a tool for shared writing and social publishing
add aud to bsky view permissions
Jared Pereira
(Feb 9, 2026, 11:28 PM +0400)
7bb38cc6
1971c0e3
+2
-2
+1
-1
app/api/oauth/[route]/oauth-metadata.ts
+1
-1
app/api/oauth/[route]/oauth-metadata.ts
···
8
8
: "https://leaflet.pub";
9
9
10
10
const scope =
11
-
"atproto transition:generic transition:email include:pub.leaflet.authFullPermissions include:site.standard.authFull include:app.bsky.authCreatePosts include:app.bsky.authViewAll blob:*/*";
11
+
"atproto transition:generic transition:email include:pub.leaflet.authFullPermissions include:site.standard.authFull include:app.bsky.authCreatePosts include:app.bsky.authViewAll?aud=did:web:api.bsky.app%23bsky_appview blob:*/*";
12
12
const localconfig: OAuthClientMetadataInput = {
13
13
client_id: `http://localhost/?redirect_uri=${encodeURI(`http://127.0.0.1:3000/api/oauth/callback`)}&scope=${encodeURIComponent(scope)}`,
14
14
client_name: `Leaflet`,
+1
-1
app/api/oauth/[route]/route.ts
+1
-1
app/api/oauth/[route]/route.ts
···
43
43
44
44
const url = await client.authorize(handle || "https://bsky.social", {
45
45
scope:
46
-
"atproto transition:email include:pub.leaflet.authFullPermissions include:site.standard.authFull include:app.bsky.authCreatePosts include:app.bsky.authViewAll blob:*/*",
46
+
"atproto transition:email include:pub.leaflet.authFullPermissions include:site.standard.authFull include:app.bsky.authCreatePosts include:app.bsky.authViewAll?aud=did:web:api.bsky.app%23bsky_appview blob:*/*",
47
47
signal: ac.signal,
48
48
state: JSON.stringify(state),
49
49
});