Progress on Auth Scopes Implementation (August 2025) · bluesky-social atproto · Discussion #4118

Since our last update on Auth Scopes, the Bluesky team has been hard at work adding support to our reference PDS implementation. Aspects of this work are starting to roll out in the production netw...

Bluesky social oauth scope "Bad token scope"

I'm trying to build an app that integrates with bsky's OAuth and API. Using the below the document using the "Browser App" option. https://docs.bsky.app/docs/advanced-guides/oauth-client ...

Bluesky permission sets require inconsistent aud parameter · Issue #4850 · bluesky-social/atproto

Describe the bug In trying to rewrite sill.social to use granular permission sets, I've found that app.bsky.authViewAll does not allow access to app.bsky.feed.getFeedGenerator, app.bsky.graph.g...

Appendix:Xanadu - AT Protocol Paper Errata and Details

A description of known problems in Bluesky PBC's paper, "Bluesky and the AT Protocol: Usable Decentralized Social Media", as well as notes on terminology changes and how Bluesky's implementation differs from that described in the paper.

app.bsky.notification.getPreferences | Bluesky

*This endpoint is part of the Bluesky application Lexicon APIs (`app.bsky.*`). Public endpoints which don't require authentication can be made directly against the public Bluesky AppView API: https://public.api.bsky.app. Authenticated requests are usually made to the user's PDS, with automatic service proxying. Authenticated requests can be used for both public and non-public endpoints.*

proposals/0016-permissioned-data at main · bluesky-social/proposals

Bluesky proposal discussions. Contribute to bluesky-social/proposals development by creating an account on GitHub.

app.bsky.actor.getProfile | Bluesky

*This endpoint is part of the Bluesky application Lexicon APIs (`app.bsky.*`). Public endpoints which don't require authentication can be made directly against the public Bluesky AppView API: https://public.api.bsky.app. Authenticated requests are usually proxied via the user's PDS, using service proxy headers. Authenticated requests can be used for both public and non-public endpoints.*

app.bsky.actor.searchActorsTypeahead | Bluesky

*This endpoint is part of the Bluesky application Lexicon APIs (`app.bsky.*`). Public endpoints which don't require authentication can be made directly against the public Bluesky AppView API: https://public.api.bsky.app. Authenticated requests are usually made to the user's PDS, with automatic service proxying. Authenticated requests can be used for both public and non-public endpoints.*

proposals/0016-permissioned-data/README.md at main · bluesky-social/proposals

Bluesky proposal discussions. Contribute to bluesky-social/proposals development by creating an account on GitHub.