@atomicpoet @TeaPol @fediversenews The first version was OAuth, but because the scope of an access token is so wide, this was controversial for a reason. It is not possible to OAuth on Mastodon only to prove ownership of the accoumnt. See https://tootfinder.ch/wiki/index.php?name=verification-of-consent