Here's what I've been working on with @germnetwork.com: cross platform swift OAuth and AT Protocol Client libraries.
Mark X
Hello from afar to #atconf attendees! For native app developers, we have something to share: we're now building our next Swift stack for AT Protocol in the open: mark-germ.leaflet.pub/3mhy3iphvp22o 1/6
Mar 26, 2026 at 5:16 PM
Cross-App Authentication on AT Protocol
We recently built cross-app authentication between Roomy and OpenMeet using AT Protocol service auth JWTs. The idea came from @erlend.sh (his writeup), @zicklag.dev introduced me to PDS service auth, and @meri.garden contributed reviews. I made the implementation in both apps: A user logs into Roomy, navigates to an OpenMeet event, and is silently authenticated and able to use their account on OpenMeet without a second login. Full technical writeup: Cross-App Authentication on AT Protocol I’m ...
OAuth Patterns - AT Protocol Docs - AT Protocol
Auth for AT Protocol application developers.
OAuth Patterns - AT Protocol Docs - AT Protocol
Auth for AT Protocol application developers.
tijs/atproto-oauth
Framework-agnostic OAuth integration for AT Protocol (Bluesky) applications
Integrating Germ with AT Protocol — Germ Network
End-to-end encrypted Germ DM is now a Bluesky messenger. In this technical post, we introduce the architecture of Germ’s integration with AT Protocol. From the beginning, Germ has been building for an interoperable E2EE ecosystem, and this extends to our integration with AT Protocol. We’ll define th
Scope Builder - AT Protocol Docs - AT Protocol
Interactive tool for building OAuth scope strings and permission sets.
OAuth for AT Protocol | Bluesky
We are very happy to release the initial specification of OAuth for AT Protocol! This is expected to be the primary authentication and authorization system between atproto client apps and PDS instances going forward, replacing the current flow using App Passwords and createSession over time.
oauth-client-metadata.json | AT Protocol Community Wiki
A community-maintained wiki for the AT Protocol ecosystem
Building OAuth Authentication for Bluesky: A Complete Guide for Web and iOS Apps - Lost in Inference
How to implement secure, standards-compliant OAuth 2.1 + PKCE authentication for AT Protocol apps with separate web and mobile flows
at the moment they are somewhat far apart (for one it currently has its own PoP mechanism with its own nonces, etc.), but it is still possible! there is a discussion here: github.com/oauth-wg/draft-ietf-oauth-att…
Similar proposal in AT Protocol: DPoP-bound private_key_jwt client authentication · Issue #123 · oauth-wg/draft-ietf-oauth-attestation-based-client-auth
github.com
