Signing in

You sign in to Quill with your own website address. For that to work your site needs two things:

1. An IndieAuth server

Your home page links to the metadata document of the IndieAuth server that speaks for your site:

<link rel="indieauth-metadata" href="https://auth.example/.well-known/oauth-authorization-server">

Quill reads that document for the authorization and token endpoints, sends you there to approve, and comes back with an access token. The current spec (metadata discovery, PKCE, the iss check) is required; the old bare rel="authorization_endpoint" links still work for discovery but the server behind them must redeem codes with PKCE.

2. A Micropub endpoint

<link rel="micropub" href="https://example.com/micropub">

Every post is sent there as JSON with your access token. The endpoint should also answer GET ?q=config so Quill knows your media endpoint, syndication targets, channels and post types; see What Quill sends.

Scopes

Quill asks for profile create update media by default: create to post, update to edit likes and reposts, media to upload photos, profile for your name and photo. You can untick any of them before signing in; create is always requested.

Starting over

Settings → Reset login asks your server to revoke the token, forgets everything Quill knows about your site, and signs you out.