frames-devs

we're proposing a convention for unauthenticated frames using the open frames standard. essentially:

add this tag to your frame:
<meta name="of:accepts:anonymous" content="1.0" />
 
then any client can send a post request with the body:
{
    clientProtocol: "anonymous@1.0",
    untrustedData: {
        unixTimestamp: number,
        buttonIndex: number,
        inputText?: string,
        state?: string,
    }
}

and it will work without requiring authentication. 

looking for feedback - open frames standard PR linked in quoted cast