







To generate a JWT signed with the ES256 algorithm and ECDSA keys using the P-256 (secp256k1) curve, you need to use openssl commands or the auth0 library . This procedure explains how to generate a JWT with openssl commands. A JWT consists of three parts separated by dots. Header Payload Signature T…
Navigating RS256 and JWKS | Auth0
Learn how to use an algorithm like RS256 and the JWKS endpoint to allow your applications to trust the JWTs signed by Auth0.
Generate Keypair using secp256r1 with Julia - Keypair Generation Guide - MojoAuth
Generate secp256r1 keypairs in Julia for secure applications. Efficiently create private and public keys for your cryptographic needs.
Secure APIs Without JWT: Alternatives You Should Know About
The default way to authenticate an API is now with JSON Web Tokens. If you talk about securing an API, someone will always say, “just use…
Generating a new GPG key - GitHub Docs
If you don't have an existing GPG key, you can generate a new GPG key to use for signing commits and tags.

Merkle Tree Certificates
This document describes Merkle Tree certificates, a new form of X.509 certificates which integrate public logging of the certificate, in the style of Certificate Transparency. The integrated design reduces logging overhead in the face of both shorter-lived certificates and large post-quantum signature algorithms, while still achieving comparable security properties to traditional X.509 and Certificate Transparency. Merkle Tree certificates additionally admit an optional signatureless optimization, which decreases the message size by avoiding signatures altogether, at the cost of only applying to up-to-date relying parties and older certificates.
mycelial-systems/keys
Create and store asymmetric keys with the webcrypto API in the browser
Keytrace — One identity, many proofs.
Link your GitHub, domain, and other accounts to your internet handle. Cryptographically signed, user-owned, and portable.
Federated Credential Management (FedCM) API - Web APIs | MDN
The Federated Credential Management API (or FedCM API) provides a standard mechanism for identity providers (IdPs) to make identity federation services available on the web in a privacy-preserving way, without the need for third-party cookies and redirects. This includes a JavaScript API that enables the use of federated authentication for activities such as signing in or signing up on a website.

kaytwo/atproto-oauth-client-server-example
Contribute to kaytwo/atproto-oauth-client-server-example development by creating an account on GitHub.
better-auth-bsky - npmx
A better-auth plugin that adds ATProto/Bluesky OAuth 2.1 authentication (DPoP, PAR, PKCE) via @atcute/oauth-node-client.

@atproto/oauth-client-node - AT Protocol
Node.js OAuth client for AT Protocol with built-in crypto and storage
Design Tokens Format Module 2025.10
This document describes the technical specification for a file format to exchange design tokens between different tools.
Shibboleth Authentication Request
Just spent a bunch of time working on the Client ID Metadata Documents internet draft to make it possible to support multiple token endpoint authentication methods — github.com/oauth-wg/draft-ietf-oauth-cli…
Document token endpoint auth methods supported by ThisIsMissEm · Pull Request #99 · oauth-wg/draft-ietf-oauth-client-id-metadata-document
github.comalright protocol devs, some wonky bits: we revisited the recent service auth JWT harmonization proposal, and have a revision up that sticks with a single string 'aud' field. also touches on issuer 'kid', and makes 'lxm' mandatory for XRPC endpoints.
proposals/0014-service-auth-revised at main · bluesky-social/proposals
github.com🚨 Docs News!! you all asked for it, so I did a medium-sized refactor of the Auth section of the atproto docs: atproto.com/guides/auth I appreciated all the little pushes here as well as contributions from @danabra.mov and @zzstoatzz.io — much happier with the flow here now and hope you will be too!
Auth - AT Protocol Docs - AT Protocol
atproto.com