← All entries

Starting IndieAuth

Today I'm beginning work on IndieAuth endpoints for Jottit. The goal is to let people publish to their Jottit sites from any Micropub client, whether that's web apps, mobile apps, or desktop tools.

IndieAuth is OAuth 2.0 for the open web. Users authenticate with their own domain, and apps discover auth endpoints from the site's HTML. For Jottit, this means adding an authorization endpoint (consent screen), token endpoint (OAuth token exchange), and token verification.

The interesting bit is combining this with Jottit's magic link authentication. When a Micropub client redirects to the auth endpoint, users might not be logged in yet. So the flow becomes: magic link → login → consent screen → back to the app. The OAuth parameters get preserved through the email round-trip.

Once this works, dozens of existing Micropub clients will work automatically with Jottit - no custom integration needed. That's the power of open protocols.