Post

PSA: You can make the atproto OAuth flow look way less sketchy with this one weird trick…

dame@dame.is

if you’re using Bluesky OAuth in your app, change your metadata filepath to /oauth-client-metadata.json to have just your brand domain show up on the authorize screen rather than a suspicious looking url string i think 90% of atproto apps don’t do this, seems to not be documented yet

6 reposts54 likes