Don't rely on `me` in the callback URL
barryf opened this issue · comments
Store me in the session and use in the callback method instead of from params. It's currently possible to spoof me and so is/will be deprecated in IndieAuth.
See also:
barryf / micropublish
A Micropub client that you can use to create, update, delete and undelete content on your Micropub-enabled website.