Aaron Parecki

The wordpress plugin will need to be able to accept an access token in the HTTP header and verify it. The short path to implement this is to use the token endpoint I run at https://tokens.indieauth.com, that way you can just avoid all token management for now, and add that in to the plugin later.