3 ms·
I was looking at the code this past week and they are only using simple password auth: https://atproto.com/guides/applications#signing-in https://atproto.com/gu
by faizshah 4y ago
I was looking at the code this past week and they are only using simple password auth: https://atproto.com/guides/applications#signing-in https://atproto.com/guides/applications#signing-in
I was hoping since identity is such a corner stone of this project that there would be a more fleshed out auth system (OIDC?).
Other than that it seems like a reasonable implementation, but I don’t like the addressing scheme.
They are using identifiers that look like emails: bluesky@bluesky.app
But they are not actually emails so they can collide with real emails.
- pfraze 4y agoWe don’t use email-style IDs; we use domain names (@alice.com) which will often be subdomains (@alice.host.com). The auth schemes will evolve. That technique is meant for your main app.