ATProtocol OAuth pairs effortlessly with Lexicon Garden to make it easy for developers to experiment with authenticated XRPC endpoints.
OAuth Roadmap · bluesky-social atproto · Discussion #2656
OAuth is nigh! Protocol support has been a long time coming and we are pumped. It should greatly improve the user and developer experiences building secure apps and integrations on atproto. And cou...
index.html · by atprotofans.com
An browser-side ATProtocol OAuth application with no dependencies that verifies supporters
Building AIP: An ATProtocol Authorization Gateway - Nick's Blog
OAuth is the first challenge developers face in the atmosphere. This post is about AIP, the authorization gateway we built at Graze Social to alleviate some of the pain.
OAuth Client Implementation | Bluesky
This is a guide to implementing atproto OAuth clients "The Hard Way." Optimistically, most developers will have an SDK available for their programming language which supports OAuth, and they can simply refer to SDK documentation. This guide is intended for early adopters, SDK maintainers, or developers with more sophisticated OAuth needs. It is agnostic to whether developers are building clients to work the the app.bsky microblogging Lexicons, or implementing novel application Lexicons.
Lexicons | at-store
Browse verified apps that share repo record collection lexicons from OAuth scopes.
OAuth for ATProto Apps Part 2: Mobile Implementation - Lost in Inference
Part 2 of a 2-part series on implementing OAuth authentication for ATProto (Bluesky) applications.
OAuth Improvements - AT Protocol
We've been making improvements to the end-user and developer experiences with atproto OAuth.
Lexicon Garden - Nick's Blog
Lexicon Garden helps you browse, view, and understand ATProtocol Lexicons.
Building a Browser-Based ATProtocol OAuth App with Supporter Validation - ATProtoFans Blog
XRPC requests between atproto servers are authenticated using JWTs. There are some inconsistencies in how OAuth permissions, PDS proxy headers, and JWTs all represent the "audience" of these tokens. This proposal gives background and describes a rough solution. Looking for rapid feedback!
proposals/0013-service-auth-refs at main · bluesky-social/proposals
github.comatpxrpc is a tool in the atproto-crates that makes it easy to invoke XRPC methods. It supports multiple identities, direct and proxy XRPC calls, binary inputs, and more. Install with homebrew: brew tap ngerakines/tap && brew install atpxrpc Read more at ngerakines.me/atpxrpc.html
atpxrpc
ngerakines.mealright protocol devs, some wonky bits: we revisited the recent service auth JWT harmonization proposal, and have a revision up that sticks with a single string 'aud' field. also touches on issuer 'kid', and makes 'lxm' mandatory for XRPC endpoints.
proposals/0014-service-auth-revised at main · bluesky-social/proposals
github.comWe just shipped our entire API as XRPC endpoints 🎉 Don't like our directory? Index the firehose yourself Hate our client? Build your own Want your AI to register new machine for you to earn? Automate it Need to add inference to your atproto app? Easy peazy See the full api here 👇
AppView API · co/core
console.cocore.dev
