gainforest-oauth-setup

To set up ATProto OAuth in Next.js App Router, this Skill automates the secure integration flow using gainforest-sdk-nextjs, providing server-side helpers, Supabase-backed session storage, and production-ready routes for authorize, callback, logout, and session checks.

Yes, you can use Supabase to manage ATProto OAuth sessions. This Skill implements Supabase-backed storage for session management and temporary states, alongside public JWKS and client-metadata endpoints for the OAuth flow.

Adding ATProto authentication for GainForest or Hypercerts requires server-side OAuth routes, JWKS endpoints, and client-metadata configuration. This Skill provides the complete blueprint to enable login, logout, and session management using the jose dependency.

This ATProto OAuth integration supports both local development and production. It includes loopback support for local testing and production-ready configuration guidelines for PDS ecosystems like climateai.org and gainforest.id.

JWKS and client-metadata endpoints are required for ATProto OAuth to securely expose public keys and client configuration. This Skill automates the creation of these public endpoints alongside the core authorize, callback, and logout routes.

The best way to handle ATProto PDS login and logout flows in Next.js is by implementing dedicated server routes. This Skill provides a production-ready set of routes for authorize, callback, session checks, and logout using Supabase.