Lexicon Garden

fyi.opensocial.createAppPassword

Make an app password for the group: what an app that signs in with a handle and a password, such as the Bluesky app, signs in to the group with (com.atproto.server.createSession). It stays the caller's: it stops working once they could no longer make it, and its sessions are listed as theirs among the group's connected apps. Its sessions may use the group's public repo, its blobs and other services, never its spaces, nor get service tokens for the account's own methods or this host's. Requires a role that may write every collection as the group.

Repository @lexicons.opensocial.fyi did:plc:2gqnilpksz2e7faj3bwvo6qc namespace authority
Details · procedure
Kindprocedure
Authorityopensocial.fyi
Indexed
Compare Edit in builder → Fork →

Procedure

procedure · POST

Input

application/json

group

requiredstring · did

The group DID. Every method is served by the group's host and authorized against that group's roles.

name

requiredstring

What it's for, such as the device or app it signs in: unique in the group.

  • maxLength: 64

privileged

boolean

Whether its sessions may also use Bluesky's chat (DMs) as the group.

Output

application/json

createdAt

requiredstring · datetime

name

requiredstring

password

requiredstring

The password, shown this once: the host keeps only its hash.

privileged

requiredboolean

Errors

Forbidden

No description in schema.

InvalidName

No description in schema.

DuplicateName

No description in schema.

TooManyAppPasswords

No description in schema.

Similar lexicons

semantic match

Lexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.

  • com.atproto.server.createAppPassword

    procedure

    Create an App Password.

  • ai.newnal.pdn.server.createAppPassword

    procedure not from the namespace authority

    Create an App Password bound to an OAuth scope. Sessions created from it through com.atproto.server.createSession carry exactly the permissions of that scope, as an OAuth session would. Requires a full-access session.

  • fyi.opensocial.listAppPasswords

    query

    The group's app passwords, never the passwords themselves: every one for whoever has group.configure, and their own for whoever may make them.

  • fyi.opensocial.revokeAppPassword

    procedure

    Revoke one of the group's app passwords, and sign out every app signed in with it. Its maker may revoke their own; anyone else needs group.configure.