Post

i'm prototyping some small widgets for @atprotofans.com creators, this one is the Supporter Stack! add your face to the list: atprotofans.com/u/zeu.dev

3/1/26, 2:47 pm5 reposts43 likes

Luna

@shi.gg

3 Jan

why does it need an app password to accept sponsorships lol

midwest emo fan

@natalie.sh

3 Jan

i think the official reason is oauth expiry but in practice oauth expiry on servers is so long it doesn’t seem necessary anymore

Luna

@shi.gg

3 Jan

isnt it like 2 years if refreshed

yes

i think it's to write to your repo and therefore accept supporters at any time, but i dont actually know why cc @ngerakines.me

but, oauth2..?

The simple answer is that atprotofans is an early technical preview where we’re trying out stuff. Long term we won’t need that app password bit.

dad (aka miguel)

@aka.dad

4 Jan

thats a fair answer, from what i've learned while building out my own atproto oauth and client package is that app passwords, while invasive, are just easier for scheduled tasks, creating records or completing other actions on the behalf of the user while they're away from the site.

dad (aka miguel)

@aka.dad

4 Jan

like you mentioned, great for experimenting quickly. and unless you are using a well developed library/package for atproto oauth, it is very annoying to set up. you wouldn't want to fail to create these records or delay them while you email the user, so app passwords ftw (until the site is matured)

aodhan

@mvaodhan.bsky.social

4 Jan

Thats cool