I realized that I dislike the OAuth Client ID Metadata document that's supposed to supersede the Dynamic OAuth Client Registration mechanism:

datatracker.ietf.org/doc/draft

The first complain is that it seems to address only online clients - ie, to be able to determine an attempt at OAuth authorization has a valid client, its ID needs to be a document that's addressable on the web and returns valid metadata.

So offline clients are left to invent some static web metadata storage for themselves, which frankly is not feasible.

1/2

0

If you have a fediverse account, you can quote this note from your own instance. Search https://metalhead.club/users/mariusor/statuses/115762964340000125 on your instance and quote it. (Note that quoting is not supported in Mastodon.)