Matthieu 🦋

Matthieu 🦋

@matthieu.bsky.team

Protocol Engineer at Bluesky. Building the open social web on AT Protocol. Into web standards, OAuth, TypeScript, and over engineered code. Dad, gamer, Dire Straits fan, sailor and beer enthusiast. From Brussels 🇧🇪

14.5K followers289 following314 posts

Matthieu 🦋
@matthieu.bsky.team

We know developing OAuth clients locally has been harder than it could be, partly because `localhost` isn't allowed as a `redirect_uri`. Please chime in on this discussion if you have any concerns about relaxing that particular rule.

github.comProposal: allow `localhost` redirect URIs in the localhost dev exception in the OAuth spec · bluesky-social atproto · Discussion #5255This is a proposal carrying on discussion from this closed PR: bluesky-social/atproto-website#709. There is also a corresponding open issue, bluesky-social/atproto-website#699. Currently, http://12...
Matthieu 🦋
@matthieu.bsky.team

Did you know you can start a testing ATProto OAuth client with this simple command? $ pnpx @atproto/oauth-client-browser-example 8080 You can then use the inspector console to interact with your PDS: `await bskyClient.get(app.bsky.actor.profile)` `await bskyClient.list(app.bsky.feed.post)` ...

Matthieu 🦋
@matthieu.bsky.team

Hey y'all, I just released a new version of the PDS distribution that fixes that hCaptcha/COEP issue. Update to v0.4.219 and get the new account manager interface as added bonus.

Matthieu 🦋 reposted

fry69
@fry69.dev

Those bang queries are great, but even faster is adding npmx search to the address bar in Firefox (via right click once) with a keyword (e.g. "@n"). Firefox also supports type ahead and search suggestions from npmx.dev this way. Other browsers will likely offer similar mechanisms (not tested).

patak@patak.cat

even without google search messing with websites' titles, @kagi.com has been playing a really good game at luring me into their service, to be honest

Matthieu 🦋 reposted

daniel holmgren 🫠
@dholms.at

continuing to build up our permissioned data protocol! this one asks what a bucket actually is and where the data that constitutes a bucket is stored. it argues for maintaining the atproto ethos in the permissioned data protocol as always, looking forward to hearing your thoughts!

dholms.leaflet.pubPermissioned Data Diary 3: Your Bucket, My DataThe third in a series of posts building up a solution to permissioned data on atproto. We look at two different models for where buckets live and why the simpler-looking one doesn’t work out.
Matthieu 🦋
@matthieu.bsky.team

Moved matthieusieben.com over to @blento.app. Nothing crazy to see, just glad I no longer have to worry about CSV in react server components 😅 Also, a website that uses my ATProto repo's content to generate a webpage showing my other ATProto content really show how awesome ATProto really is 🦋

matthieusieben.comMatthieu SiebenProtocol Engineer at Bluesky. Building the open social web on AT Protocol. Into web standards, OAuth, TypeScript, and quality code. Dad, sailor (crossed the Atlantic once), gamer, Dire Straits fan, an...

Matthieu 🦋 reposted

Eli Mallon
@iame.li

Taking a look at this on stream now!

Matthieu 🦋@matthieu.bsky.team

Hey y'all, we just released a new SDK for working with Lexicons in TypeScript! 🥳 It focuses on improving DX and some of the pain points of the current tooling (see my previous post below). It's currently in beta and we'd love to get your feedback 🙇‍♂️ www.npmjs.com/package/@atp...

npmjs.comnpmjs.com
Matthieu 🦋
@matthieu.bsky.team

Hey y'all, we just released a new SDK for working with Lexicons in TypeScript! 🥳 It focuses on improving DX and some of the pain points of the current tooling (see my previous post below). It's currently in beta and we'd love to get your feedback 🙇‍♂️ www.npmjs.com/package/@atp...

npmjs.comnpmjs.com
Matthieu 🦋@matthieu.bsky.team

Been building on the Atmosphere? The official Lexicon codegen tooling has some rough edges for third-party devs: • Bundle bloat • Painful maintainability • Inflexible client/server modes Wrote up the pain points (and there might be a solution coming 👀)

matthieu.leaflet.pubRethinking Lexicon Tooling for Third-Party DevelopersThe official Lexicon code generation tooling hasn't evolved much since its initial release. While it serves the core atproto codebase well, third-party developers face significant challenges with bundle size, manual maintenance, and architectural constraints that make building production-ready applications unnecessarily difficult.

Matthieu 🦋 reposted

dame
@dame.is

PSA: You can make the atproto OAuth flow look way less sketchy with this one weird trick…

dame@dame.is

if you’re using Bluesky OAuth in your app, change your metadata filepath to /oauth-client-metadata.json to have just your brand domain show up on the authorize screen rather than a suspicious looking url string i think 90% of atproto apps don’t do this, seems to not be documented yet

Matthieu 🦋
@matthieu.bsky.team

Been building on the Atmosphere? The official Lexicon codegen tooling has some rough edges for third-party devs: • Bundle bloat • Painful maintainability • Inflexible client/server modes Wrote up the pain points (and there might be a solution coming 👀)

matthieu.leaflet.pubRethinking Lexicon Tooling for Third-Party DevelopersThe official Lexicon code generation tooling hasn't evolved much since its initial release. While it serves the core atproto codebase well, third-party developers face significant challenges with bundle size, manual maintenance, and architectural constraints that make building production-ready applications unnecessarily difficult.
Matthieu 🦋
@matthieu.bsky.team

Good news everyone!

bryan newbold@bnewbold.net

excited to share that we are following through on our earlier commitments and putting together an independent+neutral organization to house the DID PLC system, includes the directory service

docs.bsky.appCreating an Independent Public Ledger of Credentials (PLC) Directory Organization | BlueskyThe Bluesky Social app is built on an open network protocol that refers to each user by a unique Decentralized Identifier, or DID (a W3C standard). The most popular supported DID method was developed ...

Matthieu 🦋 reposted

Nick Gerakines
@ngerakines.me

Ever asked "what happens when you open a browser and enter a website?" The answer depends on who you ask. Some talk desktop apps, others DNS/TCP, some dive into HTML rendering. That's exactly how I'm approaching the ATProtocol OAuth masterclass.

Matthieu 🦋 reposted

AT Protocol Developers
@atproto.com

Two types of OAuth client are supported by atproto: "public" and "confidential" This new article digs in to the security trade-offs and safety mechanisms at play, and how they impact different app architectures: TMBs, BFFs, SPAs, etc

github.comOAuth Client Security in the Atmosphere · bluesky-social atproto · Discussion #3950The following was written by the Bluesky team as an overview of OAuth client security considerations, especially for client app developers or readers of the ATProto OAuth profile specification. Set...
Matthieu 🦋
@matthieu.bsky.team

We are currently working on making ATProto OAuth easier on devs. This proposal is one of steps we are taking to make it happen. Stay tuned...

devin ivy 🐋@divy.zone

fresh atproto proposal! this one is for the oauth, app architecture, and security folks: github.com/bluesky-soci... here we're defying the labels of traditionally "public" vs "confidential" oauth clients, and challenging assumptions about what it means to be a browser-based app. 1/8

github.comproposals/0010-client-assertion-backend at main · bluesky-social/proposalsBluesky proposal discussions. Contribute to bluesky-social/proposals development by creating an account on GitHub.
Matthieu 🦋
@matthieu.bsky.team

It would be awesome if starter packs were automatically created from specific @smokesignal.events ! Like, I'm going to the AHOY! conference next week and I'd love to have an easy way to follow everyone else going.

smokesignal.eventsAHOY! European Social Web Day 2025 - Bluesky / atprotoStarts at 04/24/25 08:00 am CEST. Join us in Hamburg on April 24, 2025 to build the future of a cooperative, European open social web—a paradigm for a better internet built on decentralization and use...
Matthieu 🦋
@matthieu.bsky.team

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse. Ibi

Matthieu 🦋
@matthieu.bsky.team

🚀 Just released a new version of our TypeScript SDK for Bluesky! This update brings important improvements to the typings of our data model, making integration smoother and more reliable. Learn a thing or two about Bluesky’s API and the AT Protocol in the blog article we wrote for the occasion.

docs.bsky.app@atproto/api v0.14.0 release notes | BlueskyToday we are excited to announce the availability of version 0.14 of our TypeScript SDK on npm.

Matthieu 🦋 reposted

Deno
@deno.land

It's done. Now it’s your turn, Oracle. We’ve submitted a formal petition to cancel the JavaScript trademark: it is generic, Oracle has abandoned it, and Oracle committed fraud on the USPTO during the last trademark renewal. It's time to #FreeJavaScript. deno.com/blog/deno-v-...

deno.comDeno v. Oracle: Canceling the JavaScript TrademarkOracle is holding the JavaScript trademark hostage, and we’re pursuing legal means to #FreeJavaScript. Here’s a brief update.

Matthieu 🦋 reposted

bryan newbold
@bnewbold.net

#atproto devs and protocol folks! looking for feedback on options for Lexicon Resolution. we have a broad sketch, but still some open questions and truely not sure which way we are leaning

github.comRFC: Lexicon Resolution · bluesky-social atproto · Discussion #3074One of the missing pieces in atproto is a mechanism to resolve NSIDs to Lexicon schema definitions. While there are existing workarounds, such as just publishing schemas on projects websites or git...

Matthieu 🦋 reposted

bryan newbold
@bnewbold.net

atproto devs! what does an AppView even do? don't have bright lines around them right now, it depends on the "app", but here are some potential aspects!

github.comWhat does an AppView implementation entail? · bluesky-social atproto · Discussion #2961An informal overview of what an AppView does. Similar to #2350, which discussed PDS implementations. This document isn't "normative": AppView implementations are not required to do all of this. It ...

Matthieu 🦋 reposted

daniel holmgren 🫠
@dholms.at

backbone networking issues with our bare metal provider that screwed up _a lot_ of things looks like things are recovering now. hopefully the core issue is resolved 🤞

Matthieu 🦋 reposted

dan
@danabra.mov

hi to all old friends from twitter! i want to show you this thing: atproto-browser.vercel.app. put your bluesky handle in it and explore :) this should give you some intuition about how this place works under the hood. happy to answer any questions about it!