A note: Some users have noticed that signup doesn't work on Android. OAuth signup is broken on ALL captcha-enabled PDSes, not just ours. This is an hCaptcha regression, not the fault of Bluesky. We are incredibly grateful for @matthieu.bsky.team's work to resolve this. Follow along here:
hCaptcha stopped working due to a COEP error · Issue #380 · hCaptcha/react-hcaptcha
github.comApr 14, 2026 at 1:20 AM
Captcha Check
Hello, you've been (semi-randomly) selected to take a CAPTCHA to validate your requests. Please complete it below and hit the button!
Captcha Check
Hello, you've been (semi-randomly) selected to take a CAPTCHA to validate your requests. Please complete it below and hit the button!
your app can run its own pds - keith.is
if you’re building on atproto, you’ve probably reached for “sign in with bluesky” as your auth story. it works! the OAuth flow is fine. but every time a user shows up without a bluesky account, you have to send them to bluesky first, watch them get confused by a totally different brand, and hope they come back. that’s a weird seam in your own product.
CAPTCHA successor Privacy Pass has no easy answers for online abuse | The Mozilla Blog
As much as the Web continues to inspire us, we know that sites put up with an awful lot of abuse in order to stay online. Denial of service attacks, fraud
Checking your browser - reCAPTCHA
Proposal: OAuth-based account creation · bluesky-social atproto · Discussion #4587
We recently added to the reference PDS (and underlying OAuth Provider) implementation support for Initiating User Registration via OpenID Connect 1.0, however, what I wasn't aware of when I add...
Building OAuth Authentication for Bluesky: A Complete Guide for Web and iOS Apps - Lost in Inference
How to implement secure, standards-compliant OAuth 2.1 + PKCE authentication for AT Protocol apps with separate web and mobile flows
🔎 bluesky change account pds - Google Search
I think I found an issue with the existing Bluesky OAuth permission sets @matthieu.bsky.team @bnewbold.net: github.com/bluesky-social/atproto/issues…. The XRPC endpoints specified in `authViewAll` are inconsistent about aud. Minimal repro here. tangled.org/tylerjfisher.com/repro-bluesk… Might be doing something wrong, lmk!
Bluesky permission sets require inconsistent aud parameter · Issue #4850 · bluesky-social/atproto
github.com3) it still doesn't fully cover all use cases well or at all 4) bsky.app still didn't manage to implement OAuth at all Yes, we should all be moving to OAuth w/ scopes, that's the goal, but give people some slack, it's all still rather fresh, we'll get there… (yes, it's me, I'm those people)
thanks to @quillmatiq.com, Bluepy now supports logging into to alternative AppViews, like @rude1.blacksky.team's Blacksky which is where i'm sending this post from try it out at bluepy.social
reminder that you can always revoke oauth access at bsky.social/account (also a good place to check for apps you forgot you logged in to !)
The frustrating thing about this is that when you "Login with Bluesky", you're not even actually logging in with Bluesky The App. You may be using a Bluesky PBC-hosted PDS, but it has nothing to do with @bsky.app, other than it's the PDS you're assigned when you create an account on their client.
A new European microblogging app? Used to be the case that meant starting all over again. Not this time: I just logged in with the same @eurosky.social account I use for @bsky.app and it works. Starting to see the potential of decentralised socials.
Eurosky Social
Muve to the beat. Muve the conversation. Muve mountains. Today @eurosky.social announces mu.social, a new microblogging app to experiment with the future of social! 🪩💖
