Skip to content

Commit 2a295f1

Browse files
AshexAshex
committed
Drop hyperboards permission set from demo
1 parent c7b7771 commit 2a295f1

6 files changed

Lines changed: 15 additions & 15 deletions

File tree

‎.agents/skills/epds-login/SKILL.md‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -62,7 +62,7 @@ are mutually exclusive:
6262
"client_id": "https://yourapp.example.com/client-metadata.json",
6363
"client_name": "Your App",
6464
"redirect_uris": ["https://yourapp.example.com/api/oauth/callback"],
65-
"scope": "atproto include:org.hypercerts.authWrite include:org.hyperboards.authWrite include:app.certified.authWrite",
65+
"scope": "atproto include:org.hypercerts.authWrite include:app.certified.authWrite",
6666
"grant_types": ["authorization_code", "refresh_token"],
6767
"response_types": ["code"],
6868
"token_endpoint_auth_method": "private_key_jwt",
@@ -74,9 +74,9 @@ are mutually exclusive:
7474

7575
> **On the `scope` value:** `atproto` is mandatory and must be listed first; the
7676
> remaining entries request only the permissions your app needs. The examples here
77-
> reference three hypercerts specific permission sets via the `include:` prefix —
78-
> `include:org.hypercerts.authWrite`, `include:org.hyperboards.authWrite`, and
79-
> `include:app.certified.authWrite`; substitute the permission sets your own app defines. A
77+
> reference two hypercerts specific permission sets via the `include:` prefix —
78+
> `include:org.hypercerts.authWrite` and `include:app.certified.authWrite`;
79+
> substitute the permission sets your own app defines. A
8080
> permission set that bundles `rpc:` service calls also needs an
8181
> `?aud=<service-did>` parameter (with `#` percent-encoded as `%23`); these are
8282
> write-only sets, so no `aud` is required. Avoid the legacy `transition:generic`
@@ -101,7 +101,7 @@ const client = new NodeOAuthClient({
101101
client_id: 'https://yourapp.example.com/client-metadata.json',
102102
client_name: 'Your App',
103103
redirect_uris: ['https://yourapp.example.com/api/oauth/callback'],
104-
scope: 'atproto include:org.hypercerts.authWrite include:org.hyperboards.authWrite include:app.certified.authWrite',
104+
scope: 'atproto include:org.hypercerts.authWrite include:app.certified.authWrite',
105105
grant_types: ['authorization_code', 'refresh_token'],
106106
response_types: ['code'],
107107
token_endpoint_auth_method: 'private_key_jwt',

‎.agents/skills/epds-login/references/client-metadata.md‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -53,7 +53,7 @@ mutually exclusive — the PDS rejects metadata that has both.
5353
"client_id": "https://yourapp.example.com/client-metadata.json",
5454
"client_name": "Your App Name",
5555
"redirect_uris": ["https://yourapp.example.com/api/oauth/callback"],
56-
"scope": "atproto include:org.hypercerts.authWrite include:org.hyperboards.authWrite include:app.certified.authWrite",
56+
"scope": "atproto include:org.hypercerts.authWrite include:app.certified.authWrite",
5757
"grant_types": ["authorization_code", "refresh_token"],
5858
"response_types": ["code"],
5959
"token_endpoint_auth_method": "private_key_jwt",
@@ -70,7 +70,7 @@ mutually exclusive — the PDS rejects metadata that has both.
7070
"client_id": "https://yourapp.example.com/client-metadata.json",
7171
"client_name": "Your App Name",
7272
"redirect_uris": ["https://yourapp.example.com/api/oauth/callback"],
73-
"scope": "atproto include:org.hypercerts.authWrite include:org.hyperboards.authWrite include:app.certified.authWrite",
73+
"scope": "atproto include:org.hypercerts.authWrite include:app.certified.authWrite",
7474
"grant_types": ["authorization_code", "refresh_token"],
7575
"response_types": ["code"],
7676
"token_endpoint_auth_method": "private_key_jwt",
@@ -104,7 +104,7 @@ key generation and serving details.
104104
| `client_id` | Yes | Must match the URL where this file is hosted |
105105
| `client_name` | Yes | Shown on the login page and in OTP emails |
106106
| `redirect_uris` | Yes | Array of allowed callback URLs after login |
107-
| `scope` | Yes | Space-separated list. `atproto` is required and must come first; add the scopes/permission sets your app needs (the examples use `include:org.hypercerts.authWrite include:org.hyperboards.authWrite include:app.certified.authWrite`). Avoid the legacy `transition:generic` catch-all — see the `atproto-oauth` skill. |
107+
| `scope` | Yes | Space-separated list. `atproto` is required and must come first; add the scopes/permission sets your app needs (the examples use `include:org.hypercerts.authWrite include:app.certified.authWrite`). Avoid the legacy `transition:generic` catch-all — see the `atproto-oauth` skill. |
108108
| `grant_types` | Yes | Always `["authorization_code", "refresh_token"]` |
109109
| `response_types` | Yes | Always `["code"]` |
110110
| `token_endpoint_auth_method` | Yes | `"private_key_jwt"` (recommended) or `"none"` — see above |
@@ -267,7 +267,7 @@ above for the trade-offs.
267267
"client_id": "https://yourapp.example.com/client-metadata.json",
268268
"client_name": "Your App Name",
269269
"redirect_uris": ["https://yourapp.example.com/api/oauth/callback"],
270-
"scope": "atproto include:org.hypercerts.authWrite include:org.hyperboards.authWrite include:app.certified.authWrite",
270+
"scope": "atproto include:org.hypercerts.authWrite include:app.certified.authWrite",
271271
"grant_types": ["authorization_code", "refresh_token"],
272272
"response_types": ["code"],
273273
"token_endpoint_auth_method": "none",

‎.agents/skills/epds-login/references/flows.md‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -156,7 +156,7 @@ export async function handleLogin(email: string) {
156156
client_id: CLIENT_ID,
157157
redirect_uri: REDIRECT_URI,
158158
response_type: 'code',
159-
scope: 'atproto include:org.hypercerts.authWrite include:org.hyperboards.authWrite include:app.certified.authWrite',
159+
scope: 'atproto include:org.hypercerts.authWrite include:app.certified.authWrite',
160160
state,
161161
code_challenge: codeChallenge,
162162
code_challenge_method: 'S256',

‎docs/tutorial.md‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -190,7 +190,7 @@ The file must be served with `Content-Type: application/json`:
190190
"client_uri": "https://yourapp.example.com",
191191
"logo_uri": "https://yourapp.example.com/logo.png",
192192
"redirect_uris": ["https://yourapp.example.com/api/oauth/callback"],
193-
"scope": "atproto transition:generic",
193+
"scope": "atproto include:org.hypercerts.authWrite include:app.certified.authWrite",
194194
"grant_types": ["authorization_code", "refresh_token"],
195195
"response_types": ["code"],
196196
"token_endpoint_auth_method": "private_key_jwt",
@@ -674,7 +674,7 @@ const client = new NodeOAuthClient({
674674
client_id: 'https://yourapp.example.com/client-metadata.json',
675675
client_name: 'Your App',
676676
redirect_uris: ['https://yourapp.example.com/api/oauth/callback'],
677-
scope: 'atproto transition:generic',
677+
scope: 'atproto include:org.hypercerts.authWrite include:app.certified.authWrite',
678678
grant_types: ['authorization_code', 'refresh_token'],
679679
response_types: ['code'],
680680
token_endpoint_auth_method: 'private_key_jwt',
@@ -772,7 +772,7 @@ const parBody = new URLSearchParams({
772772
client_id: clientId,
773773
redirect_uri: redirectUri,
774774
response_type: 'code',
775-
scope: 'atproto transition:generic',
775+
scope: 'atproto include:org.hypercerts.authWrite include:app.certified.authWrite',
776776
state,
777777
code_challenge: codeChallenge,
778778
code_challenge_method: 'S256',

‎packages/demo/src/app/api/oauth/login/route.ts‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -150,7 +150,7 @@ export async function GET(request: Request) {
150150
client_id: clientId,
151151
redirect_uri: redirectUri,
152152
response_type: 'code',
153-
scope: 'atproto include:org.hypercerts.authWrite include:org.hyperboards.authWrite include:app.certified.authWrite',
153+
scope: 'atproto include:org.hypercerts.authWrite include:app.certified.authWrite',
154154
state,
155155
code_challenge: codeChallenge,
156156
code_challenge_method: 'S256',

‎packages/demo/src/app/client-metadata.json/route.ts‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -50,7 +50,7 @@ export async function GET() {
5050
client_uri: baseUrl,
5151
logo_uri: `${baseUrl}/certified-logo.png`,
5252
redirect_uris: [`${baseUrl}/api/oauth/callback`],
53-
scope: 'atproto include:org.hypercerts.authWrite include:org.hyperboards.authWrite include:app.certified.authWrite',
53+
scope: 'atproto include:org.hypercerts.authWrite include:app.certified.authWrite',
5454
grant_types: ['authorization_code', 'refresh_token'],
5555
response_types: ['code'],
5656
...(isConfidential

0 commit comments

Comments
 (0)