







Wherein I [try to] answer a seemingly straightforward question: "WTF is OAuth, anyhow?"
OAuth in Obsidian Plugins
Late last year I finally downloaded Obsidian, a note-taking app which starts out simple but can become quite powerful through its extensive plugin platform.
Beyond the Statusphere: Part 2, ATProto OAuth, the TLDR - Hitchhiker's Guide to the Atmosphere
Gain a working knowledge of ATProto OAuth and feel confident implementing it in your projects.
Keytrace — One identity, many proofs.
Link your GitHub, domain, and other accounts to your internet handle. Cryptographically signed, user-owned, and portable.
PACT: Anonymous Credentials for the Web – Mozilla Hacks - the Web developer blog
A deeper look at PACT: a new initiative to tackle the rising tide of CAPTCHAs on the web whilst keeping the web open and preserving user's privacy.

PDS Viewer
Browse Your AT Protocol PDS Records Like a File Tree. OAuth-Powered, Read-Only, Client-Side.

did:nostr - a Nostr key is a decentralized identifier
A W3C DID method where a Nostr public key resolves to a DID document. No registry, no chain, no minting.

app.bsky.feed.getFeedSkeleton | Bluesky
*This endpoint is part of the Bluesky application Lexicon APIs (`app.bsky.*`). Public endpoints which don't require authentication can be made directly against the public Bluesky AppView API: https://public.api.bsky.app. Authenticated requests are usually made to the user's PDS, with automatic service proxying. Authenticated requests can be used for both public and non-public endpoints.*

Link your GitHub, domain, and other accounts to your Bluesky identity. Cryptographically signed, user-owned, and portable.
Federated Credential Management (FedCM) API - Web APIs | MDN
The Federated Credential Management API (or FedCM API) provides a standard mechanism for identity providers (IdPs) to make identity federation services available on the web in a privacy-preserving way, without the need for third-party cookies and redirects. This includes a JavaScript API that enables the use of federated authentication for activities such as signing in or signing up on a website.

AT Protocol accounts · uchu.social
Create an account for mochott, Bluesky and other apps built on the AT Protocol. Your profile, posts and other data are stored on uchu.social, and you can move them to another server later.
ATProto User Intents Demo
This is a demo tool which allows atproto accounts to configure a reuse declaration for their public data. You can read more about this atproo mechanism in the "User Intents for Data Reuse" proposal from March 2025. Any account in the atproto network (including Bluesky accounts) can use this tool via OAuth. The source code for this demo is linked above.
taken.
A web page that tells you what your browser gave away the moment you arrived. No login, no form, no permission. Most pages do this. None of them tell you.
Sifa — Portable professional identity on the open web
Replace your LinkedIn URL with a portable profile that updates itself from your real activity across the open web. EU-hosted. Free. No lock-in.
Sifa — Portable professional identity on the open web
Replace your LinkedIn URL with a portable profile that updates itself from your real activity across the open web. EU-hosted. Free. No lock-in.
Reading the structured abstract alone should set off a half dozen statistical alarms in any scientists head. The fact that this found its way into Science makes me wonder how we drive home those stats 101 lessons and make them intuitive. science.org/doi/10.1126/science.adt7790
Recent discoveries on the acquisition of the highest levels of human performance
www.science.org