Mastodon: Am I supposed to register my app with every instance?

[lukepighetti]

Hi there,

Don't want to ask questions on here but there isn't a mastodon tag on Stack Overflow. (Where are we expected to ask these kinds of questions?)

I'm trying to understand if it's my responsibility as a mastodon mobile app developer to register my app with every single mastodon instance and hide the client secrets from my mobile app, instead using my own server to manage the storage of auth related secrets.

This answer on Stack makes it sound like my client app should never make a call to POST /api/v1/apps

Any insight is appreciated.

[Gargron]

This answer on Stack makes it sound like my client app should _never make a call_ to POST /api/v1/apps

Well, that's wrong. That's the opposite of what you should be doing. Your app should self-register when a user asks to sign in to a server.