diff --git a/oauth.md b/oauth.md index ff4cda2..1c5b80b 100644 --- a/oauth.md +++ b/oauth.md @@ -1,99 +1,26 @@ +## 必要な値 + +pdsに設定する。 + +```env +# Entrywayを明示的に無効化 +PDS_ENTRYWAY_URL= +PDS_ENTRYWAY_DID= + +# OAuth Provider設定 +PDS_OAUTH_ISSUER=https://syu.is +PDS_OAUTH_PROVIDER_ENABLED=true + +# その他の必須設定 +PDS_HOSTNAME=syu.is +PDS_SERVICE_DID=did:web:syu.is +PDS_PUBLIC_URL=https://syu.is +``` + ```sh $ curl -s https://syu.is/.well-known/oauth-authorization-server |jq . ``` -```sh -{ - "issuer": "https://syu.is", - "request_parameter_supported": true, - "request_uri_parameter_supported": true, - "require_request_uri_registration": true, - "scopes_supported": [ - "atproto", - "transition:email", - "transition:generic", - "transition:chat.bsky" - ], - "subject_types_supported": [ - "public" - ], - "response_types_supported": [ - "code" - ], - "response_modes_supported": [ - "query", - "fragment", - "form_post" - ], - "grant_types_supported": [ - "authorization_code", - "refresh_token" - ], - "code_challenge_methods_supported": [ - "S256" - ], - "ui_locales_supported": [ - "en-US" - ], - "display_values_supported": [ - "page", - "popup", - "touch" - ], - "request_object_signing_alg_values_supported": [ - "RS256", - "RS384", - "RS512", - "PS256", - "PS384", - "PS512", - "ES256", - "ES256K", - "ES384", - "ES512", - "none" - ], - "authorization_response_iss_parameter_supported": true, - "request_object_encryption_alg_values_supported": [], - "request_object_encryption_enc_values_supported": [], - "jwks_uri": "https://syu.is/oauth/jwks", - "authorization_endpoint": "https://syu.is/oauth/authorize", - "token_endpoint": "https://syu.is/oauth/token", - "token_endpoint_auth_methods_supported": [ - "none", - "private_key_jwt" - ], - "token_endpoint_auth_signing_alg_values_supported": [ - "RS256", - "RS384", - "RS512", - "PS256", - "PS384", - "PS512", - "ES256", - "ES256K", - "ES384", - "ES512" - ], - "revocation_endpoint": "https://syu.is/oauth/revoke", - "introspection_endpoint": "https://syu.is/oauth/introspect", - "pushed_authorization_request_endpoint": "https://syu.is/oauth/par", - "require_pushed_authorization_requests": true, - "dpop_signing_alg_values_supported": [ - "RS256", - "RS384", - "RS512", - "PS256", - "PS384", - "PS512", - "ES256", - "ES256K", - "ES384", - "ES512" - ], - "protected_resources": [ - "https://syu.is" - ], - "client_id_metadata_document_supported": true -} -``` \ No newline at end of file +[@atproto/oauth-provider](https://github.com/bluesky-social/atproto/tree/main/packages/oauth/oauth-provider)が本体となる。 + +> https://syu.is/@atproto/oauth-provider/~assets/file.css