Honestly bonkers considering your services are turning into the backbone of non PBC development.

Of course they’re only properly defined in the tests 🤦🏾‍♀️

Ah yes. So the oauth specification was in the works since ~end of last year but since 2023 app passwords were the way to sign into ATproto apps without handing over your real one. Oauth is only really hitting full adoption in the last I’d say two months but still isn’t very well defined

App passwords provide the same permissions listed in the screenshot.

Going to drop this shitpost in real quick

App passwords were always a bit crap tbh as you must create each and there’s nothing preventing a user from handing their own password over. Oauth fixed that but bsky only requires a specific subset of scopes to be provided in the spec and that leaves devs uncertain so transition:generic it is

Out of curiosity, how many Pis are you up to now

I absolutely agree. @baileytownsend.dev dropped a hot take on it yesterday and I added mine that’s essentially, oauth is misleadingly secure because these scopes exists.

So this is a consequence of the oauth scope transition:generic which I believe was intended as a way for apps to switch from using app passwords which are stupid permissive but then devs use it because it’s easy ¯\_(ツ)_/¯

It’s “misleading” in that everyone was using app passwords that did this

Oh gosh I would love to tell you what’s been going on this past month but it’s a touch to public on this account.
There’s a reason my main catch phrase in bios is “been in tech too long”

I’ve been having a wild time with this. Entire year has been a whole lot of “people want to learn from you” followed by men being upset when I teach and correct them.

The prompt was basically “give me a config example for this client” and it simply refused to even try.

I’m sure we will meet up at @atprotocol.dev conf in march :)
I’m mostly in Europe this days jumping between Munich, Berlin, and London.

How did I miss you in Berlin :((

How dare they light the beacon just as I’m going to bed.

New copypasta just dropped. Thank you Ian for blessing us.