Heeey, look, it's me! I'm super hyped to announce that @bsky.app have given me a grant to work on the standards for the Federated Credential Management API (or FedCM) to make them really work for all decentralized web applications.
AT Protocol Developers
We're so excited to support @thisismissem.social's work bringing FedCM to the open social web! atproto.com/blog/working-to-decentralize-…
Mar 9, 2026 at 6:29 PM
Working to Decentralize FedCM - AT Protocol
Bluesky Social PBC have given a grant to Emelia Smith, an Invited Expert with the FedID Working Group, to work on FedCM with the goal of making FedCM really work for the decentralized web.
Federated Credential Management (FedCM) API - Web APIs | MDN
The Federated Credential Management API (or FedCM API) provides a standard mechanism for identity providers (IdPs) to make identity federation services available on the web in a privacy-preserving way, without the need for third-party cookies and redirects. This includes a JavaScript API that enables the use of federated authentication for activities such as signing in or signing up on a website.
How Standards Are Made
Recently I received a large grant from Bluesky Social PBC to fund my work on FedCM for decentralized web. So whilst the response has been overwhelmingly positive, there's currently a tiny tiny percentage of people in my mentions on the fediverse right now that are accusing me of horrible
Updated Auth Scopes Proposal · bluesky-social atproto · Discussion #4013
This is a discussion thread for the July 2025 Auth Scopes proposal
Proposal: OAuth Scopes · bluesky-social atproto · Discussion #3655
Note: a more complete proposal was published in July 2025: https://github.com/bluesky-social/proposals/tree/main/0011-auth-scopes We’re continuing work on rolling OAuth out to the atproto network. ...
Building OAuth Authentication for Bluesky: A Complete Guide for Web and iOS Apps - Lost in Inference
How to implement secure, standards-compliant OAuth 2.1 + PKCE authentication for AT Protocol apps with separate web and mobile flows
The Future Is Federated: My Fediverse Starter Guide
A starter guide for the Fediverse: what it is, how to join and its culture
Bridgy Fed for the fediverse (@ap.brid.gy)
Bridgy Fed (https://fed.brid.gy/) bot user for the fediverse. To bridge your Bluesky account to the fediverse, follow this account. To ask a fediverse user to bridge their account, send their address (eg @user@instance) to this account in a chat message.…
We're so excited to support @thisismissem.social's work bringing FedCM to the open social web! atproto.com/blog/working-to-decentralize-…
Working to Decentralize FedCM - AT Protocol
atproto.comIt's release week at the house, and here's our next announcement: Mise en Mode, the emerging web standard! AT Protocol is a federated model for building social media apps like Bluesky. We want folks in the Atmosphere to adopt for supporting a visitor's own look over their own. standard.mode.place
standard.mode.place: carry your look from app to app
standard.mode.placeI hope @dholms.at or someone else at @bsky.app considers this before it's too late and ACLs are baked into the protocol.
Authority as Possession: Permissioned Spaces Deserve Better Than ACLs
leaflet.pubHey federated social app friends, if you're in beautiful Vienna next week and haven't yet signed up for the next atproto Vienna meetup, come by, say hi, share your decentralized web projects and have some snacks and drinks with our great community. We look forward to hosting you at the Metalab!
atproto Vienna Meetup
atmo.rsvpreminder that you can always revoke oauth access at bsky.social/account (also a good place to check for apps you forgot you logged in to !)
You can sign up for @inspo.land with your bluesky account! under the hood it creates a new private PDS using bsky for auth still a bit finicky sometimes, so lmk if you run into any issues!
also it is completely bonkers that @bsky.app requires you to select a "Hosting Provider" on login and i have to remember whatever @eurosky.social's address is. guys, if you want this decentralization thing to happen, it should not suck so much to use! the Bluesky app should just read it from my DID
3) it still doesn't fully cover all use cases well or at all 4) bsky.app still didn't manage to implement OAuth at all Yes, we should all be moving to OAuth w/ scopes, that's the goal, but give people some slack, it's all still rather fresh, we'll get there… (yes, it's me, I'm those people)
