Untitled attachment

Notices where this attachment appears

1. Embed this notice
   Gavin Chait; (gavinchait@wandering.shop)'s status on Wednesday, 05-Jun-2024 20:25:11 JST Gavin Chait;

   Hi #ActivityPub developers, @helge, @smallcircles, @dansup, @patak, @cheeaun

   I'd appreciate help with understanding oauth2 for developing a custom server that might work with Mastodon apps like @elk & @phanpy.

   I've read how Mastodon implements getting user tokens (https://docs-p.joinmastodon.org/client/authorized/) but don't understand its security, lifespan or refresh requirement.

   Is it what it looks like? A perpetual token not stored as JWT? The app provides the same token indefinitely as bearer auth in requests?

2. Embed this notice
   Albert ARIBAUD ✎ (aaribaud@mastodon.art)'s status on Saturday, 15-Jul-2023 16:26:06 JST Albert ARIBAUD ✎

   in reply to

   @LuciaG Hello !

   It looks like the link requires a Google account.

   I, for one, welcome our ghost overlords... but won't be able to access the link because of this requirement.

   Is there another way to read your story?