<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[For the #ActivityPubAPI, we need a profile of OAuth to use for accessing the actor&#x27;s data.]]></title><description><![CDATA[<p>For the <a href="https://cosocial.ca/tags/ActivityPubAPI" rel="tag">#<span>ActivityPubAPI</span></a>, we need a profile of OAuth to use for accessing the actor's data. There's a suggested flow here: </p><p><a href="https://github.com/swicg/activitypub-api/blob/main/OAuth%202.0%20for%20ActivityPub%20Activity%20Diagram.png" rel="nofollow noopener"><span>https://</span><span>github.com/swicg/activitypub-a</span><span>pi/blob/main/OAuth%202.0%20for%20ActivityPub%20Activity%20Diagram.png</span></a></p><p>There's an example client here:</p><p><div class="card col-md-9 col-lg-6 position-relative link-preview p-0">

<div class="card-body">
<h5 class="card-title">
<a class="text-decoration-none" href="https://swicg.github.io/activitypub-api/examples/oauth/index.html">
ActivityPub API OAuth demo
</a>
</h5>
<p class="card-text line-clamp-3"></p>
</div>
<a href="https://swicg.github.io/activitypub-api/examples/oauth/index.html" class="card-footer text-body-secondary small d-flex gap-2 align-items-center lh-2">



<img src="https://swicg.github.io/favicon.ico" alt="favicon" class="not-responsive overflow-hiddden" style="max-width: 21px; max-height: 21px;" onerror="this.remove()"/>



<p class="d-inline-block text-truncate mb-0"> <span class="text-secondary">(swicg.github.io)</span></p>
</a>
</div></p><p>It tries discovery via RFC 8414 or getting the endpoints straight from the actor.</p><p>It then provisions a client ID using CIMD, FEP d8c2, or DCR (in that order).</p><p>It then tries to do an authorization code flow.</p><p>I'm interested in seeing it tested with more ActivityPub API servers.</p><p><a href="https://cosocial.ca/tags/ActivityPub" rel="tag">#<span>ActivityPub</span></a></p>]]></description><link>https://citiverse.it/topic/92377f2f-bc8e-4e4d-9856-679769254fcc/for-the-activitypubapi-we-need-a-profile-of-oauth-to-use-for-accessing-the-actor-s-data.</link><generator>RSS for Node</generator><lastBuildDate>Sun, 24 May 2026 12:08:49 GMT</lastBuildDate><atom:link href="https://citiverse.it/topic/92377f2f-bc8e-4e4d-9856-679769254fcc.rss" rel="self" type="application/rss+xml"/><pubDate>Sun, 17 May 2026 20:01:03 GMT</pubDate><ttl>60</ttl></channel></rss>