This plugin implements the IndieAuth protocol, turning your site into an authentication endpoint. It is designed for users who want to own their online identity and for developers building applications that interact with personal websites. It allows you to use your site's URL to log into other services and provides a secure way for external applications to access your site's data via OAuth 2.0.

• Web Sign-In: Use your personal website URL to authenticate with other sites that support IndieAuth, moving away from centralized identity providers.
• OAuth 2.0 Server: Your site can issue and manage secure access tokens (Bearer tokens) for its own REST API, allowing controlled access for third-party apps and services.
• Token Management: Users can view, manage, and revoke access tokens issued to client applications from within their admin dashboard, providing transparency and control.
• Enhanced Security: The implementation supports Proof Key for Code Exchange (PKCE) to prevent authorization code interception attacks and recommends HTTPS for all communications.
• Profile Integration: During authentication, the endpoint can return basic user profile information like display name and avatar from the user's profile on the site.