linji.at / app0
maybe a prototype, maybe it will go in production
Star
Fork 0
Watch

fix(oauth): request rpc scope for external service-auth minting master

bsky refuses getServiceAuth unless the session token holds the matching rpc scope (403 ScopeMissingError on bootstrap step 2). externalScope() now yields 'rpc:com.atproto.server.createAccount?aud=<space did>' alone; the PAR leg composes 'atproto <rpc>' at the call site and the client metadata merges it after the linji scope, so the 'atproto' token is never declared twice (bsky rejects duplicate scopes in client metadata). space host DID resolved up front in serve().

Author iacore Date Commit 3da17598 Parent 07d36d55
+43 -17
2 changed files