Building OAuth Authentication for Bluesky: A Complete Guide for Web and iOS Apps - Lost in Inference

ATProto OAuth Quickstart Guide | Artur | Looking for work

Setting Up Bluesky OAuth in Your Web App: A Developer's Guide If you're building an app that needs to authenticate with Bluesky, you'll need to implement their OAuth flow. While the official docs are comprehensive, they can be a bit overwhelming. Let's break down the process into manageable steps. ...

OAuth Client Implementation | Bluesky

This is a guide to implementing atproto OAuth clients "The Hard Way." Optimistically, most developers will have an SDK available for their programming language which supports OAuth, and they can simply refer to SDK documentation. This guide is intended for early adopters, SDK maintainers, or developers with more sophisticated OAuth needs. It is agnostic to whether developers are building clients to work the the app.bsky microblogging Lexicons, or implementing novel application Lexicons.

tijs/atproto-oauth

Framework-agnostic OAuth integration for AT Protocol (Bluesky) applications

OAuth for ATProto Apps Part 2: Mobile Implementation - Lost in Inference

Part 2 of a 2-part series on implementing OAuth authentication for ATProto (Bluesky) applications.

How I Implemented OAuth for Bluesky in a Next.js App

OAuth is a standard, but every platform has its quirks. When Bluesky released their OAuth...

OAuth Client Security in the Atmosphere · bluesky-social atproto · Discussion #3950

The following was written by the Bluesky team as an overview of OAuth client security considerations, especially for client app developers or readers of the ATProto OAuth profile specification. Set...

your app can run its own pds - keith.is

if you’re building on atproto, you’ve probably reached for “sign in with bluesky” as your auth story. it works! the OAuth flow is fine. but every time a user shows up without a bluesky account, you have to send them to bluesky first, watch them get confused by a totally different brand, and hope they come back. that’s a weird seam in your own product.

OAuth Introduction - AT Protocol

OAuth for AT Protocol application developers.

OAuth for AT Protocol | Bluesky

We are very happy to release the initial specification of OAuth for AT Protocol! This is expected to be the primary authentication and authorization system between atproto client apps and PDS instances going forward, replacing the current flow using App Passwords and createSession over time.

Proposal: OAuth Scopes · bluesky-social atproto · Discussion #3655

Note: a more complete proposal was published in July 2025: https://github.com/bluesky-social/proposals/tree/main/0011-auth-scopes We’re continuing work on rolling OAuth out to the atproto network. ...

better-auth-bsky - npmx

A better-auth plugin that adds ATProto/Bluesky OAuth 2.1 authentication (DPoP, PAR, PKCE) via @atcute/oauth-node-client.

Securely authenticate with your Bluesky account using OAuth 2.0 with DPoP (Demonstrating Proof-of-Possession) tokens.

Cross-App Authentication on AT Protocol

We recently built cross-app authentication between Roomy and OpenMeet using AT Protocol service auth JWTs. The idea came from @erlend.sh (his writeup), @zicklag.dev introduced me to PDS service auth, and @meri.garden contributed reviews. I made the implementation in both apps: A user logs into Roomy, navigates to an OpenMeet event, and is silently authenticated and able to use their account on OpenMeet without a second login. Full technical writeup: Cross-App Authentication on AT Protocol I’m ...

OAuth Roadmap · bluesky-social atproto · Discussion #2656

OAuth is nigh! Protocol support has been a long time coming and we are pumped. It should greatly improve the user and developer experiences building secure apps and integrations on atproto. And cou...