71 |
Testing
72 |
73 |
To test your Micropub endpoint, you will need to find a Micropub client that you can try to sign in to.
74 |
75 |
OwnYourGram.com is a great resource for testing, as it includes documentation and debugging information throughout each step of the login process.
76 |
77 |
78 |
79 |
More Info
80 |
81 |
87 |
88 |
89 |