Nothing melts my brain quite like the IndieAuth token grant and verification process, but after the fiftieth refactor, I think it’s finally starting to make sense.

Until it all breaks again. 🫠