Securely authenticate with your Bluesky account using OAuth 2.0 with DPoP (Demonstrating Proof-of-Possession) tokens.
Link your GitHub, domain, and other accounts to your Bluesky identity. Cryptographically signed, user-owned, and portable.
Building OAuth Authentication for Bluesky: A Complete Guide for Web and iOS Apps - Lost in Inference
How to implement secure, standards-compliant OAuth 2.1 + PKCE authentication for AT Protocol apps with separate web and mobile flows
How to verify your Bluesky account - Bluesky
Here's how to verify your Bluesky account by setting your website as your username.
your app can run its own pds - keith.is
if you’re building on atproto, you’ve probably reached for “sign in with bluesky” as your auth story. it works! the OAuth flow is fine. but every time a user shows up without a bluesky account, you have to send them to bluesky first, watch them get confused by a totally different brand, and hope they come back. that’s a weird seam in your own product.
How I Implemented OAuth for Bluesky in a Next.js App
OAuth is a standard, but every platform has its quirks. When Bluesky released their OAuth...
ATProto OAuth Quickstart Guide | Artur | Looking for work
Setting Up Bluesky OAuth in Your Web App: A Developer's Guide If you're building an app that needs to authenticate with Bluesky, you'll need to implement their OAuth flow. While the official docs are comprehensive, they can be a bit overwhelming. Let's break down the process into manageable steps. ...
OAuth Client Security in the Atmosphere · bluesky-social atproto · Discussion #3950
The following was written by the Bluesky team as an overview of OAuth client security considerations, especially for client app developers or readers of the ATProto OAuth profile specification. Set...
SMM Tools • App Password or Oauth for Bluesky? - Hilary's Leaflet
Some work needs to be done before App Passwords can even remotely be retired. Make that a lot of work - none of these multi-platform tools have implemented it OR the two that did have not implemented Oauth for different PDSs.
Introducing bsky.storage: Own Your Social Identity
Take back control of your online identity. Our new tool, bsky.storage, backs up your Bluesky account hourly — free, secure &…
A New Form of Verification on Bluesky - Bluesky
We’re introducing a new layer of verification — a user-friendly, easily recognizable badge. Additionally, independent organizations can verify accounts directly through our Trusted Verifiers feature.
Blue Thread - Connection
Note : for security reasons, don't use the main password for your Bluesky account, but generate an app password that you'll use only for this application.You can manage your app passwords on this page : Settings > Advanced > App Passwords.
better-auth-bsky - npmx
A better-auth plugin that adds ATProto/Bluesky OAuth 2.1 authentication (DPoP, PAR, PKCE) via @atcute/oauth-node-client.
You can sign up for @inspo.land with your bluesky account! under the hood it creates a new private PDS using bsky for auth still a bit finicky sometimes, so lmk if you run into any issues!
I built a translator between Atproto's OAuth and OIDC, so apps like @tailscale.com can use your Bluesky identity. It includes a whitelist so you can invite people directly using their DID!
Decentralised Identity 🤝 Mesh Networking
thinking-with-portals.leaflet.pubThat’s not what this is. You can sign up for tangled completely independently of Bluesky. And once you’ve done that, you can use that same account to login to any other app in the Atmosphere, still without ever touching Bluesky.
Erlend Sogge Heggen
Tangled, Roomy, Leaflet and dozens other platforms will be bringing in the next 100M users onto the AT protocol. That is a Very Good Thing for Bluesky as well; every new member of AT-net is essentially a member of the expanded Bluesky-net. We should all want ’that sequence’ to be super common.
reminder that you can always revoke oauth access at bsky.social/account (also a good place to check for apps you forgot you logged in to !)
