maybe besides the point but I think it would be more user-friendly if it did the extra hop to resolve the authorization server (i.e. bsky.social )
1 9Samuel
@samuel.fm
lol yeah good point - I’d probably just hardcode .host.bsky.network -> bsky.social
1 5David Buchanannoooooooooooo pls use /.well-known/oauth-protected-resource
1 1 13Samuelfiiiine
1 5Samuelalthough in fairness I think it’s gonna be a while until some else reinvents entryway
3 6David BuchananI've contemplated a separate subdomain for the authz endpoints in millipds (it's good for security™)
1 8
Tom ShermanIt's not just entryway, you can plug any other idp in there. Maybe I want to PDS sign in with Okta don't take this cursed opportunity away from me
1
Timonbut when they do is just gonna work!