Post

Jon Buda
@jonbuda.com

Has anyone built a working OAuth flow for Bluesky/atproto in Ruby/Rails, or do I have to hack this together myself? It's definitely more involved that most OAuth implementations, and we'd really rather not just store people's Bluesky passwords, like most apps seem to be doing.

0 reposts9 likes

Gregory Brown [MOVED, SEE BIO]
@skillstopractice.com

Most apps are using "App Passwords" which you can invalidate individually but you're right, those are cumbersome and require the app developer to store secrets. OAuth still doesn't have scopes so it requires quite a lot of trust, but that'll change over time. I saw someone *start* a Ruby client...

Lucian Ghinda
@lucianghinda.com

I think @marckohlbrugge.com tried this path with Omniauth He shared some gists and code samples here bsky.app/profile/marc...

Marc Köhlbrugge@marckohlbrugge.com

Here's how far I got: github.com/marckohlbrug... It accepts a handle (e.g. marckohlbrugge.com), finds the right auth server to redirect to (looks at TXT records, etc). Redirects you there. Finally redirects you back to the app. That's where I hits an error

github.comGitHub - marckohlbrugge/omniauth-atprotoContribute to marckohlbrugge/omniauth-atproto development by creating an account on GitHub.