OAuth scopes (#3806) · bluesky-social/atproto@1899b1f

Proposal: OAuth Scopes · bluesky-social atproto · Discussion #3655

Note: a more complete proposal was published in July 2025: https://github.com/bluesky-social/proposals/tree/main/0011-auth-scopes We’re continuing work on rolling OAuth out to the atproto network. ...

Updated Auth Scopes Proposal · bluesky-social atproto · Discussion #4013

This is a discussion thread for the July 2025 Auth Scopes proposal

Progress on Auth Scopes Implementation (August 2025) · bluesky-social atproto · Discussion #4118

Since our last update on Auth Scopes, the Bluesky team has been hard at work adding support to our reference PDS implementation. Aspects of this work are starting to roll out in the production netw...

Working OAuth example? · bluesky-social atproto · Discussion #3075

For the last week I've tried to implement ATProto OAuth with Ruby, but it's proven to be very complicated. Although there are numerous existing OAuth libraries, none implement the more mode...

Bluesky social oauth scope "Bad token scope"

I'm trying to build an app that integrates with bsky's OAuth and API. Using the below the document using the "Browser App" option. https://docs.bsky.app/docs/advanced-guides/oauth-client ...

OAuth Roadmap · bluesky-social atproto · Discussion #2656

OAuth is nigh! Protocol support has been a long time coming and we are pumped. It should greatly improve the user and developer experiences building secure apps and integrations on atproto. And cou...

ATProto OAuth Quickstart Guide | Artur | Looking for work

Setting Up Bluesky OAuth in Your Web App: A Developer's Guide If you're building an app that needs to authenticate with Bluesky, you'll need to implement their OAuth flow. While the official docs are comprehensive, they can be a bit overwhelming. Let's break down the process into manageable steps. ...

OAuth Client Security in the Atmosphere · bluesky-social atproto · Discussion #3950

The following was written by the Bluesky team as an overview of OAuth client security considerations, especially for client app developers or readers of the ATProto OAuth profile specification. Set...

Permission set (#4108) · bluesky-social/atproto@f9dc9aa

* Export constants and type assertion utilities * Add permission set support to oauth provider * improve permission set parsing * Rename `PermissionSet` to `ScopePermissions` * Improve performa...

Scope Builder - AT Protocol Docs - AT Protocol

Interactive tool for building OAuth scope strings and permission sets.

OAuth Client Implementation | Bluesky

This is a guide to implementing atproto OAuth clients "The Hard Way." Optimistically, most developers will have an SDK available for their programming language which supports OAuth, and they can simply refer to SDK documentation. This guide is intended for early adopters, SDK maintainers, or developers with more sophisticated OAuth needs. It is agnostic to whether developers are building clients to work the the app.bsky microblogging Lexicons, or implementing novel application Lexicons.

PDS: review existing oauth scopes via connected apps list · Issue #4838 · bluesky-social/atproto

Scenario I want to stay on top of which apps are messing with what in my PDS. To do so, it's not enough to just make a granular Goldilocks decision once per app. (The more apps I use, the fewer...

Proposal: OAuth-based account creation · bluesky-social atproto · Discussion #4587

We recently added to the reference PDS (and underlying OAuth Provider) implementation support for Initiating User Registration via OpenID Connect 1.0, however, what I wasn't aware of when I add...

atproto oauth2 vs. createSession, scope problems: (transition:generic vs. com.atproto.access) · bluesky-social atproto · Discussion #3211

Summary: When I authenticate via oauth2 on iPhone (via the blueSky page sheet that springs up ), I get an access token with "atproto transition:generic" scope. But passing that token to u...

Building OAuth Authentication for Bluesky: A Complete Guide for Web and iOS Apps - Lost in Inference

How to implement secure, standards-compliant OAuth 2.1 + PKCE authentication for AT Protocol apps with separate web and mobile flows

proposals/0004-oauth/README.md at main · bluesky-social/proposals

Bluesky proposal discussions. Contribute to bluesky-social/proposals development by creating an account on GitHub.