Bluesky is currently pushing out support for the OAuth scope system. Right now only the scopes themselves are available, without the ability to define permission sets yet as well as a lack of proper documentation. As such, it is not recommended for production and only for experimentation. I've pushed a commit that limits our scopes to our lexicon data, however in regards to XRPC permissions the system for defining services via DIDs needs to be implemented in the appview before we switch to using scopes for authentication in the frontend.
Checklist#
- Switch from
transition:genericto required scopes for data modification (repo, blob) - Figure out how to declare a service endpoint for the appview
- Use the appview for XRPC calls in the frontend
DID service proxying is now in place.