Join Nostr
2026-02-13 22:13:51 UTC

devin ivy 🐋 on Nostr: in atproto office hours folks asked about two-week session lifetimes for oauth public ...

in atproto office hours folks asked about two-week session lifetimes for oauth public clients, such as SPAs.

i spoke about a surgical little proposal to have our cake and eat it too: SPAs untouched but with client authentication! for those interested, here it is: [github.com/bluesky-soci...](https://github.com/bluesky-social/proposals/tree/main/0010-client-assertion-backend )

[proposals/0010-client-assertio...](https://github.com/bluesky-social/proposals/tree/main/0010-client-assertion-backend )