Post

ugh I've have to re-build @frequency.app's spaces appview to have a confidential client oauth flow. i misunderstood what the service auth tokens could do and i need the appview to be able to sync member spaces without having a user logged into the client and constantly refreshing keys every ~10 mins

0 reposts4 likes

i like that you can write directly from the client if you auth to the pds and just give the appview service auth tokens, but that doesn't allow more complex app logic on the backend without forbidden token sharing