Implement, debug, and audit AT Proto OAuth flows across Rust, TypeScript, and Go.
npx skills add https://github.com/ngerakines/atproto-skills --skill atproto-oauth
Please help me install this Agent Skill. Skill: atproto-oauth Source: https://github.com/ngerakines/atproto-skills/tree/main/skills/atproto-oauth Command: npx skills add https://github.com/ngerakines/atproto-skills --skill atproto-oauth
This Skill provides a comprehensive, cross-language reference and tooling for implementing, auditing, and debugging AT Protocol OAuth flows (PAR, PKCE, DPoP) across Rust, TypeScript, and Go, including dynamic client metadata publication and per-DID session handling.
Start by hosting the metadata endpoint and follow the three principal steps: begin the PAR flow, complete the token exchange on callback, then resume the session to make authenticated requests.
High-intent search queries and answers about installing and using this skill.
AT Protocol OAuth implementation across Rust, TypeScript, and Go requires handling PAR, PKCE, and DPoP flows. This Skill provides cross-language reference tooling and canonical workflows ensuring secure interoperability and strict spec compliance for confidential backends, public SPAs, and native clients.
DPoP nonce handling in ATProto OAuth provides per-origin proof-of-possession protection during token issuance. This Skill covers explicit nonce management and key handling required by the shared OAuth spec, enabling secure per-DID session management across different client architectures.
Setting up dynamic client metadata publication for AT Protocol authentication involves hosting a metadata endpoint before initiating the PAR flow. This Skill guides you through the three principal steps: hosting metadata, beginning the PAR flow, and completing the token exchange on callback to establish authenticated requests.
Yes, AT Proto OAuth supports confidential BFF backends alongside public SPAs and native clients. This Skill covers end-to-end OAuth workflows tailored for these distinct client types, ensuring secure session management and DPoP protection regardless of your specific application architecture.
ATProto OAuth token exchanges fail when strict metadata and flow invariants defined in the shared spec are not met. This Skill helps audit and debug these failures by providing canonical reference patterns for key rotation, explicit key handling, and per-DID identity verification across AS and PDS discovery.
GainForestAutomate ATProto OAuth integration in Next.js App Router apps with Supabase session storage.
stephnangueManage secrets, sign certificates, and encrypt keys via HashiCorp Vault API.
dotBeepsCoordinate AT Protocol authentication, lexicons, and record handling for Bluesky integrations.
AbdullahMalik17Configure OAuth 2.1 and OIDC authentication with Better Auth and MCP.
