diff --git a/Cargo.lock b/Cargo.lock
index 2e7fd22..7beece2 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -173,6 +173,19 @@ dependencies = [
  "nom",
 ]
 
+[[package]]
+name = "async-compression"
+version = "0.4.25"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "40f6024f3f856663b45fd0c9b6f2024034a702f453549449e0d84a305900dad4"
+dependencies = [
+ "flate2",
+ "futures-core",
+ "memchr",
+ "pin-project-lite",
+ "tokio",
+]
+
 [[package]]
 name = "async-lock"
 version = "3.4.0"
@@ -228,8 +241,28 @@ name = "atrium-api"
 version = "0.25.3"
 source = "git+https://github.com/uniphil/atrium?branch=fix%2Fnsid-allow-nonleading-name-digits#c4364f318d337bbc3e3e3aaf97c9f971e95f5f7e"
 dependencies = [
- "atrium-common",
- "atrium-xrpc",
+ "atrium-common 0.1.2 (git+https://github.com/uniphil/atrium?branch=fix%2Fnsid-allow-nonleading-name-digits)",
+ "atrium-xrpc 0.12.3 (git+https://github.com/uniphil/atrium?branch=fix%2Fnsid-allow-nonleading-name-digits)",
+ "chrono",
+ "http",
+ "ipld-core",
+ "langtag",
+ "regex",
+ "serde",
+ "serde_bytes",
+ "serde_json",
+ "thiserror 1.0.69",
+ "trait-variant",
+]
+
+[[package]]
+name = "atrium-api"
+version = "0.25.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "46355d3245edc7b3160b2a45fe55d09a6963ebd3eee0252feb6b72fb0eb71463"
+dependencies = [
+ "atrium-common 0.1.2 (registry+https://github.com/rust-lang/crates.io-index)",
+ "atrium-xrpc 0.12.3 (registry+https://github.com/rust-lang/crates.io-index)",
  "chrono",
  "http",
  "ipld-core",
@@ -239,7 +272,23 @@ dependencies = [
  "serde_bytes",
  "serde_json",
  "thiserror 1.0.69",
+ "tokio",
+ "trait-variant",
+]
+
+[[package]]
+name = "atrium-common"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9ed5610654043faa396a5a15afac0ac646d76aebe45aebd7cef4f8b96b0ab7f4"
+dependencies = [
+ "dashmap",
+ "lru",
+ "moka",
+ "thiserror 1.0.69",
+ "tokio",
  "trait-variant",
+ "web-time",
 ]
 
 [[package]]
@@ -256,6 +305,65 @@ dependencies = [
  "web-time",
 ]
 
+[[package]]
+name = "atrium-identity"
+version = "0.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c9e2d42bb4dbea038f4f5f45e3af2a89d61a9894a75f06aa550b74a60d2be380"
+dependencies = [
+ "atrium-api 0.25.4",
+ "atrium-common 0.1.2 (registry+https://github.com/rust-lang/crates.io-index)",
+ "atrium-xrpc 0.12.3 (registry+https://github.com/rust-lang/crates.io-index)",
+ "serde",
+ "serde_html_form",
+ "serde_json",
+ "thiserror 1.0.69",
+ "trait-variant",
+]
+
+[[package]]
+name = "atrium-oauth"
+version = "0.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ca22dc4eaf77fd9bf050b21192ac58cd654a437d28e000ec114ebd93a51d36f5"
+dependencies = [
+ "atrium-api 0.25.4",
+ "atrium-common 0.1.2 (registry+https://github.com/rust-lang/crates.io-index)",
+ "atrium-identity",
+ "atrium-xrpc 0.12.3 (registry+https://github.com/rust-lang/crates.io-index)",
+ "base64 0.22.1",
+ "chrono",
+ "dashmap",
+ "ecdsa",
+ "elliptic-curve",
+ "jose-jwa",
+ "jose-jwk",
+ "p256",
+ "rand 0.8.5",
+ "reqwest",
+ "serde",
+ "serde_html_form",
+ "serde_json",
+ "sha2",
+ "thiserror 1.0.69",
+ "tokio",
+ "trait-variant",
+]
+
+[[package]]
+name = "atrium-xrpc"
+version = "0.12.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0216ad50ce34e9ff982e171c3659e65dedaa2ed5ac2994524debdc9a9647ffa8"
+dependencies = [
+ "http",
+ "serde",
+ "serde_html_form",
+ "serde_json",
+ "thiserror 1.0.69",
+ "trait-variant",
+]
+
 [[package]]
 name = "atrium-xrpc"
 version = "0.12.3"
@@ -402,7 +510,7 @@ dependencies = [
  "miniz_oxide",
  "object",
  "rustc-demangle",
- "windows-targets",
+ "windows-targets 0.52.6",
 ]
 
 [[package]]
@@ -411,6 +519,12 @@ version = "0.2.11"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "4cbbc9d0964165b47557570cce6c952866c2678457aca742aafc9fb771d30270"
 
+[[package]]
+name = "base16ct"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4c7f02d4ea65f2c1853089ffd8d2787bdbc63de2f0d29dedbcf8ccdfa0ccd4cf"
+
 [[package]]
 name = "base64"
 version = "0.21.7"
@@ -423,6 +537,12 @@ version = "0.22.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
 
+[[package]]
+name = "base64ct"
+version = "1.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "55248b47b0caf0546f7988906588779981c43bb1bc9d0c44087278f80cdb44ba"
+
 [[package]]
 name = "basic-toml"
 version = "0.1.10"
@@ -759,6 +879,12 @@ dependencies = [
  "crossbeam-utils",
 ]
 
+[[package]]
+name = "const-oid"
+version = "0.9.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c2459377285ad874054d797f3ccebf984978aa39129f6eafde5cdc8315b612f8"
+
 [[package]]
 name = "constellation"
 version = "0.1.0"
@@ -838,6 +964,21 @@ dependencies = [
  "libc",
 ]
 
+[[package]]
+name = "crc32fast"
+version = "1.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a97769d94ddab943e4510d138150169a2758b5ef3eb191a9ee688de3e23ef7b3"
+dependencies = [
+ "cfg-if",
+]
+
+[[package]]
+name = "critical-section"
+version = "1.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "790eea4361631c5e7d22598ecd5723ff611904e3344ce8720784c93e3d83d40b"
+
 [[package]]
 name = "crossbeam-channel"
 version = "0.5.15"
@@ -872,6 +1013,18 @@ version = "0.8.21"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "d0a5c400df2834b80a4c3327b3aad3a4c4cd4de0629063962b03235697506a28"
 
+[[package]]
+name = "crypto-bigint"
+version = "0.5.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0dc92fb57ca44df6db8059111ab3af99a63d5d0f8375d9972e319a379c6bab76"
+dependencies = [
+ "generic-array",
+ "rand_core 0.6.4",
+ "subtle",
+ "zeroize",
+]
+
 [[package]]
 name = "crypto-common"
 version = "0.1.6"
@@ -973,6 +1126,16 @@ version = "1.0.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "ffe7ed1d93f4553003e20b629abe9085e1e81b1429520f897f8f8860bc6dfc21"
 
+[[package]]
+name = "der"
+version = "0.7.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e7c1832837b905bbfb5101e07cc24c8deddf52f93225eee6ead5f4d63d53ddcb"
+dependencies = [
+ "const-oid",
+ "zeroize",
+]
+
 [[package]]
 name = "deranged"
 version = "0.4.0"
@@ -990,7 +1153,9 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292"
 dependencies = [
  "block-buffer",
+ "const-oid",
  "crypto-common",
+ "subtle",
 ]
 
 [[package]]
@@ -1108,12 +1273,43 @@ version = "1.0.19"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "1c7a8fb8a9fbf66c1f703fe16184d10ca0ee9d23be5b4436400408ba54a95005"
 
+[[package]]
+name = "ecdsa"
+version = "0.16.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ee27f32b5c5292967d2d4a9d7f1e0b0aed2c15daded5a60300e4abb9d8020bca"
+dependencies = [
+ "der",
+ "digest",
+ "elliptic-curve",
+ "rfc6979",
+ "signature",
+]
+
 [[package]]
 name = "either"
 version = "1.15.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "48c757948c5ede0e46177b7add2e67155f70e33c07fea8284df6576da70b3719"
 
+[[package]]
+name = "elliptic-curve"
+version = "0.13.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b5e6043086bf7973472e0c7dff2142ea0b680d30e18d9cc40f267efbf222bd47"
+dependencies = [
+ "base16ct",
+ "crypto-bigint",
+ "digest",
+ "ff",
+ "generic-array",
+ "group",
+ "rand_core 0.6.4",
+ "sec1",
+ "subtle",
+ "zeroize",
+]
+
 [[package]]
 name = "encoding_rs"
 version = "0.8.35"
@@ -1123,6 +1319,18 @@ dependencies = [
  "cfg-if",
 ]
 
+[[package]]
+name = "enum-as-inner"
+version = "0.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a1e6a265c649f3f5979b601d26f1d05ada116434c87741c9493cb56218f76cbc"
+dependencies = [
+ "heck",
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
 [[package]]
 name = "enum_dispatch"
 version = "0.3.13"
@@ -1201,6 +1409,16 @@ version = "2.3.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "37909eebbb50d72f9059c3b6d82c0463f2ff062c9e95845c43a6c9c0355411be"
 
+[[package]]
+name = "ff"
+version = "0.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c0b50bfb653653f9ca9095b427bed08ab8d75a137839d9ad64eb11810d5b6393"
+dependencies = [
+ "rand_core 0.6.4",
+ "subtle",
+]
+
 [[package]]
 name = "fjall"
 version = "2.8.0"
@@ -1218,6 +1436,16 @@ dependencies = [
  "xxhash-rust",
 ]
 
+[[package]]
+name = "flate2"
+version = "1.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4a3d7db9596fecd151c5f638c0ee5d5bd487b6e0ea232e5dc96d5250f6f94b1d"
+dependencies = [
+ "crc32fast",
+ "miniz_oxide",
+]
+
 [[package]]
 name = "fluent-uri"
 version = "0.3.2"
@@ -1399,6 +1627,7 @@ checksum = "85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a"
 dependencies = [
  "typenum",
  "version_check",
+ "zeroize",
 ]
 
 [[package]]
@@ -1436,6 +1665,17 @@ version = "0.3.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "a8d1add55171497b4705a648c6b583acafb01d58050a51727785f0b2c8e0a2b2"
 
+[[package]]
+name = "group"
+version = "0.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f0f9ef7462f7c099f518d754361858f86d8a07af53ba9af0fe635bbccb151a63"
+dependencies = [
+ "ff",
+ "rand_core 0.6.4",
+ "subtle",
+]
+
 [[package]]
 name = "guardian"
 version = "1.3.0"
@@ -1537,6 +1777,61 @@ version = "0.4.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70"
 
+[[package]]
+name = "hickory-proto"
+version = "0.25.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f8a6fe56c0038198998a6f217ca4e7ef3a5e51f46163bd6dd60b5c71ca6c6502"
+dependencies = [
+ "async-trait",
+ "cfg-if",
+ "data-encoding",
+ "enum-as-inner",
+ "futures-channel",
+ "futures-io",
+ "futures-util",
+ "idna",
+ "ipnet",
+ "once_cell",
+ "rand 0.9.1",
+ "ring",
+ "thiserror 2.0.12",
+ "tinyvec",
+ "tokio",
+ "tracing",
+ "url",
+]
+
+[[package]]
+name = "hickory-resolver"
+version = "0.25.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dc62a9a99b0bfb44d2ab95a7208ac952d31060efc16241c87eaf36406fecf87a"
+dependencies = [
+ "cfg-if",
+ "futures-util",
+ "hickory-proto",
+ "ipconfig",
+ "moka",
+ "once_cell",
+ "parking_lot",
+ "rand 0.9.1",
+ "resolv-conf",
+ "smallvec",
+ "thiserror 2.0.12",
+ "tokio",
+ "tracing",
+]
+
+[[package]]
+name = "hmac"
+version = "0.12.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6c49c37c09c17a53d937dfbb742eb3a961d65a994e6bcdcf37e7399d0cc8ab5e"
+dependencies = [
+ "digest",
+]
+
 [[package]]
 name = "home"
 version = "0.5.11"
@@ -1661,6 +1956,22 @@ dependencies = [
  "tower-service",
 ]
 
+[[package]]
+name = "hyper-tls"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "70206fc6890eaca9fde8a0bf71caa2ddfc9fe045ac9e5c70df101a7dbde866e0"
+dependencies = [
+ "bytes",
+ "http-body-util",
+ "hyper",
+ "hyper-util",
+ "native-tls",
+ "tokio",
+ "tokio-native-tls",
+ "tower-service",
+]
+
 [[package]]
 name = "hyper-util"
 version = "0.1.11"
@@ -1881,6 +2192,18 @@ dependencies = [
  "compare",
 ]
 
+[[package]]
+name = "ipconfig"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b58db92f96b720de98181bbbe63c831e87005ab460c1bf306eb2622b4707997f"
+dependencies = [
+ "socket2",
+ "widestring",
+ "windows-sys 0.48.0",
+ "winreg",
+]
+
 [[package]]
 name = "ipld-core"
 version = "0.4.2"
@@ -1945,7 +2268,7 @@ version = "0.1.1"
 dependencies = [
  "anyhow",
  "async-trait",
- "atrium-api",
+ "atrium-api 0.25.3",
  "chrono",
  "clap",
  "futures-util",
@@ -1994,6 +2317,40 @@ dependencies = [
  "libc",
 ]
 
+[[package]]
+name = "jose-b64"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bec69375368709666b21c76965ce67549f2d2db7605f1f8707d17c9656801b56"
+dependencies = [
+ "base64ct",
+ "serde",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "jose-jwa"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9ab78e053fe886a351d67cf0d194c000f9d0dcb92906eb34d853d7e758a4b3a7"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "jose-jwk"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "280fa263807fe0782ecb6f2baadc28dffc04e00558a58e33bfdb801d11fd58e7"
+dependencies = [
+ "jose-b64",
+ "jose-jwa",
+ "p256",
+ "serde",
+ "zeroize",
+]
+
 [[package]]
 name = "js-sys"
 version = "0.3.77"
@@ -2048,7 +2405,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "fc2f4eb4bc735547cfed7c0a4922cbd04a4655978c09b54f1f7b228750664c34"
 dependencies = [
  "cfg-if",
- "windows-targets",
+ "windows-targets 0.52.6",
 ]
 
 [[package]]
@@ -2536,6 +2893,10 @@ name = "once_cell"
 version = "1.21.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "42f5e15c9953c5e4ccceeb2e7382a716482c34515315f7b03532b8b4e8393d2d"
+dependencies = [
+ "critical-section",
+ "portable-atomic",
+]
 
 [[package]]
 name = "openapiv3"
@@ -2608,6 +2969,18 @@ version = "0.1.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "b15813163c1d831bf4a13c3610c05c0d03b39feb07f7e09fa234dac9b15aaf39"
 
+[[package]]
+name = "p256"
+version = "0.13.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c9863ad85fa8f4460f9c48cb909d38a0d689dba1f6f6988a5e3e0d31071bcd4b"
+dependencies = [
+ "ecdsa",
+ "elliptic-curve",
+ "primeorder",
+ "sha2",
+]
+
 [[package]]
 name = "parking"
 version = "2.2.1"
@@ -2634,7 +3007,7 @@ dependencies = [
  "libc",
  "redox_syscall",
  "smallvec",
- "windows-targets",
+ "windows-targets 0.52.6",
 ]
 
 [[package]]
@@ -2725,6 +3098,15 @@ dependencies = [
  "syn",
 ]
 
+[[package]]
+name = "primeorder"
+version = "0.13.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "353e1ca18966c16d9deb1c69278edbc5f194139612772bd9537af60ac231e1e6"
+dependencies = [
+ "elliptic-curve",
+]
+
 [[package]]
 name = "proc-macro2"
 version = "1.0.94"
@@ -2968,6 +3350,64 @@ version = "0.8.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "2b15c43186be67a4fd63bee50d0303afffcef381492ebe2c5d87f324e1b8815c"
 
+[[package]]
+name = "reqwest"
+version = "0.12.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d19c46a6fdd48bc4dab94b6103fccc55d34c67cc0ad04653aad4ea2a07cd7bbb"
+dependencies = [
+ "async-compression",
+ "base64 0.22.1",
+ "bytes",
+ "futures-core",
+ "futures-util",
+ "http",
+ "http-body",
+ "http-body-util",
+ "hyper",
+ "hyper-tls",
+ "hyper-util",
+ "ipnet",
+ "js-sys",
+ "log",
+ "mime",
+ "native-tls",
+ "once_cell",
+ "percent-encoding",
+ "pin-project-lite",
+ "rustls-pemfile",
+ "serde",
+ "serde_json",
+ "serde_urlencoded",
+ "sync_wrapper",
+ "tokio",
+ "tokio-native-tls",
+ "tokio-util",
+ "tower",
+ "tower-service",
+ "url",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "web-sys",
+ "windows-registry",
+]
+
+[[package]]
+name = "resolv-conf"
+version = "0.7.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "95325155c684b1c89f7765e30bc1c42e4a6da51ca513615660cb8a62ef9a88e3"
+
+[[package]]
+name = "rfc6979"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f8dd2a808d456c4a54e300a23e9f5a67e122c3024119acbfd73e3bf664491cb2"
+dependencies = [
+ "hmac",
+ "subtle",
+]
+
 [[package]]
 name = "ring"
 version = "0.17.14"
@@ -3191,6 +3631,19 @@ version = "1.2.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "94143f37725109f92c262ed2cf5e59bce7498c01bcc1502d7b9afe439a4e9f49"
 
+[[package]]
+name = "sec1"
+version = "0.7.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d3e97a565f76233a6003f9f5c54be1d9c5bdfa3eccfb189469f11ec4901c47dc"
+dependencies = [
+ "base16ct",
+ "der",
+ "generic-array",
+ "subtle",
+ "zeroize",
+]
+
 [[package]]
 name = "security-framework"
 version = "2.11.1"
@@ -3436,6 +3889,16 @@ dependencies = [
  "libc",
 ]
 
+[[package]]
+name = "signature"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "77549399552de45a898a580c1b41d445bf730df867cc44e6c0233bbc4b8329de"
+dependencies = [
+ "digest",
+ "rand_core 0.6.4",
+]
+
 [[package]]
 name = "sketches-ddsketch"
 version = "0.3.0"
@@ -3600,6 +4063,9 @@ name = "sync_wrapper"
 version = "1.0.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "0bf256ce5efdfa370213c1dabab5935a12e49f2c58d15e9eac2870d3b4f27263"
+dependencies = [
+ "futures-core",
+]
 
 [[package]]
 name = "synstructure"
@@ -3767,6 +4233,21 @@ dependencies = [
  "zerovec",
 ]
 
+[[package]]
+name = "tinyvec"
+version = "1.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "09b3661f17e86524eccd4371ab0429194e0d7c008abb45f7a7495b1719463c71"
+dependencies = [
+ "tinyvec_macros",
+]
+
+[[package]]
+name = "tinyvec_macros"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1f3ccbac311fea05f86f61904b462b55fb3df8837a366dfc601a0161d0532f20"
+
 [[package]]
 name = "tokio"
 version = "1.45.1"
@@ -4285,6 +4766,19 @@ dependencies = [
  "wasm-bindgen-shared",
 ]
 
+[[package]]
+name = "wasm-bindgen-futures"
+version = "0.4.50"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "555d470ec0bc3bb57890405e5d4322cc9ea83cebb085523ced7be4144dac1e61"
+dependencies = [
+ "cfg-if",
+ "js-sys",
+ "once_cell",
+ "wasm-bindgen",
+ "web-sys",
+]
+
 [[package]]
 name = "wasm-bindgen-macro"
 version = "0.2.100"
@@ -4349,6 +4843,35 @@ dependencies = [
  "rustix 0.38.44",
 ]
 
+[[package]]
+name = "who-am-i"
+version = "0.1.0"
+dependencies = [
+ "atrium-api 0.25.4",
+ "atrium-identity",
+ "atrium-oauth",
+ "clap",
+ "dropshot",
+ "env_logger",
+ "hickory-resolver",
+ "http",
+ "log",
+ "metrics",
+ "schemars",
+ "semver",
+ "serde",
+ "serde_json",
+ "serde_qs",
+ "tokio",
+ "tokio-util",
+]
+
+[[package]]
+name = "widestring"
+version = "1.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dd7cf3379ca1aac9eea11fba24fd7e315d621f8dfe35c8d7d2be8b793726e07d"
+
 [[package]]
 name = "winapi"
 version = "0.3.9"
@@ -4378,7 +4901,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "dd04d41d93c4992d421894c18c8b43496aa748dd4c081bac0dc93eb0489272b6"
 dependencies = [
  "windows-core 0.58.0",
- "windows-targets",
+ "windows-targets 0.52.6",
 ]
 
 [[package]]
@@ -4391,7 +4914,7 @@ dependencies = [
  "windows-interface 0.58.0",
  "windows-result 0.2.0",
  "windows-strings 0.1.0",
- "windows-targets",
+ "windows-targets 0.52.6",
 ]
 
 [[package]]
@@ -4457,13 +4980,24 @@ version = "0.1.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "76840935b766e1b0a05c0066835fb9ec80071d4c09a16f6bd5f7e655e3c14c38"
 
+[[package]]
+name = "windows-registry"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4286ad90ddb45071efd1a66dfa43eb02dd0dfbae1545ad6cc3c51cf34d7e8ba3"
+dependencies = [
+ "windows-result 0.3.2",
+ "windows-strings 0.3.1",
+ "windows-targets 0.53.2",
+]
+
 [[package]]
 name = "windows-result"
 version = "0.2.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "1d1043d8214f791817bab27572aaa8af63732e11bf84aa21a45a78d6c317ae0e"
 dependencies = [
- "windows-targets",
+ "windows-targets 0.52.6",
 ]
 
 [[package]]
@@ -4482,7 +5016,16 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "4cd9b125c486025df0eabcb585e62173c6c9eddcec5d117d3b6e8c30e2ee4d10"
 dependencies = [
  "windows-result 0.2.0",
- "windows-targets",
+ "windows-targets 0.52.6",
+]
+
+[[package]]
+name = "windows-strings"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "87fa48cc5d406560701792be122a10132491cff9d0aeb23583cc2dcafc847319"
+dependencies = [
+ "windows-link",
 ]
 
 [[package]]
@@ -4494,13 +5037,22 @@ dependencies = [
  "windows-link",
 ]
 
+[[package]]
+name = "windows-sys"
+version = "0.48.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "677d2418bec65e3338edb076e806bc1ec15693c5d0104683f2efe857f61056a9"
+dependencies = [
+ "windows-targets 0.48.5",
+]
+
 [[package]]
 name = "windows-sys"
 version = "0.52.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "282be5f36a8ce781fad8c8ae18fa3f9beff57ec1b52cb3de0789201425d9a33d"
 dependencies = [
- "windows-targets",
+ "windows-targets 0.52.6",
 ]
 
 [[package]]
@@ -4509,7 +5061,22 @@ version = "0.59.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "1e38bc4d79ed67fd075bcc251a1c39b32a1776bbe92e5bef1f0bf1f8c531853b"
 dependencies = [
- "windows-targets",
+ "windows-targets 0.52.6",
+]
+
+[[package]]
+name = "windows-targets"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9a2fa6e2155d7247be68c096456083145c183cbbbc2764150dda45a87197940c"
+dependencies = [
+ "windows_aarch64_gnullvm 0.48.5",
+ "windows_aarch64_msvc 0.48.5",
+ "windows_i686_gnu 0.48.5",
+ "windows_i686_msvc 0.48.5",
+ "windows_x86_64_gnu 0.48.5",
+ "windows_x86_64_gnullvm 0.48.5",
+ "windows_x86_64_msvc 0.48.5",
 ]
 
 [[package]]
@@ -4518,64 +5085,170 @@ version = "0.52.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "9b724f72796e036ab90c1021d4780d4d3d648aca59e491e6b98e725b84e99973"
 dependencies = [
- "windows_aarch64_gnullvm",
- "windows_aarch64_msvc",
- "windows_i686_gnu",
- "windows_i686_gnullvm",
- "windows_i686_msvc",
- "windows_x86_64_gnu",
- "windows_x86_64_gnullvm",
- "windows_x86_64_msvc",
+ "windows_aarch64_gnullvm 0.52.6",
+ "windows_aarch64_msvc 0.52.6",
+ "windows_i686_gnu 0.52.6",
+ "windows_i686_gnullvm 0.52.6",
+ "windows_i686_msvc 0.52.6",
+ "windows_x86_64_gnu 0.52.6",
+ "windows_x86_64_gnullvm 0.52.6",
+ "windows_x86_64_msvc 0.52.6",
+]
+
+[[package]]
+name = "windows-targets"
+version = "0.53.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c66f69fcc9ce11da9966ddb31a40968cad001c5bedeb5c2b82ede4253ab48aef"
+dependencies = [
+ "windows_aarch64_gnullvm 0.53.0",
+ "windows_aarch64_msvc 0.53.0",
+ "windows_i686_gnu 0.53.0",
+ "windows_i686_gnullvm 0.53.0",
+ "windows_i686_msvc 0.53.0",
+ "windows_x86_64_gnu 0.53.0",
+ "windows_x86_64_gnullvm 0.53.0",
+ "windows_x86_64_msvc 0.53.0",
 ]
 
+[[package]]
+name = "windows_aarch64_gnullvm"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2b38e32f0abccf9987a4e3079dfb67dcd799fb61361e53e2882c3cbaf0d905d8"
+
 [[package]]
 name = "windows_aarch64_gnullvm"
 version = "0.52.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "32a4622180e7a0ec044bb555404c800bc9fd9ec262ec147edd5989ccd0c02cd3"
 
+[[package]]
+name = "windows_aarch64_gnullvm"
+version = "0.53.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "86b8d5f90ddd19cb4a147a5fa63ca848db3df085e25fee3cc10b39b6eebae764"
+
+[[package]]
+name = "windows_aarch64_msvc"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dc35310971f3b2dbbf3f0690a219f40e2d9afcf64f9ab7cc1be722937c26b4bc"
+
 [[package]]
 name = "windows_aarch64_msvc"
 version = "0.52.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "09ec2a7bb152e2252b53fa7803150007879548bc709c039df7627cabbd05d469"
 
+[[package]]
+name = "windows_aarch64_msvc"
+version = "0.53.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c7651a1f62a11b8cbd5e0d42526e55f2c99886c77e007179efff86c2b137e66c"
+
+[[package]]
+name = "windows_i686_gnu"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a75915e7def60c94dcef72200b9a8e58e5091744960da64ec734a6c6e9b3743e"
+
 [[package]]
 name = "windows_i686_gnu"
 version = "0.52.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "8e9b5ad5ab802e97eb8e295ac6720e509ee4c243f69d781394014ebfe8bbfa0b"
 
+[[package]]
+name = "windows_i686_gnu"
+version = "0.53.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c1dc67659d35f387f5f6c479dc4e28f1d4bb90ddd1a5d3da2e5d97b42d6272c3"
+
 [[package]]
 name = "windows_i686_gnullvm"
 version = "0.52.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "0eee52d38c090b3caa76c563b86c3a4bd71ef1a819287c19d586d7334ae8ed66"
 
+[[package]]
+name = "windows_i686_gnullvm"
+version = "0.53.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9ce6ccbdedbf6d6354471319e781c0dfef054c81fbc7cf83f338a4296c0cae11"
+
+[[package]]
+name = "windows_i686_msvc"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8f55c233f70c4b27f66c523580f78f1004e8b5a8b659e05a4eb49d4166cca406"
+
 [[package]]
 name = "windows_i686_msvc"
 version = "0.52.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "240948bc05c5e7c6dabba28bf89d89ffce3e303022809e73deaefe4f6ec56c66"
 
+[[package]]
+name = "windows_i686_msvc"
+version = "0.53.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "581fee95406bb13382d2f65cd4a908ca7b1e4c2f1917f143ba16efe98a589b5d"
+
+[[package]]
+name = "windows_x86_64_gnu"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "53d40abd2583d23e4718fddf1ebec84dbff8381c07cae67ff7768bbf19c6718e"
+
 [[package]]
 name = "windows_x86_64_gnu"
 version = "0.52.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "147a5c80aabfbf0c7d901cb5895d1de30ef2907eb21fbbab29ca94c5b08b1a78"
 
+[[package]]
+name = "windows_x86_64_gnu"
+version = "0.53.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2e55b5ac9ea33f2fc1716d1742db15574fd6fc8dadc51caab1c16a3d3b4190ba"
+
+[[package]]
+name = "windows_x86_64_gnullvm"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0b7b52767868a23d5bab768e390dc5f5c55825b6d30b86c844ff2dc7414044cc"
+
 [[package]]
 name = "windows_x86_64_gnullvm"
 version = "0.52.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "24d5b23dc417412679681396f2b49f3de8c1473deb516bd34410872eff51ed0d"
 
+[[package]]
+name = "windows_x86_64_gnullvm"
+version = "0.53.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0a6e035dd0599267ce1ee132e51c27dd29437f63325753051e71dd9e42406c57"
+
+[[package]]
+name = "windows_x86_64_msvc"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ed94fce61571a4006852b7389a063ab983c02eb1bb37b47f8272ce92d06d9538"
+
 [[package]]
 name = "windows_x86_64_msvc"
 version = "0.52.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "589f6da84c646204747d1270a2a5661ea66ed1cced2631d546fdfb155959f9ec"
 
+[[package]]
+name = "windows_x86_64_msvc"
+version = "0.53.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "271414315aff87387382ec3d271b52d7ae78726f5d44ac98b4f4030c91880486"
+
 [[package]]
 name = "winnow"
 version = "0.7.11"
@@ -4585,6 +5258,16 @@ dependencies = [
  "memchr",
 ]
 
+[[package]]
+name = "winreg"
+version = "0.50.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "524e57b2c537c0f9b1e69f1965311ec12182b4122e45035b1508cd24d2adadb1"
+dependencies = [
+ "cfg-if",
+ "windows-sys 0.48.0",
+]
+
 [[package]]
 name = "wit-bindgen-rt"
 version = "0.39.0"
@@ -4711,6 +5394,9 @@ name = "zeroize"
 version = "1.8.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "ced3678a2879b30306d323f4542626697a464a97c0a07c9aebf7ebca65cd4dde"
+dependencies = [
+ "serde",
+]
 
 [[package]]
 name = "zerovec"
diff --git a/Cargo.toml b/Cargo.toml
index 21ffd5c..f0a3b13 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -7,4 +7,5 @@ members = [
     "ufos",
     "ufos/fuzz",
     "spacedust",
+    "who-am-i",
 ]
diff --git a/spacedust/static/index.html b/spacedust/static/index.html
index 27dfa66..78c4c8d 100644
--- a/spacedust/static/index.html
+++ b/spacedust/static/index.html
@@ -40,7 +40,7 @@
       </nav>
     </header>
 
-    <script id="api-reference" type="application/json" data-url="/openapi""></script>
+    <script id="api-reference" type="application/json" data-url="/openapi"></script>
 
     <script>
       var configuration = {
diff --git a/who-am-i/Cargo.toml b/who-am-i/Cargo.toml
new file mode 100644
index 0000000..b15b2d3
--- /dev/null
+++ b/who-am-i/Cargo.toml
@@ -0,0 +1,23 @@
+[package]
+name = "who-am-i"
+version = "0.1.0"
+edition = "2024"
+
+[dependencies]
+atrium-api = { version = "0.25.4", default-features = false, features = ["tokio", "agent"] }
+atrium-identity = "0.1.5"
+atrium-oauth = "0.1.3"
+clap = { version = "4.5.40", features = ["derive"] }
+dropshot = "0.16.2"
+env_logger = "0.11.8"
+hickory-resolver = "0.25.2"
+http = "1.3.1"
+log = "0.4.27"
+metrics = "0.24.2"
+schemars = "0.8.22"
+semver = "1.0.26"
+serde = { version = "1.0.219", features = ["derive"] }
+serde_json = "1.0.140"
+serde_qs = "1.0.0-rc.3"
+tokio = { version = "1.45.1", features = ["full", "macros"] }
+tokio-util = "0.7.15"
diff --git a/who-am-i/src/dns_resolver.rs b/who-am-i/src/dns_resolver.rs
new file mode 100644
index 0000000..2d51fc7
--- /dev/null
+++ b/who-am-i/src/dns_resolver.rs
@@ -0,0 +1,34 @@
+// originally from weaver: https://github.com/rsform/weaver/blob/ee08213a85e09889b9bd66beceecee92ac025801/crates/weaver-common/src/resolver.rs
+// MPL 2.0: https://github.com/rsform/weaver/blob/ee08213a85e09889b9bd66beceecee92ac025801/LICENSE
+
+use atrium_identity::handle::DnsTxtResolver;
+use hickory_resolver::TokioResolver;
+
+pub struct HickoryDnsTxtResolver {
+    resolver: TokioResolver,
+}
+
+impl Default for HickoryDnsTxtResolver {
+    fn default() -> Self {
+        Self {
+            resolver: TokioResolver::builder_tokio()
+                .expect("failed to create resolver")
+                .build(),
+        }
+    }
+}
+
+impl DnsTxtResolver for HickoryDnsTxtResolver {
+    async fn resolve(
+        &self,
+        query: &str,
+    ) -> core::result::Result<Vec<String>, Box<dyn std::error::Error + Send + Sync>> {
+        Ok(self
+            .resolver
+            .txt_lookup(query)
+            .await?
+            .iter()
+            .map(|txt| txt.to_string())
+            .collect())
+    }
+}
diff --git a/who-am-i/src/lib.rs b/who-am-i/src/lib.rs
new file mode 100644
index 0000000..597444c
--- /dev/null
+++ b/who-am-i/src/lib.rs
@@ -0,0 +1,7 @@
+mod dns_resolver;
+mod oauth;
+mod server;
+
+pub use dns_resolver::HickoryDnsTxtResolver;
+pub use server::serve;
+pub use oauth::{Client, client, authorize};
diff --git a/who-am-i/src/main.rs b/who-am-i/src/main.rs
new file mode 100644
index 0000000..d4ebeee
--- /dev/null
+++ b/who-am-i/src/main.rs
@@ -0,0 +1,10 @@
+use who_am_i::serve;
+use tokio_util::sync::CancellationToken;
+
+#[tokio::main]
+async fn main() {
+    env_logger::init();
+
+    let server_shutdown = CancellationToken::new();
+    serve(server_shutdown).await.unwrap();
+}
diff --git a/who-am-i/src/oauth.rs b/who-am-i/src/oauth.rs
new file mode 100644
index 0000000..37e797c
--- /dev/null
+++ b/who-am-i/src/oauth.rs
@@ -0,0 +1,68 @@
+use atrium_identity::{
+    did::{CommonDidResolver, CommonDidResolverConfig, DEFAULT_PLC_DIRECTORY_URL},
+    handle::{AtprotoHandleResolver, AtprotoHandleResolverConfig},
+};
+use atrium_oauth::{
+    AuthorizeOptions,
+    store::{session::MemorySessionStore, state::MemoryStateStore},
+    AtprotoLocalhostClientMetadata, DefaultHttpClient, KnownScope, OAuthClient, OAuthClientConfig,
+    OAuthResolverConfig, Scope,
+};
+use std::sync::Arc;
+use crate::HickoryDnsTxtResolver;
+
+pub type Client = OAuthClient<
+    MemoryStateStore,
+    MemorySessionStore,
+    CommonDidResolver<DefaultHttpClient>,
+    AtprotoHandleResolver<HickoryDnsTxtResolver, DefaultHttpClient>,
+>;
+
+pub fn client() -> Client {
+    let http_client = Arc::new(DefaultHttpClient::default());
+    let config = OAuthClientConfig {
+        client_metadata: AtprotoLocalhostClientMetadata {
+            redirect_uris: Some(vec![String::from("http://127.0.0.1:9997/authorized")]),
+            scopes: Some(vec![
+                Scope::Known(KnownScope::Atproto),
+            ]),
+        },
+        keys: None,
+        resolver: OAuthResolverConfig {
+            did_resolver: CommonDidResolver::new(CommonDidResolverConfig {
+                plc_directory_url: DEFAULT_PLC_DIRECTORY_URL.to_string(),
+                http_client: Arc::clone(&http_client),
+            }),
+            handle_resolver: AtprotoHandleResolver::new(AtprotoHandleResolverConfig {
+                dns_txt_resolver: HickoryDnsTxtResolver::default(),
+                http_client: Arc::clone(&http_client),
+            }),
+            authorization_server_metadata: Default::default(),
+            protected_resource_metadata: Default::default(),
+        },
+        // A store for saving state data while the user is being redirected to the authorization server.
+        state_store: MemoryStateStore::default(),
+        // A store for saving session data.
+        session_store: MemorySessionStore::default(),
+    };
+    let Ok(client) = OAuthClient::new(config) else {
+        panic!("failed to create oauth client");
+    };
+    client
+}
+
+pub async fn authorize(client: &Client, handle: &str) -> String {
+    let Ok(url) = client.authorize(
+        handle,
+        AuthorizeOptions {
+            scopes: vec![
+                Scope::Known(KnownScope::Atproto),
+            ],
+            ..Default::default()
+        },
+    )
+    .await else {
+        panic!("failed to authorize");
+    };
+    url
+}
diff --git a/who-am-i/src/server.rs b/who-am-i/src/server.rs
new file mode 100644
index 0000000..5a0fc1f
--- /dev/null
+++ b/who-am-i/src/server.rs
@@ -0,0 +1,272 @@
+
+use atrium_api::agent::SessionManager;
+use std::error::Error;
+use metrics::{histogram, counter};
+use std::sync::Arc;
+use http::{
+    header::{ORIGIN, USER_AGENT},
+    Response, StatusCode,
+};
+use dropshot::{
+    Body, HttpResponseSeeOther, http_response_see_other,
+    ApiDescription, ConfigDropshot, ConfigLogging, ConfigLoggingLevel, RequestContext,
+    ServerBuilder, endpoint, HttpResponse, HttpError, ServerContext, Query,
+};
+
+use atrium_oauth::CallbackParams;
+use schemars::JsonSchema;
+use serde::{Deserialize, Serialize};
+use tokio::time::Instant;
+use tokio_util::sync::CancellationToken;
+
+use crate::{Client, client, authorize};
+
+const INDEX_HTML: &str = include_str!("../static/index.html");
+const FAVICON: &[u8] = include_bytes!("../static/favicon.ico");
+
+pub async fn serve(
+    shutdown: CancellationToken
+) -> Result<(), Box<dyn Error + Send + Sync>> {
+    let config_logging = ConfigLogging::StderrTerminal {
+        level: ConfigLoggingLevel::Info,
+    };
+
+    let log = config_logging
+        .to_logger("example-basic")?;
+
+    let mut api = ApiDescription::new();
+    api.register(index).unwrap();
+    api.register(favicon).unwrap();
+    api.register(openapi).unwrap();
+    api.register(start_oauth).unwrap();
+    api.register(finish_oauth).unwrap();
+
+    // TODO: put spec in a once cell / lazy lock thing?
+    let spec = Arc::new(
+        api.openapi(
+            "Who-am-i",
+            env!("CARGO_PKG_VERSION")
+                .parse()
+                .inspect_err(|e| {
+                    eprintln!("failed to parse cargo package version for openapi: {e:?}")
+                })
+                .unwrap_or(semver::Version::new(0, 0, 1)),
+        )
+        .description("An atproto identity verifier that is very much not ready for real use")
+        .contact_name("part of @microcosm.blue")
+        .contact_url("https://microcosm.blue")
+        .json()?,
+    );
+
+    let ctx = Context { spec, client: client().into() };
+
+    let server = ServerBuilder::new(api, ctx, log)
+        .config(ConfigDropshot {
+            bind_address: "0.0.0.0:9997".parse().unwrap(),
+            ..Default::default()
+        })
+        .start()?;
+
+    tokio::select! {
+        s = server.wait_for_shutdown() => {
+            s?;
+            log::info!("server shut down normally.");
+        },
+        _ = shutdown.cancelled() => {
+            log::info!("shutting down: closing server");
+            server.close().await?;
+        },
+    }
+    Ok(())
+}
+
+#[derive(Clone)]
+struct Context {
+    pub spec: Arc<serde_json::Value>,
+    pub client: Arc<Client>,
+}
+
+async fn instrument_handler<T, H, R>(ctx: &RequestContext<T>, handler: H) -> Result<R, HttpError>
+where
+    R: HttpResponse,
+    H: Future<Output = Result<R, HttpError>>,
+    T: ServerContext,
+{
+    let start = Instant::now();
+    let result = handler.await;
+    let latency = start.elapsed();
+    let status_code = match &result {
+        Ok(response) => response.status_code(),
+        Err(e) => e.status_code.as_status(),
+    }
+    .as_str() // just the number (.to_string()'s Display does eg `200 OK`)
+    .to_string();
+    let endpoint = ctx.endpoint.operation_id.clone();
+    let headers = ctx.request.headers();
+    let origin = headers
+        .get(ORIGIN)
+        .and_then(|v| v.to_str().ok())
+        .unwrap_or("")
+        .to_string();
+    let ua = headers
+        .get(USER_AGENT)
+        .and_then(|v| v.to_str().ok())
+        .map(|ua| {
+            if ua.starts_with("Mozilla/5.0 ") {
+                "browser"
+            } else {
+                ua
+            }
+        })
+        .unwrap_or("")
+        .to_string();
+    counter!("server_requests_total",
+        "endpoint" => endpoint.clone(),
+        "origin" => origin,
+        "ua" => ua,
+        "status_code" => status_code,
+    )
+    .increment(1);
+    histogram!("server_handler_latency", "endpoint" => endpoint).record(latency.as_micros() as f64);
+    result
+}
+
+use dropshot::{HttpResponseHeaders, HttpResponseOk};
+
+pub type OkCorsResponse<T> = Result<HttpResponseHeaders<HttpResponseOk<T>>, HttpError>;
+
+/// Helper for constructing Ok responses: return OkCors(T).into()
+/// (not happy with this yet)
+pub struct OkCors<T: Serialize + JsonSchema + Send + Sync>(pub T);
+
+impl<T> From<OkCors<T>> for OkCorsResponse<T>
+where
+    T: Serialize + JsonSchema + Send + Sync,
+{
+    fn from(ok: OkCors<T>) -> OkCorsResponse<T> {
+        let mut res = HttpResponseHeaders::new_unnamed(HttpResponseOk(ok.0));
+        res.headers_mut()
+            .insert("access-control-allow-origin", "*".parse().unwrap());
+        Ok(res)
+    }
+}
+
+// TODO: cors for HttpError
+
+
+/// Serve index page as html
+#[endpoint {
+    method = GET,
+    path = "/",
+    /*
+     * not useful to have this in openapi
+     */
+    unpublished = true,
+}]
+async fn index(ctx: RequestContext<Context>) -> Result<Response<Body>, HttpError> {
+    instrument_handler(&ctx, async {
+        Ok(Response::builder()
+            .status(StatusCode::OK)
+            .header(http::header::CONTENT_TYPE, "text/html")
+            .body(INDEX_HTML.into())?)
+    })
+    .await
+}
+
+/// Serve index page as html
+#[endpoint {
+    method = GET,
+    path = "/favicon.ico",
+    /*
+     * not useful to have this in openapi
+     */
+    unpublished = true,
+}]
+async fn favicon(ctx: RequestContext<Context>) -> Result<Response<Body>, HttpError> {
+    instrument_handler(&ctx, async {
+        Ok(Response::builder()
+            .status(StatusCode::OK)
+            .header(http::header::CONTENT_TYPE, "image/x-icon")
+            .body(FAVICON.to_vec().into())?)
+    })
+    .await
+}
+
+/// Meta: get the openapi spec for this api
+#[endpoint {
+    method = GET,
+    path = "/openapi",
+    /*
+     * not useful to have this in openapi
+     */
+    unpublished = true,
+}]
+async fn openapi(ctx: RequestContext<Context>) -> OkCorsResponse<serde_json::Value> {
+    instrument_handler(&ctx, async {
+        let spec = (*ctx.context().spec).clone();
+        OkCors(spec).into()
+    })
+    .await
+}
+
+#[derive(Debug, Deserialize, JsonSchema)]
+struct BeginOauthQuery {
+    handle: String,
+}
+#[endpoint {
+    method = GET,
+    path = "/auth",
+}]
+async fn start_oauth(
+    ctx: RequestContext<Context>,
+    query: Query<BeginOauthQuery>,
+) -> Result<HttpResponseSeeOther, HttpError> {
+    let BeginOauthQuery { handle } = query.into_inner();
+
+    instrument_handler(&ctx, async {
+        let Context { client, .. } = ctx.context();
+
+        let auth_url = authorize(client, &handle).await;
+
+        http_response_see_other(auth_url)
+    })
+    .await
+}
+
+#[derive(Debug, Deserialize, JsonSchema)]
+struct AuthorizedCallbackQuery {
+    code: String,
+    state: Option<String>,
+    iss: Option<String>,
+}
+impl From<AuthorizedCallbackQuery> for CallbackParams {
+    fn from(q: AuthorizedCallbackQuery) -> Self {
+        let AuthorizedCallbackQuery { code, state, iss } = q;
+        Self { code, state, iss }
+    }
+}
+#[endpoint {
+    method = GET,
+    path = "/authorized",
+}]
+async fn finish_oauth(
+    ctx: RequestContext<Context>,
+    query: Query<AuthorizedCallbackQuery>,
+) -> Result<Response<Body>, HttpError> {
+    instrument_handler(&ctx, async {
+        let Context { client, .. } = ctx.context();
+        let params = query.into_inner();
+
+        let Ok((oauth_session, _)) = client.callback(params.into()).await else {
+            panic!("failed to do client callback");
+        };
+
+        let did = oauth_session.did().await.expect("a did to be present");
+
+        Ok(Response::builder()
+            .status(StatusCode::OK)
+            .header(http::header::CONTENT_TYPE, "text/html")
+            .body(format!("sup: {did:?}").into())?)
+    })
+    .await
+}
diff --git a/who-am-i/static/favicon.ico b/who-am-i/static/favicon.ico
new file mode 100644
index 0000000000000000000000000000000000000000..5db484406fbdcb26760f9c29070dfa98fc5d4463
GIT binary patch
literal 15406
zcmZQzU}Rus5D);-3Je)63=C!r3=9ei5Wa>W1H(KP1_lEI2tPxOf#H}a1A_(w1A_oa
z9Roz10XO*1z`*>Ufr0x!1GB_`26nCg%zQ@w8MsaV>)6Hr*R_uMFKdwSpI657KLeY}
ze`XGu{|t;={}~vV{xdKzK=d;5{pS_a`_I6s|6kj!_P>Bm+J6@L=>Jwxz5fk7O8<+Q
zl>KLt3jQys7XF`2$mTz{sPTUWMn14!CKkc}(i*}4c@={H%iGufmvwCW&#qhjpUtr2
ze?-^W|3;Cs{<9f%|5x-~@L$xj?mw4m%74d%h5tp>LjN-`^Z#dHmi*7iWA$Istn`0S
z_3{52@!S5(gzfsTmT~gG|IDZVgC|}6ub+4Ef83PE|J5S4{8#pw_n%2B>c5~$=zj(l
z$^Q(js{a`T9R6!~PyR3NvHZVT$+`b#&5!=O%=qv>eCPN7ky}6hH*9|OUoi6gf7z%*
z|Aky;{pT~O`Ohrn_n(1N<3FpQ&3`7Tu>XvjmH)+qw*8mMy#C*Q#<%~`+yDOWdiv*o
z!@Xbsjc5M;uif$Szfi)(|17qP|Fh_~{8zB+{LjE?@Sj!0<-dSQ-G2d>dH;F*cl}qZ
zefi&O&ENk$xBmUV_2cjVeP90mpK|Zt|AOOx|0|R}`!Abx=D%Ixx&N|Glm0V{IR9sr
zaQV-npZ%Z9aoT^O*i-+_CVl$9`tiU2mp=dd|Mu5^Fn;>u-~Ym6fB&mDefTdNe&Ro)
z@#OzZs;U1O_-+0(@LK<8kc<B>;J)C$QT3hw{wsg{pM2}z|MN)tx4irJKYahc|7MfF
z{uhWm@t@JC|38CV!hZ%noBs^l7XLXlv;Vu69{#VHd+xtl&FlZkyZ`>*_UhmN7eD{~
zfBgO5{|lf0{jWav@4w5u@BhskZu}SVTJWFOu;Rb4cG`ai4#WQp5&{3!f*1d1cUkpc
zw(!RPpq0P=cU}4Szw^ew|1B5({jWd&_kZHH-~W}1ZvGbx-twQ@y!AhWMBsmBA-n$!
zY?}WWgq;2}sV4ttGU@oQmU-&GZ0^nfA<Mu0H=q6ezhc{`|I#JT|ErYU|8G-w{Xeh6
zjQ=c}S^pWu-2XGMY5eCDvHZ`k75AS>%J;vpb^CuV>nZ=)Jy!lVsJ`}JF6YXBp6HYR
zdBP6=XSQ4RU)+E3e}nkV{|&>I{%7E_`p>{D`=4LI`9A}@?tfmT=>ME5ssDwoTK)?;
zPxvqHv+zH+>)ik5`N#izl%4(0Z$I%rgM1R$uZCVT{)=j5{byj8_|L$=@t=WF^gpYR
z-G3F^&i@knh5z|9)BiKb#QtZ~&Hm4*lJlQOujD_oLd1Vo8Bm%t{?8*9@SlN6_&);!
z+kXZImj4V4oc|dZMgB8#X#8j3(EZQAY51Rk*Wy0|D15+iZ26yo+xWkzLHd724yFGL
zOnm<t7+C)^FffAhFz%9p2pLd0qrkwx;6PM411c{-c7n<dko_Qc^Z#dH68q1<BK@C%
zMgBhntIB^yc8&iGY})@BIQ0HAaq0gL&u;o3np*vzjn@$DH#y^^|7^mp{~6fSAbMD&
z{xdL%K+6;kXqbTP0NIC(L3V@6I`;nzj64uMAbVLA|1)st|7YZL_|Gox^q*bS_CEuk
z?SBRV`~OTr4*w$xd;W)IHveZ6ar)07<nlkPc+G!9pVt2jJZ9kVX5`fQ&o5>6p8@0!
zX5s$~jNH(;0oetz6XXUE4dR3B=KIepqWYhKRSx0@PQCxK#wq_3>URGZGRphUA?y2}
zLCohrlT;wM+>EQ8_dhbf`#-x((0>Mr(EldEQ~xuFh5Tm_bOO6m-YDt6fQ-j~RzB_j
zT*6xa8JNZXGcfZ0XJBLpm$8s|289R2ZU$!Y|NIgL|0OkD!QsikXZ2rDBkaF|L(_kG
zhlc;0DslfA<r4n$8|43&cj^6~Jz?knsNyOA*_BiOGbv^KS9R_9&m<rJpHnH~Ka+&-
ze>I2V{|vmg|5=0_{;ODKg5wZm2Lltx4WKj%vYYik1Czji24*F2zGGn5`7fa2@n6Cy
z;Xj{x+<z9ii2t(ob^p1v^Z#?{6#r+@EdS4A+VbBbW9R>>C71rk)GYeXu3i0~!=T|m
zk5R*a-SEZ#S+$D(^XX;$XIF^+&miLYpGhL*zgPD9|Ey9`{~353z;zh|6F)SqbN=TP
z)c9}WUh&^Du=~HFMfrag`K14LNh|(KJNEq-wrv0JRJiv)vv$jWHlz0c%m#h`S<Pns
zH_bo!zk2<{|MBgc|8rW*_|IfA{XetmjQ_4BC;#(1Ecq|)I^(}q@Phwh<`w@14Qu{q
z^<Mbzm$&A>Wl;BjX_JKiOgwUs`jV0VKLd;Ge+G7=|7_y^|7ESJ{<~zX`(MBC@&D}U
zkN%6hFZl1<c>cd^=(hjN=5znEIj#DypLP1bcK((BmAhX5kDYY%zkAc={|vU9{`<Aw
z_#Zp<$^Y4Vzy1$xzww{Vp#MLsX5D}1>>dA^WK;h$2)h4g5^(y@z@`JqSD-Ker3qGL
zaGnB}`68bGnU#|Nv+A|}kM6wkUnP0Rf2qJN|9yJy{bzCB{$Doz^ncI3r~j2oAN?;o
z{`r6O(p&$1Cp`Mk5q9o>`r<eL!>2y~uakN9zkJxP|MI~b{@dj2|IcmI`kz5E@;|3?
z>VMPl8UF>;0{=5`s6x^svoxfv<~IG$An5X+Niy=kir1|FeAZL`vzW~IAJ%>2zkJ4t
z|E{ff|0@;V`LA61@PESk@BcO1Km9Md`u%^*&X@lK=Dq)K(f#_rdeMXbc1;idGdS)3
z&tSFozkceG|I+@e{|ni5{O32V|1W9Z_Mb^K=s&Bh$A4x~b4VDlfbzHjIKMDT`2JUN
z>-rzjcIm%Y-NpZmW()qaxor6#H|N=ZrP2rggBE@IFJAigf90va|NU40{a<qb=l}Gx
zpZ*7K`13z`+wcF((NF%fgk1m6;(z+Ta^~g#D#=Iw^SUhhFX%MozkpTee`b}`|7@x;
z{~3jyz~u@9tHOT<7PbG(!Z!aIgk1kKNCf?7R?Yg)qTl{s)Mwp)tCDm7xdIOU=Z(Ai
zKXBov|4uW${a2gt>wm+!fB!4b|NCF{{MY}|JKz4NAOHJ5Y~$bmT)AKVi<G?muU7f|
zzkJrs|7;$+|1()H`_E!F`9HIM9k|Yrb?Exft(F3A$1$*}g3D7u&D8%~Dv-K`K_%}$
zgKq18W~=%Cc?0+Tx2U`KU#0TJf5pbn|2<d!{U5pQ-~aqm|Nig!@b7=kyFdR+U;g^P
z{>|V2wyXdB*Ps3GzuT(6|Mj}R{^v`7^j|#V!hdGxP5;@Qmi%Wl?ElYaG4p?9^`-v|
zlIh@b0o0~sVAuaIZj}FD#dqd^X^-ju`D`ZqXEC4hpUHaZf3CoT|JkFi{WtIZ^xu8%
zpZ|XA{{2rp{_lUwjeq~2{`~iU$M?Vg=Y9S6|JbL0|HJqF`(Jwf-~aSu|NbZK`ujg)
z%g_HJ$+!Nq`5gE!9=7klMgHmkwgu<^+hiR6uk1bhKd)~3e+DjnNIOH&<v)W&_<ttV
z;{T%V^Z(04Zv8J7wevq;#L53^b<h8sP5SoVY{lRIar^%LZ@c#I|FN(C{y+Zt@Biyx
z|NdY8_4ogw5C8rj{q*nu!H@s`FM9OvfB3F{|CzJi{bvfh`Clya+JDD}JOABkZv1!1
zIq_e@cJhA)iAYF%a~b|;;4lW)9Sl;T{~44s|1;<`{%16q^`FIM^M8);Q~y~K?*CWl
z{_#Ki#J~TuAO8D4{n5Yw*S`Pz|L*sH6#O2<|Ml<x>bH<MaGd_*zw@LI|E(Gx{uc~B
z{GY*e(SHW**8dDjIsX|XLm_r@8UJS$wfQe#6!)LcEa$(7XVZTX|0(}P!q)s3O+5Ku
zz3S0_w>e+_=O6m}f6p6GyYb)u4`6#BcEj3{Ah&?*Kk@0`|L$x5{(G$X_g|vv=YOWS
zNB<eUPyJ`G-~6A^eC~f%(~kdah9&=5wG#d_N_hNd;5PZsz-jWI0aRy8hy7<%&Hm3~
z+Ww!<XU%{4%uD|*+g|(+SpM^W`RRZEH@^D!|JJvE|1W;|_y5f=O#6?0`}e>3!N31G
zXa4<9Ir#5?$i~0_9jAT#uUK^VKY#dv|4df%{xj;f{AW<f{m&p34zUw#zY!!XKw+Yk
z`Jc_S`@dGk;r|vDSN~hLKl*Pq>D_<3g}?tN9sc(}{@B0&bDu)u9^_|a{N(5V|4U!~
z`yX}U-+z;p|Nd)E`14<??9G3k$P52joVWaEG@T8OTLz^pl<)_)a|NCLGfId4=g_P8
z&!E%u-?ZT9e|Dd3|GC0W{pU}<|6jWD(|@m(|NhsU{r7*ztAGDN?RHRjgYdgw|Nnz%
zP<q_=;otum5C8qoJ^Jr|;L1P$jk`YlS17&xUm^F{e~HNT|M?sy{%6rB`p+mG^PfdF
z;y(kA#eW8Nz5fjS_Wv2g1OCgpPWtatfByf}J@5YecHH>y-t+LkP4DafCS9NY+b#JE
zZhO~X|M!3Y`+xsI_Fn(?@Be`h|Ng%R_b2}S-}L(5|KhX%{+A#B_upgXpZ{)izx)rL
z{o=oO+x7nnp_~8nT2J^dV&DE>#<lOibM~J9tWy5q@&{b+h<g5Kkcs=xXFcP8%7p9x
zS!`GT=MUQZpDXn2f0?Qm|9#f{{hzSw-~Xnw|Nd`#^Y8!R_y7J+c<}H4y!-$DuX+0K
z|Ktb%{;zoa?|<8+fBzkq{QmDZ`@?_9+?)Rua?kyjOxpinEpgL-CasG93^FnQ8ASd5
z^JpaeXBM>n&%mnjpMl%#KZA(te+JpG|I+S#|9Pz^{%5h74sP!YCLjH8H|gbnui0P!
z2QU5oKkLZ9{~g!<{m(xA?|;VefB!R&{`()d{onu66aW7EZu$E^YwzFxp(}p;S1h~t
zpUrpge`dRt|G6Az|7Xyy{m-JA`=3cZ0+RQ+%^~$3i^_jSKGXk<;?Cf<9kXiEe-^`v
z|I8+>|JmIZ{5L2*{ok<i-haKir~gg*-u*Y6^7Vhs(ZB!om;Cu3y!qdMiv@rGD|G$*
zZ#Ct|f92Ls|79y)|M#5v{=Z|#qyL&&C;ziJF8I%A*!G{@xavQfPS$@$Nq<OugZcuX
zJ}$F7q&>i6{+~g}`9Fhn(0@ji<o^unCI1=pyZ(##Z~3p9dHO$p?D7B1ey9Hj%=z#?
zWaYR2O0{qPTh09bU#|ZBf5Cz$|M{~X{$~of{9h{X)_;NMlmFd&?*4bIz4G5MZO?xO
zt%m=sx_SQ@r6c~cC<gy$1cf`e4WjU$fm!-LBahyHCL#O(d^*wpIkm$6gUdq2^#3A`
z)Bmf*ZT-(=Irl%K?Xv$|fqVa(G(Y)o(evoPR?(gRa+Qz%3uRpY&lPj_KX2^W|BP;X
z|FgR7_|NIJ@xMUey8rf7C;yvgANg;Swd=o-b^m`c)7t+Ge0GqwEvSzGYI`ut{a1Bt
z_^;yA`=3i8<UfOe-G2sApZ|g;wf{B37XN2Zul~=d-}0Z?YRZ3shz<YUny&oki#zyV
zHs#cRk;Ie#h2xL?XZGIvUo`p5e}SN#{~65Z|7SFs{GUO$?LVLE#Q(-g8~)3B%>N%&
zf9}6~_MZO?yx#vA*!2H1fZ82QqW`%Roc<dIPyf%v=K{%#+!p`&)H437`%VAPAd~Q)
zK_UIWusf(uZ2HgVz3{(V-Rb{qZVUf&c`o}e5VZckp!cT#2{WGluU+-wKey}p|IB8S
z{xj({{%24r`p=-4_Mcfj<v)X1=zngF%Kz1qpZvFt-|%1Dq~t%7fcAd|W`X|<j6(mJ
zc~$;1u*iYi=gb0*|5e?)|1${r{$~&k_^;tJ{lBn9%YO!qoc|UnoBj(q%=*uuQ~#e)
zulc`_-<<!7QJenzG+g_iKjGnjt*CAPl>?Xm7xU-_j~y^bhJf4Opm7vd$*BL9VXOW#
zaQXaa<hJ_Hz%KotfeF+f0`*0B|1&U&{%2s8fs_ZF4*xl2<NjNQF8S}3vGqTLSonVi
z>FEEKiL3uJDCYiWP)h&LppyNc-?8aGgL2V-HuJ9kI^k>oGbm;MXHZQ3&ux(LpG6*2
z$GL*rbqrjl|HbsO{|m?`Li&Z^J~GH|P+t>-LE~1S{-)@EMlO~AqDGnjb)0+ut2#~n
zFJV~upMl>2QeTJ#g3Cz;$>9HtvJwBejkEqUNJoIn6gG{_{|w@R{~2Zc|1*fV{TDDz
zhO}`&`HW5LKd)xMe+CxS{|rn*{}~uS_JR68pne~ypAPDqg2W(h0QZGhH2<@SyZvVp
zu>a4%1sZoV|Iff@4IYyM=TlL)|4cGI{~3hcA#M|L`OhHW2=*_dpv`|3pSJ(fre*(`
zcnqL%EBT*+Nf2r`$j>0VLH#cf2Dt&`9*{e@|1&TOK>FUG{K29CP8Xmt5e5z&@K_!L
zsNKSC{GWlx1cE_qkQk@le+CY1a6gVi%Jo0Ldh~x5K`n@%QTo0hI~o5oGJ^WPL<}Yj
zV<n(*5(5SXh6JL=Nnm3Jps)jlBPbq0@d?UDu(%WX&%h-9pMhBlJQl^k4C-fq^0?}M
z1{RI~46K@ve8#5pU)3b=e|%xv|M<M-|C+`D|CvB>%%=07nb+*UsCvkMMjpHWjBKE>
z1I7Og%yJMjL1u&U5UB48j#rS~pfm(>4+w+Yhzp~+8#ERHG6Q55Xsm`=64D<AjlF=%
zXm-eW4=caXe@1RYNShHfzQSt(9?Md<ivFKa+VwxNsN=tudBlGvK9IQOe-W*i|9PFe
z|Jz1P{4c2F^B<gc+0?;f)eNkP{~6ikA>+ItJ3)4X#;!qb0gs!3!W86AbU%Q^Ko}$s
z3Ukmn6==Lj2om1lF(XiYs`{T1l<#>R|1*jB{TJ1a{Le1t@Sj!04pR3DI)cY0LHStS
zKJ9-}#l-(fr9J<(tm6MO3A=#XqwI=t|5KXx{g=0E`p+!t0U1*QnaQE|pPAR_zqW1k
ze@1p?NFNr|hX>_t(AX7d+z`bNAoqg&0ir>119dwi$nAXpnc2nvvv7jSe%b#FY@jh1
z_5Y0A`u`>M!vEVwPW>NMx#Pd4SNne!NuU3mvOfPAL_Gd8h<g8LlJNV_AnyNP%e~}(
zdc&OmDV3A{Yujb~XOi&$&miXipI<ZUziY~p{|pi_{~3hbz+-0Mb{?<Ie|4*j|LRt$
z{~6e||Fa8d{pS${r7uwVBm^Cw0*!rw!WZOLkefkn2VoGO^*;mD?VzzeE+N(b@;Z+H
znYlo5s|D#-bDREW5q0~oWMA_?yYuLON!#ZCtnv~6c~m0)gX<)zi2r=r$^V%ZQ~n!-
z_5IImTlPP#X2ySQ=Ys!CveDo%R%xr+|7xyX{~08r{xgXA{%4c%`Ohfq`kz-Z<iD|Z
z!+&N0XK*`$OWf+evRN2pybhFh!TAC-z6B~vVSWI)9pn!X9}?~$w}bL0BfH{%c>}Ni
z;_7by!R0Ei<$nf#yZ>xbUjL;nvj5B2)c-e+p8cOgHTgfcddh!h#pM4C3TgkP?Q8xE
zTebgB={@m3zkkdB^!oY#b=)ieGlBXS%31#voLl}27?l3!P|NtwC>#5qPb2m}qqzTn
zMVq|;B3kkP8TcLlGw@pdXA|@O@0~XDKO>+0e+D*CdXj>Se}c#8Kz=~V*Nhzh!Q*Bi
ze}c*s(6|ws`hON)!~crbG5-Zr{r(GTM*e4!^atA|XH)c_M?2@gs72X-F73Sk>>7Fh
z*|duPGpLsQ7qjp9ujs$%fBx*-|BGiH`k&Fd;=hhh%YP<~%KuCnRsSXITK=<YR{Ylp
znE7ASy7fPcO4@%Gg}DFH7CHY}q=Wx62z!9Xi&&(i{-?Je_|L1F{hyKF<v#<b8Ki6j
zwP!%%TOc=s=doD8<J;UKTK{D=g8uVM`~GJF#UYRVe+FLr|11)o|J6LI|64}S{LikO
z_Mcfk>A#xa<o_z(Q~oom6#r+{F8|M_Tl=3~zX{xr=Cz*uUo(E&|BTu9{+BE~|3ABT
z>wn##iT{~&JO4B4b^hlv>-x{A-Tq%Cc=dntv~B+xHERDeX%_rv(<=PWsh;;=)F}Ty
zt8B=BCWWm3<+E=5kE=WI-z{bFf3twz|JqI!{{^*!{xb_I|7T$0`Om-zN;hoav3+)a
z?f)7UY5xN==Khbb-1OfqX~BOPtNQ;eYDNErEPMWkHJ${Ix3Q>K{CCRR_1~fN=zlJg
ziT@dO+WvEz_x)!!ocN!?aK?XDi$(wSb5H({pK<?x$;#XRbEY2ruNSr8Kd0^D{|u&c
z|1+7+{?B2%_`j&n=KtaCH~(|kEd4L#yY#<%;lBUosT==`TGan%l28AyA2R=cT-(|I
z+5xlv%iA^n7uV1EFQ^>xpIy}EKLdw6q|E`!ub?&$csw6eJ{tUI;&=Pcqnz+x)urXX
zPyUAg*?s5#7tg%=zkkD*|NeDn{);-!`mY<k@xNc|<^S4A`~EW;&HT@1HRnH@?c)Ek
z5xf421?~N>S9JM*<n%}X3pYObpEc*qf19G6|ATvP{b#V-@SoFV^Z%4-_y4PAp8emx
z>Er*VHE;hHEqL}{Eo}3DW-ZV-Nb!Fe$4USFD-Qo>)u{N-AR79gLBRb#1Fyq>22Rue
z44}G#Mdm*PvnXUv08~eS#__@RlIDK~PUHU!ymtQ?guTH1X>R?h|JtF;{ufTW`#*L1
z<Nx|ud;W9T&i^0McKN?;-PQjBUR(Y%S+D#r6ukYvQSpWU7FD<Ys~6w?A2#pB|J<Fg
z|7WeZ_1~xK%zv-$2mcw}_W#!_xb(kz{fGY{Q(yd_x&Pb$j2Tb=yVqa)Z=QANzmVgs
z|2(D>|2yXH`7dhS_n$#B?mvTw&wmC%pZ}t|8UF=UBmOgT>i>s~FM`TdP<u`U+746$
z&rN{)y!;^dyZ>hp5B|@kpZ}jpz3jiB?acp~Q*ZrutUvdk&v(s#5x?#Kvll=Auab4~
zKa=yW|B?wO{~OfZ{~tZ?&41Z~$NwW%fB2tq@Z<li?a%*5FSz^Pvgy%(=D>6R113NF
zZ&GvrzjDrv|MAlv|L1hy^`F&t^?zQ+mH&Aim;U#tJoR7JbJ2eeT~MDq_CKR!^nWRv
zrvJ9dEB_k=wEySV^!?8On(yIOf%FYPZ4OpY{iOAufzt>wKPl(}u4@=%lK&gVEdS4I
z*887Pr}ICT?V|sw)9(DYZM^iK(|6Z@v$CuI{ii?w&l`UJzhK;z|K<}v{4d-2{l8rK
zoBz?<zyD7^_vL@)k@x?zx4ihT(fHy&f5wCV;j`cV7mmO2-?{zKfAx%u{~7GJ{%5dS
z{h!rl)qjh;6aRG*cmEf1p8j9Nq3u75O74Gg`;Pw#9{vAWBxC<G3VHr#k#P9WuI%=o
zkyjHkf6gQYsUtY_Ama@J4*!`XeE!Q=mi^c8ne#uj`|5wU(&PWR?dJYxFq!$E-(&Ot
z=qdOAJ9gduFA#I#f5`0D|21l!{^w7*_uqT*_y6UG{{FX`^8J70o?rj7Zhrfpeg4z`
ztUVw9>rejr-(udk{{b^U{O5?i^IxOv!GBiY)BhRW_y1>h-t}KI_0)fZtP}sm1J?c*
zaGLg?)2QXYjMt3+A~tRRnPn6HGs}kkXHyFL&m!#xY3qZ=h(Y}TP}>jG4&(x*du#9*
z2BSp4e@=~@|GJUO{<~G4{vSK>-hT<-&HouKm;7gSUH4xg_~`$<m9PK1O@IC0sOiOj
zzr|nv^B27S@3;I1cnlrnhsc9}{^#ER{y+cLm;cH8zW?{y^!I=K&cFYSTR;70jClN?
zDdhHlmY^&DSpv@eSID^fU%%waf9aS#|2gaz|L3rt`d=n!{(mmxmj6tudH>mUv;VWH
z#s6o5jd6hbO`v&T(0m%RBDjCeBxv;?+)onm{Ldf}@}E&5`9H6D<9{Z-p8vegEB-rF
zUHGpUb?`r%=dS-8A;<o6$6WiLvgY%DlirX26W0Iuuh#$LzuBDM|7YC!_kZS{fB#d?
z{QY12?8pCtdtd)29{u&d;LP9u4X6M9mumX?pC#$tf3DOQ{{^z1{8uP=^xvxM>3@N+
z6aQIUw*F_dTJfLVZtj0(qu&2ay7m8A^-BLUDy9EtQOf==?b!04MKbU|189s0G;a$^
z_slB)8MsXTix?$A<irC0Ge}2*+X4(~rT-bUTmCZ|Px~+IzxBU)>BawsrPuz8r(OFm
zUhwe0c)_dx-iv?!cb@m>fBg2p|25|R{l6GAUiRYO|Eha`|5v{G^*`^)xBtc0e*d5Q
z<nRCV1ONU@cmDk^R{QI}{*0ghjr+d+x9s`wpD*Fgf40EW|Czn^{%5pb|DVZf(SK(1
zY5!SFy8bh$RsLsCs{F4Ju;jmC=#u}8VquUx%4q=UKQgQTXW+K^FKt=-U&^xaKZ8X4
ze+Idv{|w5x{~0u@!DCIJac@?ab^m!n4*i!&y8PdB(yRY6g|Gh`Px|^_vE$eO@NIwp
z2W|fMKXAvt|I_aO`+xcSzyI?;{rlhW?$7_USHJ!*eE;|Vo)3TjyYBe+Uwz8I|K7X)
z{dZsY_rK@TKmVl~KmX^=dHG+t?%992f=mBdJ$C$Ob6xkJ(|yH%CbJp;ne?apR}I?w
zzkSxL|1ypX|1*dt{Ab{I{SO*DfYb$={~7rl|Esuk{I}2C{9nR(!has4=Kox#ZU0$K
zyZ$qoO#07gG5<f4{rdl`-Ut43MPK?aSNQmU$l`DR4ZD8+_gVV)zv-fX|5H!=`(JeK
z-~XPQ|Ng)D_3!`rpMU?){`~iU&WFGMZ~pxIf79E4|2=m7`yYS!-~Y6;|Na-9{P*8w
z)4%`j%m4guI`-$k+w4#Oh2pOK=Lk6bpTm2{e;(IO|CJ*5{P%0T_CLJ!*8ixM>;Ii{
zkN#Klo%f$xGYdSf2A*eO(FU^xwUYj`DW?AyG;jVd>oxbkV(`lUvY~7L3;V79&*8G_
zKbPOG|02of|BGke`OlyI{J&KF*Z-a?{{9bJ|L=eD-hcmdPW=1d_vqjMsZaj>zxoX{
z5ApB+g`a=__kI8K|Lw1T|K~mb_rLPOzyFJ0{rkV{#lQdMm;e25x%lsY&-s7<o#y=b
z&z1P(KXdS<|D55c{tL&Q{;!dJ;lE?mwf`<<SN}T|UifdCeBeL3R>Oa8t%CnNIvJ31
z2-GKK)rF)d&^#Gv97ZPoKcjNte-^#=|2+2d{!4~!`LC39;J;AR{{LK|r~ixRJ^1gp
z@XLSi#lQY*F8cf5dHcWrxyS$g&pY|=|E5>}{@?lW@Bj0k|G;DCZ+`vzfA!a2@O;kh
z5C8t({{HX(-Jk#duYU9I|Dm`4{#RZ4_g{VC-~TN6pZ+sOKK{=fb?ZNW^7a2V4fp<M
z&VTtotmpoJoy5cc#a&nY=Q03|eWm?p5D$X%dq8VpKxICg9%Nk%Xs$y%;6H<0+<yk;
zoc|1(HUAk6djB(;&HK;nu=YQ9@V@^X5oi9hM&0_)ne*nq&4S<m%TN9LUvuT(|K=P2
z{?}gr_kYogfB!-AU&!+h$ZXJj0BC&v-LHTD&wl&&Kj!4W{|cRd|4UbX|F2&E@xRyf
z_x}?Xzx!|3eDA+d$l?DC7OVd==ui94pxN}FLAemJh6m(+(AW~#{rdkw^K?uipgIfG
z-U<HCq?Y`j-K6Y4k3;8wKKEJw`FvOZ=Ly{PpFir<fARDi|3wO({O7Iy_+MuFpa0Rv
z|NUS0{NMkF-~Ro-|Lx!Z^I!h`fB6fPb};90K>h%^AA~`EIQ!+_|He!I{zq^6_uq5D
zpa14Ppa09`KmE@ZeEC0v>%spFwj2I4m@oX#U@+l7gI4{229<*U44`p7sgVB+Vjlk)
z_-+3)a2Wh&;x_s(VjlNj!YS{+xNG@;DWB&5GC@861>C#;^Lfnt&+oV9zfk0%|5DjE
z{_D5A_#e9L+yB0EfBtWL`0xL@kDxiHfB!%Hg3Nz`<~u-c1GyDMzXi{K{Qv(JG&lAe
zG9UBc$N&G6pZxouaq8dyklp|O+pPHaUv=7_|9n*+{xiki`_Jfi{y&53esEir(Q@H`
z7R$;1Ic+-sbJ^7X=dvjL&ta7OpIHGkR&NVl4+b7H28~UNxc_I63i{8ekno>Lqu@V_
zNz;FBx0(ONqPG24E4=jIu>Qe+&na*Jhc5sAKj+}z|DgG}4KM%wzyJN;|Cc`@b4Q@{
zS0Hy|xF0&N_TcBg|9d|D```QM-~Xzs|Ndv5`1e0@@4x>}>;C>Xn(_U=V(qK{!pXP(
zbBCP#&*l!Q%NG4-G@AIIQMd6wgIXbEJrii`7t}`swJ||;0BFn`6c?a0B@qM}A6Cx&
z&#2SzU(jRmf5o_c|BXwp{C8@9^xtdR+y6cbzWxtd_xpeB?!Vx<mYQq-{!h67@Bf^q
z|Nfu*0-B42q#dvypy3W<U;Xj#fB&n0|I@Dj`yYAg-~Zr!|NaN8|M%Zx{@?!&6Tbbo
zXnONsrRe^D(WLYLx&3$iXR=xNpV1JSepK`SGsq?WXOIZ~&j1Q*kek8ohvi>4@Hj7n
zEF}LjYS;f4^I!R2E^6<8$*5!hrBW{Zm&&>IU!m&hf5qmH|7{ok{$G6jA2<)E9D&SJ
z?fwWUdtmOxpnv`U|K!KN|2tp*`(JYY-+#L;|NdL7`S;&q>EHiGGk^Y9Z-4t=BKsz|
zo@8-a|DO>w=U~wLpFyh@QlHAjgVz#($A&@cl{i3kupXrRgqA-{ib?;O)QbKyXg2;=
ziCF(%B5eDA4!<q``JxZ~=Z!h{pCjt#fA;vN|Ft{6{WqQd?|;k=$lUJ4yZ`=Q1&2SR
z>;&ag5C)|u5DmhhdGV{?|NTGt>EHiFPyhYz2hGdx{rBHy&fovKJ>UOpb-eqp(fs(o
zYURcMa+&-73k9$K&t*UTKdWK$e@3;!|BRsgD<1ZrLBtO{<^rB0Wzqi602&(+bOw(*
z@fa5W*A8FuUol|ifA`8$|II7T{pa-D@n0qF^ndf3JO5QHp8Qv<d-LC7()a)FOaA_k
z+5PYTl<SakXv6D&|8IN)<>&w4xl2%f2F+!H=9NM7+wXt<`+xciq>h_>@8AE53;+IS
zAN}_~dC%Yf5vzay51#k=zxRaa|8+~Q{+Eb5{9i0|>wn3RmH(yu=lz%PnEYSDrTf3Q
zUHg9}r=I^3R#o7&kPIwZ{~17YY@jiEQLq1uvI+nB&AR>vG@kvx=<uiiYtMcCU$OT2
zfA6k4|Bb5d{`Z^t`oBrr>;F=vAO4%q|NFn__`m<P=l}gLJooSa^!xw*U-|Oy|GS_6
z|DXQ~nG>J?98$J^`1K#0&mVmM_kY*BfBz$o|NCEk>fitT1ONWJt^D)fb<vOi>dmkJ
z>$W}qA2a{i|Kb%-{<~J6`p;`S`#-Z*-G5f~!vE|Vx&H->YyVruulcVRGVebVX#N8<
zZVZ|)2jyo_z5wM9`LzGcx?TShyRZC@?7s1z$7Ab%CWp=cm2=L5*Tu3&-uN$5`}V*6
z@<0Ehw*UK|u;<_Z%G3Y;&$;*S|IrVSvS{_|fB(B4{QE!Q*1!MDpZ@!Q?eo9?TVMbC
zzv%J5|4SbK`#=BQzyIEw{{9bH_4|Lt&L98vT3-Iws(<)jv+Blw;iRMgMWXlqw<tOM
zUm<Ame+JbeNZln7`kz50;6JNu%zshSod1kmCjS|j)e!wg&|Ha_-+u;~=>KfmRsY>f
z_x%@kUGks7c*cJw+a>>*oj3mH4m<c?qVUFl{r-3VgIE3fAGYSt|Huu0|2Lla_rLl2
zzyI4_{`<e{^}qiOH~#(4JoWE?&*gvrE6)G>-+unz|K6Mb{^y;B)LV6@|NhTA@b|y%
zyzl>IDxUopO}+A;+56CcUjJSHC8Kxz7Y<(apUGn4e-`7W|7?0i|Cv=2!Rebp*bO{Z
z%q(I9S+B+nTBD^8NlStb{~2Zd{xix&{AbrK`Y-M^<3F=O+kZC4ssCB+=l<sjT>GCt
zcHe)+vg`k&m%jgR-1_dn=j`wQQ`Y_dpMU7z|Cs&%{?}dj_rLYZzyA>jAnoMp6aW54
z9r*X(dfvbPB}f1LkKXz3zwOe$|0B2l{U5RN7q~w3oc8iRU&87C?B3h|Guo{9&u%~e
zKd1fF|BO1IdN=<+qhj)ZMwy8J45D8D89?jIxGf;#vEX@T1@L-UMnTK}%(CwP86-Tx
z{sj4#)v)+Kn?>V)Cd20cYz|ZZb9gTMFBY@!zgN$_|LVo}|GQ3k{a?TN&3~6UpZ`mA
zef^)h^UwdflYjraZ2bG*7qre}{lEWVTmJsnU-0+8MAPs8VJm<CSMB=o-)QRh|56nn
z{=3il{NJ+k&3~8PXaDUQZ~hmG*z=#&ZP|ZD(@FoCjoSWmS-1RW*DwChq?iD%Tft!u
zDmOvthF#}B18AI+3A83t^FISGsQ+v6p8+(65Avr}$bUw~MDW@bMxDz4%x0bcnJj1g
zmkitfUp@2ef0Me~|0Pl`|CcMd_n#x-_J4(nm;W=j{Q6(G@6Uh9o^Su%7ykTjwfN6}
z)49L?OE!G@&y)A|zih?Z|Dpvi|MMk3`mbF3{J(I@t^bY_p8j|2c=+GG;nsiemMj1H
zJ=gwcGy~OH)&CjQ^8T}GW&LN<O8w8K9`m0Wv`&=I3f%4iuY(57@iR$7*0i(f{$~L7
z;X&;>(0spy?|&wh=>Lo=NszTMn$`aq^m_jDIIZ|^Qg-$~pU<xUd{O(r>!_G~PW|_u
z_5Od<k}v-q7kv89llJ((<HV2ubtZoOuhIG8KVRm<|H1_i{<Fv2`p=zk{XdiM+5h};
z7ypYSU--`xeDJ?n^Y#Cp9XJ2$=bZYVHskhx5!Z$P8Pux(GpXhL=g`ZB^vA_K|1*j>
zLf5D1{s*s71I-IFN&IJEQU1@!rT3pvz~Vonfc<|CrGWo@rg8t76+{0s$bkC7DgPN%
z%l`A(%=m9re)PYP=j#7Vwu}BVJFfiCXush<Z{)H6Hj`if_nGqYzf#k~|J-3${#$mv
z{4Zbk{J(7FqyOxY7yt7nU-~bUe)&JM@6rE^Zu|Z-x$OQg6n*GFtJAvwe17Zyn^vCq
z@6mAKzefE2|9<sn{>!+{{m-gd^IySd>VH;He-@PPLFGKS&7k?80W@C71R8@A1JAn&
z=tceK*Ny)#X<7JR%rf&otE|_52GIPDMBsl0*~I_C)?NQiGPeE~cAEX4QNQ~?qsfH-
zjHWaHGdnE(FOqoRzij&X|K5`y{ufL={h!<a_<!Sud;i6AuKpKFKlh)-|L}j-;KTo=
z^DqBrcH8}*$z{ubMw`|DnQfPW*IzN3O!?36J^#O2!iN9OWyk&-B<%X{Q+e#adBT?e
zmZ>}b3mVk_XW#>^{WXTH2?6C>@Ho2Ye+DLr|Lh_j|Go3J|2Ill@n1kQ6*6Z4+9v>7
zZ!8KL3o80=lC=6iziIn_29=Wk44ReTJk4s`|DVHk&VQk(P5%vYPW-oTzw)2WXUl&M
z&+Y#e^UnPjjyv*SD)YpDq42~189n#>7tg)`u0y!o*8gWPpZlNDcq+J$#Gu>qpHZjo
zzo2LTe_^Ld|24vv{^v94`tMhM<bU(x*Z++pHvVVekNMBQVf&u}l+Ia{p!1c2|5=2!
z|Est){r4%@{hw7b@;?JRsBAKT^zZqd|8ps&{Wncq@n6)u2{JCBkn*2JtL(q9&&2;M
zrcM93y{7!<a$WL2b^5LUQi(hMGutir&*r@Bzex19|Gd8I{&Tsm|L@a&<A3mkNB@H-
zJ^$}sfBip;)zbeAMw9<DoAvx>&~Et8pjQ5$K{@X~qe{kq4zmKt`VR5P|E!9I|D!8T
z{;!+<?7v>f%Kzd9RsY$=1O78|Y5!+nkpQn>XXaP_&&+T2U)UrLJdVY{s`j4&G#<xk
z@}EZ`_P<`ptpDPsHQ==#ptdWMeA<6SzZw69?7IFlY8C%yv1s|Pm$2o(f5YkjtPV5&
zGaC2&XR)04pWkoce=g^_|Jke;{x`@y^MCS|&;R$H`29bq_3nS|!~_2og4X;O_nY&d
zO~2|tc<mZ!uYz>ce+Fq#|H>CU4#*(j|6ku{;s3y#qyP2Y=ls`j>iI8hnDd`i%KSeA
z7id0-`#)qag7AMv4rxf7fYKFc?GvZze_7kg{{k90{~7o^|1$`>{bvx3_%ChS_uo2U
z)qiHt_z-A4vO&ZD<eu~Y1#D*hXV9qm&!AZaUQ@;IHu*oF`{e)fvFraU$L{>EnSAVj
z>ykJBd99cK=e3*jU({y$e+kcN|Ak$e{xitN{%4R31J^qYpz%LYy5+O|&&2Qb-!gpB
ze=(hg{|xNT{~1_~AnU?F`<}r2kwEj?pg9<jKls6WDnR>-7(nGJXfB=0`ac7w<9|jz
zum9ZgY5(PHC;rdty7XV%toc6!s2wXE@n6=V`@eVb?*9x*6_9XL$^OrvlJ}p_q2)iP
zdF_7&)$;!g`i=j&tf&1CZ@%)MLABvOgKFM?M%AqUjPgnUg`La)vnYV-R?wOc(0nRn
z{*Hmm>_4lp&wp*NN&h*7Kzo<e!F!(|`#^Xh;SQb;2F>Gf{%2qS%_o8813>F-B>yw8
zDEw#UHUBTHnf71TbJBm?_%;6{%1{3H&f58(K{Oh&zC_gLKd)x?e?I-P{|wS`;C2&u
z{6aqAKd%*NJ!j^B2KnUwjB1(xnbnK`t4A#U&!CX;pFuhbT(>Yt1pa4J4gW7>o$(*M
z))Q2>g4P~_#%I~}|FcVa{uedM`_IU33`rZHH8SA2Y><1|pnDZS?g!0Bg4W4E{lF;l
zpMg#GKZl~re?hIZ|3Zpc|2f2x|7*F=_^;yB@t=X$6|$EJR9A!AQzD?U*84w$IB4!V
z;6G>`506R4e-`Cv$eK*h8c>O_|IEtqkntNapZ|=~pgkAv;I(mr7ODR^Ky?kbCA3ej
z^`C)N{Xe^$&3`s=3-DSt@cJIG+d*yxxgF$g(A+O*?i!SiK;j@jfZ|2~GPeQB3(T7T
z8CdlGGq4)}7tl-j&n_DTnac#Vxk2N=eAeK3VQ{+x)P5Cl1JA{?DhK^%lmyModqUP)
zf!gLEInX$nkP~FR5GcF_ZU6IX$Ng7w?fTCl5&WMK6!xs3H6e2U88~Di<qT*I0VsWd
z*ARfxJIKu-x5F^VKj?md<_A#y463I=>)JTA|AY2%fcNUK>q6Qgpf(3+oh2yVL3IYG
z{Q>Gr2-ri`27qV~AA~`2AT=PhAU#~h|Ct2M{|g$#|2K|U_+Q?s@jsU;XrGombZ!N-
z#|PvNP`HBJhwOIH+&c_|`~$+EI02~v`3JPt0JLrfv<6M+KLfJ}#7xjy4$!^~Q2ouS
z3~7h3Y5Zqk*MzKb;smXQ0=1>|A?wJw^!_t|FehlAl@3G=NG&_4oL2eIz^e40kwfc0
wyNv69W<K-(jGUnLG@x}O(6s`LAh&?r1`BJLn;HHyGlAH{coEd7*JvIB06y>DG5`Po

literal 0
HcmV?d00001

diff --git a/who-am-i/static/index.html b/who-am-i/static/index.html
new file mode 100644
index 0000000..7e0182e
--- /dev/null
+++ b/who-am-i/static/index.html
@@ -0,0 +1,53 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <title>Who-am-i documentation</title>
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <meta name="description" content="API Documentation who-am-i, a read-only atproto identity verifier" />
+    <style>
+      .custom-header {
+        height: 42px;
+        background-color: #221828;
+        box-shadow: inset 0 -1px 0 var(--scalar-border-color);
+        color: var(--scalar-color-1);
+        font-size: var(--scalar-font-size-3);
+        font-family: 'Iowan Old Style', 'Palatino Linotype', 'URW Palladio L', P052, serif;
+        padding: 0 18px;
+        justify-content: space-between;
+      }
+      .custom-header,
+      .custom-header nav {
+        display: flex;
+        align-items: center;
+        gap: 18px;
+      }
+      .custom-header a:hover {
+        color: var(--scalar-color-2);
+      }
+    </style>
+  </head>
+  <body>
+    <header class="custom-header scalar-app">
+      <p>
+        <a href="https://ufos.microcosm.blue">Launch who-am-i [todo]</a>
+      </p>
+      <nav>
+        <b>a <a href="https://microcosm.blue">microcosm</a> project</b>
+        <a href="https://bsky.app/profile/microcosm.blue">@microcosm.blue</a>
+        <a href="https://github.com/at-microcosm">github</a>
+      </nav>
+    </header>
+
+    <script id="api-reference" type="application/json" data-url="/openapi"></script>
+
+    <script>
+      var configuration = {
+        theme: 'purple',
+      }
+      document.getElementById('api-reference').dataset.configuration = JSON.stringify(configuration)
+    </script>
+
+    <script src="https://cdn.jsdelivr.net/npm/@scalar/api-reference"></script>
+  </body>
+</html>