egister applications as OAuth clients before first use; if no
    client registration is required, then the server MAY ignore the
    client_id parameter in favor of relying on the redirect_uri
    parameter for client identification.

<span><a name="section-11" href="#section-11">11</a>. Storage-first bearer token issuance</span>

    The provider MAY also present a dashboard to the user, where they
    have some way to add open web app manifests [<a href="#ref-MANIFEST">MANIFEST</a>]. Adding a
    manifes