Micropublish: IndieAuth updates and supported properties feature

Yesterday I pushed a new release of Micropublish to include recent updates for clients to the IndieAuth specification, as summarised in Aaron Parecki’s IndieAuth 2020 write-up.

The two biggest IndieAuth changes are the use of a OAuth 2.0 PKCE (Proof Key for Code Exchange) to secure authorisation and confirming the auth server if the original me value differs from that returned from the token endpoint. See the GitHub issue for more.

Additionally, Micropublish now has experimental support for queries for supported properties, for a supported post-type.

Thanks to Jamie Tanna and David Shanske for their help debugging and testing.