atproto-oauth-client-attester
OAuth client attestation web service for Apple platform atproto apps
apple atproto oauth
Star
Fork
Watch
1 1 0
Files
app
src
.gitignore
atproto-oauth-client-attester.cabal
cabal.project
CHANGELOG.md
config.dhall.example
LICENSE
README.md
README.md

atproto-oauth-client-attester #

A web service that uses Apple's App Attest to validate an atproto client application and issues it a client attestation (oauth-client-attestation+jwt) as defined by OAuth 2.0 Attestation-Based Client Authentication.

Note

atproto does not yet support Attestation-Based Client Authentication, so this is pretty much useless for now.

API #

  • POST /challenge returns a single-use challenge.
  • POST /register-attestation-key verifies an App Attest attestation and stores the attested key for later use.
  • POST /attest-client verifies an App Attest assertion and proof of possession of an instance key, then returns a client attestation bound to that key.

Running #

cp config.dhall.example config.dhall # then edit
cabal run atproto-oauth-client-attester