current progress on Bluesky OAuth login for my web app:
- you give me your Bluesky handle
- I have two methods of turning this into your DID, one via DNS and one via HTTP. I try both and use whichever works.
- Now I have your DID, I need to go get your DID document. There's more than one type of DID, but so far I've only bothered to support one, which I just fetch from the directory.
- Now I have your DID document, I can look up what your PDS is.
- Now I have your PDS, I can ask it where the authorization servers are.
- Now I've got an authorization server, I can ask it for the authorization server endpoints.
- Now I think I can start the OAuth process?
- It's not like the OAuth process is simple either
😵💫
Ben Weinstein-Raun likes this.