🔑😅🗝️ Some IndieAuth confusion

Are you a member of the IndieWeb webring? Or you wanted to be, but you couldn't sign in because of obscure-looking IndieAuth errors?

Turns out when I hastily re-added support for sign-in with indielogin.com I introduced a bug that would end up always using indielogin.com as your authorization endpoint. For many folks, this actually worked fine, as indielogin.com would defer to your endpoint. However, if your authorization endpoint supported the IndieAuth server metadata endpoint with an issuer identifier, indielogin.com would apparently not pass it along.

The fix was quick: use your IndieAuth authorization endpoint, if found, and only fall back to indielogin.com if it is not found!

Here is the update that fixed this bug, haha, sigh. 🤦🏻‍♂️

Many thanks to the folks that reported this to me and nudged me to eventually work through it, including fusil.uk, fireburn.ru, serverless.industries, and gRegorlove.com!

Okay that's it, for now! Thanks for reading, imaginary interlocutor! As always, feel free to reply to this post on your own site, or feel free to drop me a line in the #indieweb chat (I’m schmarty there)!