The Federated Credential Management API (or FedCM API) provides a standard mechanism for identity providers (IdPs) to make identity federation services available on the web in a privacy-preserving way, without the need for third-party cookies and redirects. This includes a JavaScript API that enables the use of federated authentication for activities such as signing in or signing up on a website.
Update #1: Getting started and keeping momentum - Decentralizing FedCM
At the start of March this year I started working on ensuring FedCM supported decentralized ecosystems, such as AT Protocol, funded by a grant from Bluesky S…
Keytrace — One identity, many proofs.
Link your GitHub, domain, and other accounts to your internet handle. Cryptographically signed, user-owned, and portable.
PACT: Anonymous Credentials for the Web – Mozilla Hacks - the Web developer blog
A deeper look at PACT: a new initiative to tackle the rising tide of CAPTCHAs on the web whilst keeping the web open and preserving user's privacy.
Manton Reece - Introducing the Micro.blog PDS
I’ve started rolling out an AT Protocol PDS — personal data server — for new Micro.blog users. In the Bluesky world, a PDS is what stores your posts, follows, photos, and other data from apps. In the same way that creating an account on Micro.blog automatically gives you a fediverse handle, I wanted people to be able to create a Micro.blog account and have everything they needed to sign into Bluesky.
FR#168 – LLMs Join The Fediverse
How to build a fediverse community when bots are indistinguishable from humans on applications to join?
jose - npmx
JWA, JWS, JWE, JWT, JWK, JWKS for Node.js, Browser, Cloudflare Workers, Deno, Bun, and other Web-interoperable runtimes
Sifa — Portable professional identity on the open web
Replace your LinkedIn URL with a portable profile that updates itself from your real activity across the open web. EU-hosted. Free. No lock-in.
Sifa — Portable professional identity on the open web
Replace your LinkedIn URL with a portable profile that updates itself from your real activity across the open web. EU-hosted. Free. No lock-in.
Why does this new W3C specification matter for the decentrazlized Web
This video explain what FedCM is and why it can be a turning point if we want more Sigle Sign On diversity on the web
ATProto User Intents Demo
This is a demo tool which allows atproto accounts to configure a reuse declaration for their public data. You can read more about this atproo mechanism in the "User Intents for Data Reuse" proposal from March 2025. Any account in the atproto network (including Bluesky accounts) can use this tool via OAuth. The source code for this demo is linked above.
honox - npmx
**HonoX** is a simple and fast meta-framework for creating full-stack websites or Web APIs - (formerly _[Sonik](https://github.com/sonikjs/sonik)_). It stands on the shoulders of giants; built on [Hono](https://hono.dev/), [Vite](https://vitejs.dev/), and
Introducing Keytrace — Keytrace Blog
Keytrace lets you cryptographically link your atproto/Bluesky account to external accounts across the web.
Use Protocols, Not Services
The Internet is almost anonymous and privacy-preserving by design. I mean, unless some administrator actively tries to track you, there is no built-in...
New authentication flow for Sill - Euphonos
Sill no longer requires an email for signup