Hi, I hear you on this. There's a longstanding issue with Bluesky's more granular permission sets I'm hoping to get resolved, which is blocking Sill from implementing a better set of permissions. github.com/bluesky-social/atproto/issues…
Bluesky permission sets require inconsistent aud parameter · Issue #4850 · bluesky-social/atproto
github.comMay 11, 2026 at 2:51 PM
Bluesky permission sets require inconsistent aud parameter · Issue #4850 · bluesky-social/atproto
Describe the bug In trying to rewrite sill.social to use granular permission sets, I've found that app.bsky.authViewAll does not allow access to app.bsky.feed.getFeedGenerator, app.bsky.graph.g...
Permission set (#4108) · bluesky-social/atproto@f9dc9aa
* Export constants and type assertion utilities * Add permission set support to oauth provider * improve permission set parsing * Rename `PermissionSet` to `ScopePermissions` * Improve performa...
Blockenheimer for Bluesky
Rehosted without much testing, Unblocking and History even less tested, original code here, I am not responsible for anything that happens as a result of using this site. Please do not contact the original author about this site. Complaints to @alxtratrstrl.xyz
Blockenheimer for Bluesky
Rehosted without much testing, Unblocking and History even less tested, original code here, I am not responsible for anything that happens as a result of using this site. Please do not contact the original author about this site. Complaints to @alxtratrstrl.xyz
Bluesky SSH Authentication #2
Addressing the glaring omissions from yesterday’s proof of concept, such as the fact that you could sign in as any user, you couldn’t revoke access, all hosts had the same users, and there was no mapping between Bluesky handles and POSIX users, I have updated mtelvers/bluesky-ssh-key-extractor and newly published mtelvers/bluesky-collection.
proposals/0016-permissioned-data at main · bluesky-social/proposals
Bluesky proposal discussions. Contribute to bluesky-social/proposals development by creating an account on GitHub.
proposals/0016-permissioned-data/README.md at main · bluesky-social/proposals
Bluesky proposal discussions. Contribute to bluesky-social/proposals development by creating an account on GitHub.
why they’re bad? just ask claude. it ran into the same exact things i’ve ran into. until all of these are fixed imo its perfectly acceptable for developers to ignore permission sets. they’re just not baked until they’re understandable read this transcript: claude.ai/share/dbd3e30d-958d-4ac8-a3fc…
Claude
claude.aiPermission sets for bsky launched sometime early this year (and still have issues github.com/bluesky-social/atproto/issues…, github.com/bluesky-social/atproto/discus…). XRPC scopes were earlier, but as far as user communication goes it's not any better. Requesting one XRPC scope still looks scary for end users.
I think I found an issue with the existing Bluesky OAuth permission sets @matthieu.bsky.team @bnewbold.net: github.com/bluesky-social/atproto/issues…. The XRPC endpoints specified in `authViewAll` are inconsistent about aud. Minimal repro here. tangled.org/tylerjfisher.com/repro-bluesk… Might be doing something wrong, lmk!
Bluesky permission sets require inconsistent aud parameter · Issue #4850 · bluesky-social/atproto
github.comi think, end of the day, the real problem with Bluesky is that most of its users are here *because* they want to be in a bubble. and they can tell themselves that it’s just about not being around Nazis it supporting Musk, and that’s part of it, but also there’s a palpable desire to be ensconced.
as a little pre-show surprise, here's an early draft of the permissioned data proposal! github.com/bluesky-social/proposals/pull…
Permissioned data by dholms · Pull Request #94 · bluesky-social/proposals
github.com
AT Protocol Developers
Don't forget, @dholms.at is joining us for the livestream TOMORROW for a permissioned data AMA.
When Bluesky does open up and/or federates there will no doubt be an "eternal September"-equivalent rush of folks who won't know/won't care about the standards and practices. The good news is that blocking here is unusually powerful natively and the moderating toolset is increasingly robust.
Andrew D. Girth
The dunking thing is a human curse though. If this place grows to be anywhere near as big as its predecessor, I'm convinced we will see that here too. The limited audience plus that's its largely attracting Twitter refugees is what holds that at bay for now.
as a little pre-show surprise, here's an early draft of the permissioned data proposal! github.com/bluesky-social/proposals/pull…
Permissioned data by dholms · Pull Request #94 · bluesky-social/proposals
github.comAT Protocol Developers
Don't forget, @dholms.at is joining us for the livestream TOMORROW for a permissioned data AMA.
This was based on the second screenshot in the post I linked to, but I think it might be a misunderstanding on my end (I thought the checkbox is grayed out and unselectable, leading me to misinterpret the message underneath, which I’ve now realized is the same as Bsky’s; maybe it’s not unselectable)
