search

indieweb / indieauth

IndieAuth.net website code and IndieAuth Specification
52 stars 7 forks source link

The me parameter should not be described as “originally entered”. #11

Closed Zegnat closed 6 years ago

Zegnat commented 6 years ago

In the different sections on requests, the me parameter is described as:

The profile URL that the user entered

and:

The user's profile URL as originally entered

I don’t think this is ever right. After the client has done URL Canonicalization on the user input, and followed redirects during Discovery by Clients to possibly update the URL, the final product should be used. This can be very different from whatever the user has actually entered.

aaronpk commented 6 years ago

Good catch!

I've changed the first one to "The user's profile URL", and the second one to "The user's profile URL as originally used in the authorization request"