atproto pds in zig
pds.zat.dev
pds
atproto
explain privileged app passwords
+7
-1
+5
docs/account-security.md
+5
docs/account-security.md
···
35
35
the app-password name. Revoking an app password deletes the credential and
36
36
revokes active sessions that were created with it.
37
37
38
+
Privileged app passwords are for clients that need the privileged app-password
39
+
scope. ZDS currently stores privileged app passwords with `transition:generic`
40
+
and `transition:chat.bsky`; ordinary app passwords store only
41
+
`transition:generic`.
42
+
38
43
## management UI
39
44
40
45
`/security` is the local account-security surface. It signs in with the account
+2
-1
src/internal/passkeys.zig
+2
-1
src/internal/passkeys.zig
···
96
96
\\.security-section{{margin-top:22px;border-top:1px solid var(--line);padding-top:16px}}.security-section h2{{font-size:1rem;margin:0 0 6px}}.security-section p{{margin-top:0}}
97
97
\\.credential-row{{display:flex;align-items:center;gap:10px;justify-content:space-between;border:1px solid var(--line);border-radius:9px;padding:10px 12px;margin:8px 0;background:color-mix(in srgb,var(--field) 76%,transparent)}}
98
98
\\.credential-name{{font-weight:760;overflow:hidden;text-overflow:ellipsis}}.credential-meta{{display:block;color:var(--muted);font-size:.82rem;font-weight:400}}.credential-actions{{display:flex;gap:8px;flex:0 0 auto}}.credential-row button{{width:auto;margin:0;padding:7px 10px;background:transparent;color:var(--text);border-color:var(--line)}}.credential-row button.danger{{color:var(--bad);border-color:color-mix(in srgb,var(--bad) 45%,var(--line))}}
99
-
\\.generated{{display:none;margin-top:14px;border:1px solid color-mix(in srgb,var(--green) 42%,var(--line));border-radius:9px;padding:12px;background:color-mix(in srgb,var(--green) 9%,transparent)}}.generated.on{{display:block}}.generated code{{display:block;margin-top:6px;font-size:1.1rem;color:var(--text);overflow-wrap:anywhere}}.inline{{display:flex;gap:10px;align-items:center}}.inline input{{flex:1}}.checkbox{{display:flex;gap:8px;align-items:center;margin:10px 0;color:var(--muted);font-weight:400}}.checkbox input{{width:auto}}
99
+
\\.generated{{display:none;margin-top:14px;border:1px solid color-mix(in srgb,var(--green) 42%,var(--line));border-radius:9px;padding:12px;background:color-mix(in srgb,var(--green) 9%,transparent)}}.generated.on{{display:block}}.generated code{{display:block;margin-top:6px;font-size:1.1rem;color:var(--text);overflow-wrap:anywhere}}.inline{{display:flex;gap:10px;align-items:center}}.inline input{{flex:1}}.checkbox{{display:flex;gap:8px;align-items:center;margin:10px 0 2px;color:var(--muted);font-weight:400}}.checkbox input{{width:auto}}.field-help{{margin:0 0 12px 24px;font-size:.86rem;color:var(--muted)}}
100
100
\\</style>
101
101
\\</head>
102
102
\\<body>
···
131
131
\\<label for="app-password-name">new app password name</label>
132
132
\\<input id="app-password-name" name="appPasswordName" placeholder="client or device name">
133
133
\\<label class="checkbox"><input id="app-password-privileged" type="checkbox"> privileged app password</label>
134
+
\\<p class="field-help">Use only for clients that need the official privileged app-password scope, including chat transition access. Most clients should leave this off.</p>
134
135
\\<button id="create-app-password" type="button">create app password</button>
135
136
\\<div id="generated-app-password" class="generated" aria-live="polite"></div>
136
137
\\</section>