Learn how to use an algorithm like RS256 and the JWKS endpoint to allow your applications to trust the JWTs signed by Auth0.
Generate a JWT with ECDSA keys
To generate a JWT signed with the ES256 algorithm and ECDSA keys using the P-256 (secp256k1) curve, you need to use openssl commands or the auth0 library . This procedure explains how to generate a JWT with openssl commands. A JWT consists of three parts separated by dots. Header Payload Signature T...
%20curve%2C%20you%20need%20to%20use%20openssl%20commands%20or%20the%20auth0%20library%20.%20This%20procedure%20explains%20how%20to%20generate%20a%20JWT%20with%20openssl%20commands.%20A%20JWT%20consists%20of%20three%20parts%20separated%20by%20dots.%20Header%20Payload%20Signature%20T...&logoUrl=https%3A%2F%2Ffiles.readme.io%2Fe8cc881-small-techdocs-akamai-logo.png&color=%23017ac6&variant=light){kind=logo}
better-auth-bsky - npmx
A better-auth plugin that adds ATProto/Bluesky OAuth 2.1 authentication (DPoP, PAR, PKCE) via @atcute/oauth-node-client.
jose - npmx
JWA, JWS, JWE, JWT, JWK, JWKS for Node.js, Browser, Cloudflare Workers, Deno, Bun, and other Web-interoperable runtimes
Secure APIs Without JWT: Alternatives You Should Know About
The default way to authenticate an API is now with JSON Web Tokens. If you talk about securing an API, someone will always say, “just use…
OAuth Client Implementation | Bluesky
This is a guide to implementing atproto OAuth clients "The Hard Way." Optimistically, most developers will have an SDK available for their programming language which supports OAuth, and they can simply refer to SDK documentation. This guide is intended for early adopters, SDK maintainers, or developers with more sophisticated OAuth needs. It is agnostic to whether developers are building clients to work the the app.bsky microblogging Lexicons, or implementing novel application Lexicons.
ATProto OAuth Quickstart Guide | Artur | Looking for work
Setting Up Bluesky OAuth in Your Web App: A Developer's Guide If you're building an app that needs to authenticate with Bluesky, you'll need to implement their OAuth flow. While the official docs are comprehensive, they can be a bit overwhelming. Let's break down the process into manageable steps. ...
Shibboleth Authentication Request
Shibboleth Authentication Request
Shibboleth Authentication Request
Shibboleth Authentication Request
Shibboleth Authentication Request
Shibboleth Authentication Request
Shibboleth Authentication Request
Shibboleth Authentication Request
alright protocol devs, some wonky bits: we revisited the recent service auth JWT harmonization proposal, and have a revision up that sticks with a single string 'aud' field. also touches on issuer 'kid', and makes 'lxm' mandatory for XRPC endpoints.
proposals/0014-service-auth-revised at main · bluesky-social/proposals
github.comAnnouncing: keytrace.dev Take your @bsky.app / @atproto.com account and connect it to your other accounts around the internet. Keytrace cryptographically verifies your connected accounts so other social apps can trust the data. Learn more: keytrace.dev/blog/introducing-keytrace
Keytrace - You be you, everywhere.
keytrace.dev
