jola.dev/latch

XRPC requests between atproto servers are authenticated using JWTs. There are some inconsistencies in how OAuth permissions, PDS proxy headers, and JWTs all represent the "audience" of these tokens. This proposal gives background and describes a rough solution. Looking for rapid feedback!

atpxrpc is a tool in the atproto-crates that makes it easy to invoke XRPC methods. It supports multiple identities, direct and proxy XRPC calls, binary inputs, and more. Install with homebrew: brew tap ngerakines/tap && brew install atpxrpc Read more at ngerakines.me/atpxrpc.html

Getting there... ATProtoKit +ATIdentityTools + OAuthenticator + Jot (Context: made a tiny macOS app that can log into your account using OAuth.)

I've been digging deep into what Elixir atproto OAuth can look like. This is not the final version yet, but it's starting to shape up. blog.annot.at/side-quest-an-elixir-atproto-…

Wrote a little quickstart and background for how to my Elixir atproto OAuth library to build apps. Definitely planning to write more content like this! Atproto enables building really interesting apps and experiences, and #ElixirLang is a great language for it jola.dev/posts/latch-elixir-atproto-oa…

here's my take on a minimal oauth browser client for atproto! no special API client class — just use plain `fetch` to make requests and a service worker automatically handles authorization headers/token refreshes/dpop retries/etc. (very experimental, not tested in production, use at your own risk)

it's been a hot minute, but atex v0.10.0 is out now! oauth internals got a bit of a refactor, :telemetry events have been added to XRPC, identity resolution, OAuth flows, and service auth validation, and XRPC requests now have a custom User-Agent! #atproto #elixir