S102 Advertises indieauth-metadata

What this test does

Looks for rel="indieauth-metadata" in an HTTP Link header, then in an HTML <link> element.

How it passes

The metadata URL is found. Only legacy authorization_endpoint/token_endpoint links is a warning.

Specification

§4.1

Needs

S101 Profile URL is valid and can be fetched