if you release anything on atproto, don't forget about: - third party PDSes - did:web - record validation (never trust anyone) - oauth (on the long term) - therapy for yourself - ThreadSky

juli.ee • 31 days ago

if you release anything on atproto, don't forget about:
- third party PDSes
- did:web
- record validation (never trust anyone)
- oauth (on the long term)
- therapy for yourself

Comments

hotsocket.fyi•31 days ago

how validate

lamp.bsky.social•31 days ago

check everything against their lexicons, if using javascript you can use atproto lexicon package

kasey.cafe•31 days ago

public transport

doesnm.cc•31 days ago

Please say this to Frontpage (not support did:web) and Skybridge (not support third-party PDSes)

quinnypig.com•31 days ago

This OAuth implementation might kill me.

nat.vg•31 days ago

it’s awful but luckily there are good libraries out there that handle a majority of stuff for you :)

quinnypig.com•31 days ago

What makes this special is I’m doing it statelessly in AWS Lambda.

inuk.moe•21 days ago

I haven’t worked much with serverless, so my technique may be invalid here, but I personally tend to push state to either the client or the db, the server is only there for transport and transform of data

nat.vg•21 days ago

yeah this is what i usually do, i don’t think there’s a trustworthy enough approach to implementing oauth2 without *some* kind of state, be it redis or some other cache/database

inuk.moe•21 days ago

Redis is just RAM for rich people
..
..
/s

dreary.dev•31 days ago

sounds annoying. when do i get to monetize?

advancedgooningtipsandtricks.site•31 days ago

if you're on bsky infrastructure you have to pay
3rd party PDSes get it for free

shreyanjain.net•31 days ago

im gonna monetize you

oracularhades.com•22 days ago

this feels violating lmao

kasey.cafe•31 days ago

hey that's not legal

osmote.net•31 days ago

tell me about did:web I was having an issue I think might be related?

futur.blue•31 days ago

mainly just people assuming they can just look up https://plc.directory/${did}

juli.ee•31 days ago

there are two DID methods supported on atproto
did:plc and did:web
for the second one, you can fetch the did document from https://example.com/.well-known/did.json with https://example.com being deduced from the DID (did:web:example.com)
it's that simple, then from the did doc you can get the PDS endpoint

osmote.net•31 days ago

that's exactly what I was curious about, thank you so much!!

ngerakines.me•21 days ago

I think that last one is really key.

Comments

Posting Rules

Reply