Emelia

Emelia's avatar
Emelia
🛡️ thisismissem.social_at_bsky.brid.gy@momostr.pink
npub1c9de...2llc
Corruptress of protocols, working on trust & safety tech, open-source contributor. You've probably used tech I've contributed to. 🏳️‍⚧️ 🏳️‍🌈 🇩🇪 I'm on the Fediverse: [hachyderm.io/@thisismissem](https://hachyderm.io/@thisismissem ) Bridged: @thisismissem.[hachyderm.io.ap.brid.gy](http://hachyderm.io.ap.brid.gy ) 🌉 [bridged](https://fed.brid.gy/bsky/thisismissem.social ) from 🦋 [thisismissem.social](https://bsky.app/profile/thisismissem.social ), follow nostr:npub1pqr3g2gk3vsnrqk9kwfqqcxc6d5cwjr0hyc0nlzz9py5nf92vd9sn02sck to interact Web site: https://bsky.app/profile/thisismissem.social Link: https://thisismissem.social Link: https://hachyderm.io/@thisismissem Link: http://hachyderm.io.ap.brid.gy
I want to clarify my position on this: I think just client_id in the current Service JWTs wouldn't provide the solutions to the problems listed, and could be easily manipulated. However, I think the problems listed are valid problems that we should collectively come up with solutions for. RE:
Bluesky Social
Nick Gerakines (@ngerakines.me)
Wrote about my wish-list item to have a `client_id` claim in inter-service authentication JWTs. https://ngerakines.leaflet.pub/3m6xaxk64tk2h
 View quoted note →
Hey friends ln the #ATmosphere, if you're thankful for my contributions to AT Protocol though my standards work and trying to figure out how to push things forwards, please do consider supporting my work: [support.thisismissem.social](
Support Emelia Smith (@thisismissem)
Fund her work on the open social web, improving trust & safety, and making contributions to various other open-source projects
 ) [Support Emelia Smith (@thisism...](
Support Emelia Smith (@thisismissem)
Fund her work on the open social web, improving trust & safety, and making contributions to various other open-source projects
 )
Okay, published a new internet draft to enable discovery of the Authorization Server's authorization management UI's URI: [www.ietf.org/archive/id/d...](
OAuth Authorization Management URI
This specification defines a authorization_management_uri property for the OAuth Authorization Server Metadata ( ), which allows an authorization...
 ) This should help with the "how do I manage my Bluesky OAuth apps" problem we're currently seeing. RE:
Bluesky Social
Emelia (@thisismissem.social)
Whelp, I think I'm going to write an new OAuth internet draft.. There's apparently no property in OAuth Authorization Server Metadata for providi...
 [OAuth Authorization Management...](
OAuth Authorization Management URI
This specification defines a authorization_management_uri property for the OAuth Authorization Server Metadata ( ), which allows an authorization...
 ) View quoted note →
Whelp, I think I'm going to write an new OAuth internet draft.. There's apparently no property in OAuth Authorization Server Metadata for providing a link to where people can go to manage their authorized applications on the authorization server. So I'm going to propose one.
Oh look, a little press! Thanks for covering FediMod FIRES a bit @Connected Places ! [connectedplaces.online/reports/fedi...](
connectedplaces.online
Fediverse Report – #142
Some updates on Bonfire, and some questions on whether communities are still starting new servers. Mastodon shares some of the upcoming features th...
 ) [Fediverse Report – #142](
connectedplaces.online
Fediverse Report – #142
Some updates on Bonfire, and some questions on whether communities are still starting new servers. Mastodon shares some of the upcoming features th...
 )
I'm needing to figure out what the next year is going to hold for me, as this year has been incredibly tough and I've barely scraped by: with any luck finishing the FIRES grant will hopefully be enough money to pay myself for December & January. I had applied for a job recently, but didn't get it.
Something I see repeatedly in the ActivityPub community & Fediverse, and with growing regularity in the ATmosphere is people pretending or thinking that they can control data once it has left their server/device. You can definitely ask nicely that they do certain things...
Okay, so, I finally built that OAuth Client ID Metadata Service that I've been talking about on an off, and also verified it works with bluesky: [cimd-service.fly.dev](
CIMD Service
CIMD Service - OAuth Client ID Metadata Document Service
In development, send this service your Client ID Metadata Document, and it will return you a URL to a publicly available copy.
 ) I did have to change my application_type to native to use localhost redirect URIs, which was annoying. #oauth #atproto
CIMD Service
CIMD Service - OAuth Client ID Metadata Document Service
In development, send this service your Client ID Metadata Document, and it will return you a URL to a publicly available copy.