I just made a few upgrades to my IndieAuth client and server to match the new version of the specification which is more in line with OAuth 2.0 specification. I added introspection, user information and the metadata endpoint. All the changes I made are backward compatible with older clients. For the library, I released a major version simply because I made a few breaking changes regarding functions naming to match the specification better. I’m thinking about supporting refresh tokens too. I wonder, however, if there’s any IndieAuth app that uses refresh tokens. It’d be great to test.