OAuth 2.0 DPoP-bound Access Tokens :: Spring Security

Demonstrating Proof-of-Possession (DPoP) - Auth0 Docs

Learn how to use Demonstrating Proof-of-Possession (DPoP) to sender constrain access tokens in Auth0.

OAuth Roadmap · bluesky-social atproto · Discussion #2656

OAuth is nigh! Protocol support has been a long time coming and we are pumped. It should greatly improve the user and developer experiences building secure apps and integrations on atproto. And cou...

OAuth Improvements - AT Protocol

We've been making improvements to the end-user and developer experiences with atproto OAuth.

index.html · by atprotofans.com

An browser-side ATProtocol OAuth application with no dependencies that verifies supporters

IndieAuth

IndieAuth is a decentralized identity protocol built on top of OAuth 2.0.

Securely authenticate with your Bluesky account using OAuth 2.0 with DPoP (Demonstrating Proof-of-Possession) tokens.

OAuth for AT Protocol | Bluesky

We are very happy to release the initial specification of OAuth for AT Protocol! This is expected to be the primary authentication and authorization system between atproto client apps and PDS instances going forward, replacing the current flow using App Passwords and createSession over time.

OAuth Introduction - AT Protocol

OAuth for AT Protocol application developers.

What is OAuth?

Wherein I [try to] answer a seemingly straightforward question: "WTF is OAuth, anyhow?"

OAuth for ATProto Apps Part 2: Mobile Implementation - Lost in Inference

Part 2 of a 2-part series on implementing OAuth authentication for ATProto (Bluesky) applications.

Scope Builder - AT Protocol Docs - AT Protocol

Interactive tool for building OAuth scope strings and permission sets.

Early Permission Sets · bluesky-social atproto · Discussion #4437

Progress is coming along on "Permission Sets", as part of the atproto OAuth and permission system. As with other parts of the protocol, seeing how this functionality gets implemented for ...

Enterprise-Managed Authorization: Zero-touch OAuth for MCP

The Enterprise-Managed Authorization extension to the Model Context Protocol is now stable, enabling organizations to centrally provision MCP server access through their identity provider so users get connected servers on first login without per-app OAuth.

Building AIP: An ATProtocol Authorization Gateway - Nick's Blog

OAuth is the first challenge developers face in the atmosphere. This post is about AIP, the authorization gateway we built at Graze Social to alleviate some of the pain.