@dashaun@foojay.socialMastodon
Scope swapping attacks work because OAuth requests pass through the browser. PAR pushes them over the back channel instead. Here's how it works. #OAuth2 #SpringSecurity #AppSec
Search
Best match combines word and meaning matches. Phrases, hashtags, accounts and websites guide which posts fit; timely queries also favor recent posts. Match labels describe why a post appears, not its quality or accuracy.
- @echojs.bsky.socialBluesky
theAuth: open-source TypeScript auth for AI agents, with an MCP OAuth 2.1 server https://www.echojs.com/news/43441 #JavaScript
github.com GitHub
- @samclemente.meBluesky
Okay so the thing about having an app that does a fuck ton of stuff is that the OAuth scopes are *wild*
- @ngerakines.meBluesky
As a side note, this is a somewhat decent MCP OAuth server supporting the MCP Applications extension with in-app tool calls in rust for people that are curious about that type of thing.
- @symmetricalboy.comBluesky
Ok, so, I have integrated Google Calendar, Contacts, Tasks, Drive, & I'm gonna throw Gmail in there as well. Google is pretty much done. Next up is Microsoft, because they also expose all the APIs to make this easy & actually work well.
- @aripoppy.bsky.socialBluesky
i find it really funny when that "top bluesky users" thing came out and everybody was like "well i'm not giving my account information to some vibe coded app" when it was just a normal oauth login and also bluesky is vibe coded
- @linktapes.comBluesky
Fun one: on our LiteSpeed host, Google sign-in failed on the first try only. Cause: response headers over ~4 KB (auth cookies + CSP) abort over HTTP/3. Browser gets a 500, falls back to HTTP/2, retry works. Node logs show nothing; only the server error log did. #webdev #buildinpublic
- @gottalaff.bsky.socialBluesky
🧵 #Ukraine
- @k8c.bsky.socialBluesky
Not that we don't owe Ukraine already...
America selling its freedom abroad ~ meanwhile at home
- @karen3678.bsky.socialBluesky
vote.org
vote.org Everything You Need to Vote
- @madamc.bsky.socialBluesky
2 new oc's :P
- @wife.girl-mech.bondBluesky
Ok logging out. Nobody respects my boundaries and if I complain about it with mouth vagueness I know a lot of y'all will try to crucify me
- @freya.bsky.socialBluesky
on AI eroding trust and humanity
- @spiritvoltaire.bsky.socialBluesky
No Kings: Vote Early No Thrones. No Crowns. No Kings. Power does not belong to billionaires, strongmen, or politicians who believe they are above accountability. Power belongs to the people, but only if we use it. #NoKings www.mobilize.us/nokings/
mobilize.us No Kings · No Kings on Mobilize
You can attack trump without being transphobic, but Liberals believe in nothing so they're okay in throwing us under the bus.
- @theo.xmirror.botBluesky
If you make me leave the current page/app I’m in to sign in, I will do it, but I will never forgive you for it.
x.com jon (@jonnymevs) on X
- @djlane.bsky.socialBluesky
Exactly correct my friend! 👊🏾👍🏾💙💙💙
- @watchdogprg.bsky.socialBluesky
It's either authoritarian fascism.... or democracy. Take your pick. If you value your personal liberty >> #VoteBlue
Search looks through the last 36 hours of public posts for your words, "exact phrases", #hashtags, @handles and websites, and also finds posts about the same thing by meaning. New posts join about every 10 minutes. We only include posts whose authors allow logged-out viewing (Bluesky) or search (Mastodon, indexable accounts), and we re-check Bluesky authors each time we show a page. Likes and follower counts never decide the order. For meaning matches, query text is turned into a fingerprint on Wildroot’s own server (EmbeddingGemma-300M); it is never sent to another service. Wildroot does not save query text to disk. Looking for posts like one you have? Similar posts. How to opt out.