feat: add @ascorbic/atproto-oauth-provider package#31

Merged

ascorbic merged 31 commits into

mainfrom

claude/oauth-provider-implementation-IeqVp

Dec 30, 2025

Commits on Dec 30, 2025

feat: add @ascorbic/atproto-oauth-provider package
claude
committed
feat(pds): integrate OAuth 2.1 provider with Durable Object storage
claude
committed
fix(pds): use DO RPC proxy for OAuth storage serialization
claude
committed
refactor(oauth-provider): improve security and library usage
claude
committed
feat(oauth-provider): add Content-Security-Policy for consent UI
claude
committed
refactor(oauth-provider): use jose's base64url utilities
claude
committed
refactor(oauth-provider): use map instead of switch for algorithm params
claude
committed
refactor(oauth-provider): use const object with inference for algorithm params
claude
committed
fix(oauth-provider): use in check for proper null narrowing in getAlgorithmParams
claude
committed
refactor(oauth-provider): use jose base64url directly, remove wrapper
claude
committed
fix(oauth-provider): resolve TypeScript diagnostics in dpop.ts
ascorbic
committed
refactor(oauth-provider): use types and schemas from @atproto/oauth-types
ascorbic
committed
refactor(oauth-provider): use more types from @atproto/oauth-types
ascorbic
committed
fix(oauth-provider): add required AT Protocol OAuth metadata fields
ascorbic
committed
fix(oauth-provider): accept JSON body in PAR endpoint
ascorbic
committed
fix(oauth-provider): support URL-based client IDs in addition to DIDs
ascorbic
committed
fix(oauth-provider): preserve OAuth params in form submission

ascorbic
and
claude
committed
feat(oauth-provider): support response_mode=fragment for auth redirects

ascorbic
and
claude
committed
fix(oauth-provider): accept JSON body in token endpoint

ascorbic
and
claude
committed
refactor(oauth-provider): extract parseRequestBody helper

ascorbic
and
claude
committed
refactor(oauth-provider): parseRequestBody throws instead of returning error

ascorbic
and
claude
committed
feat: accept JSON body in token revocation endpoint

ascorbic
and
claude
committed
fix(oauth-provider): include sub in token response

ascorbic
and
claude
committed
feat(pds): support DPoP tokens in auth middleware and proxy

ascorbic
and
claude
committed
refactor(oauth-provider): move test helpers out of production exports

ascorbic
and
claude
committed
fix(pds): fix TypeScript error in dotenv helper

ascorbic
and
claude
committed
fix: address PR review feedback

ascorbic
and
claude
committed
fix: address additional PR review feedback

ascorbic
and
claude
committed
refactor: remove numbered comments from source files

ascorbic
and
claude
committed
fix: remove unused PKCE exports to fix knip

ascorbic
and
claude
committed
docs: move oauth-provider plan to complete with updated status
claude
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat: add @ascorbic/atproto-oauth-provider package#31

feat: add @ascorbic/atproto-oauth-provider package#31
ascorbic merged 31 commits into
mainfrom
claude/oauth-provider-implementation-IeqVp

Commits on Dec 30, 2025

feat: add @ascorbic/atproto-oauth-provider package

feat(pds): integrate OAuth 2.1 provider with Durable Object storage

fix(pds): use DO RPC proxy for OAuth storage serialization

refactor(oauth-provider): improve security and library usage

feat(oauth-provider): add Content-Security-Policy for consent UI

refactor(oauth-provider): use jose's base64url utilities

refactor(oauth-provider): use map instead of switch for algorithm params

refactor(oauth-provider): use const object with inference for algorithm params

fix(oauth-provider): use in check for proper null narrowing in getAlgorithmParams

refactor(oauth-provider): use jose base64url directly, remove wrapper

fix(oauth-provider): resolve TypeScript diagnostics in dpop.ts

refactor(oauth-provider): use types and schemas from @atproto/oauth-types

refactor(oauth-provider): use more types from @atproto/oauth-types

fix(oauth-provider): add required AT Protocol OAuth metadata fields

fix(oauth-provider): accept JSON body in PAR endpoint

fix(oauth-provider): support URL-based client IDs in addition to DIDs

fix(oauth-provider): preserve OAuth params in form submission

feat(oauth-provider): support response_mode=fragment for auth redirects

fix(oauth-provider): accept JSON body in token endpoint

refactor(oauth-provider): extract parseRequestBody helper

refactor(oauth-provider): parseRequestBody throws instead of returning error

feat: accept JSON body in token revocation endpoint

fix(oauth-provider): include sub in token response

feat(pds): support DPoP tokens in auth middleware and proxy

refactor(oauth-provider): move test helpers out of production exports

fix(pds): fix TypeScript error in dotenv helper

fix: address PR review feedback

fix: address additional PR review feedback

refactor: remove numbered comments from source files

fix: remove unused PKCE exports to fix knip

docs: move oauth-provider plan to complete with updated status