Post

If you happen to get a `Unknown authorization session` error please try to log in again after getting that error. I think that is caused by your old cookie. I could / should probably handle that a bit better, but it's late and I have work tomorrow πŸ˜…. I'll investigate tomorrow morning.

Thanks for trying it out. I think the error might be related to old cookies from a previous login with username / password. Maybe I should try and delete those cookies as a precaution before continuing with the flow. I'm a little hesitant to touch it because it works sometimes πŸ˜…

It worked! Nit: the OAuth redirect was to `bsky.social` and not to `bsky.app`, so I had to manually tell my password manager that that domain is also Bluesky. But that's not on you, I believe.

My code is not open source unfortunately, but I used this post as an example of how to do it. bsky.app/profile/zeu.... It was the best example I found of how to implement it.

Simon Holmes@srsholmes.com

If you want to know how to implement OAuth for @bsky.app . This is the best example I have found. Its really clear and the easiest way, and done for modern frameworks. Thanks for the help @zeu.dev . πŸ™‚

Good to know: when I loaded you login page again and logged in again, the redirect did work...? πŸ€·πŸΌβ€β™‚οΈ

Yeah I think I'm missing something around refresh tokens / clearing up old cookies for the user. Which is causing some issues. Thanks for sharing the information, and thanks for giving the app a go πŸ™‚

So many people have given feedback that they don't feel comfortable inputting passwords into third party apps. OAuth is a bit more secure in that manner and when it's properly fleshed out it will allow for different permissions.

Interesting! I mean, technically one is not more secure than the other afaik. Could even argue that app passwords are stronger because they are unique for each app. But if it holds back people from signing it, it's a good reason to switch!

I'd argue that it's slightly more secure in that the app developer can't use / know your password to login to bluesky. App passwords are not app specific, they can be used to login to any app supporting bluesky accounts.