$ req = web.tx.request

$if req.method == "GET":
    <form method=post action=/note>
    <label><small>Content:</small><br>
    <textarea name=content style=width:30em></textarea></label><br>
    <button>Post</button>
    </form>
$elif req.method == "POST":
    $ form = web.form("content")
    $if token := web.tx.user.session.get("token"):
        $ mp_endpoint = web.tx.user.session["uid"][0]
        $if mp_endpoint == "/":
            $ mp_endpoint = f"{web.tx.origin}/posts"
        $# TODO discover guests' endpoint
        $ mp_resp = web.post(mp_endpoint,
        $   headers={
        $     "Authorization": f"Bearer {token}",
        $     "Content-Type": "application/x-www-form-urlencoded",
        $   },
        $   data={
        $   "h": "entry",
        $   "content": form.content,
        $ })
        $mp_resp.text
        <p>Note posted.</p>
    $else:
        <p>Your host does not support access tokens.</p>