Skip to main content


current progress on Bluesky OAuth login for my web app:

  • you give me your Bluesky handle
  • I have two methods of turning this into your DID, one via DNS and one via HTTP. I try both and use whichever works.
  • Now I have your DID, I need to go get your DID document. There's more than one type of DID, but so far I've only bothered to support one, which I just fetch from the directory.
  • Now I have your DID document, I can look up what your PDS is.
  • Now I have your PDS, I can ask it where the authorization servers are.
  • Now I've got an authorization server, I can ask it for the authorization server endpoints.
  • Now I think I can start the OAuth process?
  • It's not like the OAuth process is simple either

😵‍💫