atproto_identity

AT Protocol identity resolution for Dart

Resolves an AT Protocol handle or DID to its DID document, PDS origin and signing key, and verifies the service-auth tokens arriving at a feed generator or an AppView.

ActivePersonalOpen source

Record

Kind
Package
Role
Author
Started
July 2026
Updated
August 2026
Licence
BSD-3-Clause
pub
atproto_identity · atprotodart.com

Technology4

Evidence10 sources

The pubspec describes the package as AT Protocol identity resolution — handle and DID — plus inbound service-auth JWT verification for Dart and Fluttersourcegithub.com The README documents HttpIdentityResolver resolving a handle or a did:plc/did:web identifier to its DID, PDS origin, handle and #atproto signing key, and verifying a handle bidirectionally against the DID document's alsoKnownAsdocsgithub.com The README documents verifyServiceAuth, which checks an inbound AppView service-auth JWT taken from a bearer token and returns the issuer DID, validating aud, exp, iat, nbf, lxm and iss and the ES256K or P-256 signature through did_plcdocsgithub.com The README states that did:web resolution is hardened against SSRF and denial of service — localhost and reserved IP literals rejected by default, an optional host allowlist, a per-request timeout, a 512 KiB response cap, and at most five manually followed redirects each re-checked against the same host policydocsgithub.com The CHANGELOG records v0.2.0 as bounding the accepted publicKeyMultibase length, closing an unauthenticated quadratic-CPU denial of service in base58btc decodingdocsgithub.com The CHANGELOG records v0.3.0 as exporting ensureNonReservedHost, the same host policy the resolver applies, so that atproto_oauth can hold the authorisation server it takes from PDS metadata to the same bardocsgithub.com Its pubspec declares http and did_plc, and no other atproto.dart packagesourcegithub.com The atproto_oauth package's pubspec.yaml declares atproto_identity among its dependenciessourcegithub.com pub.dev lists five supported platforms — Android, iOS, Linux, macOS and Windowspackagepub.dev Its LICENSE is a full copy of the BSD-3-Clause text rather than a relative pointer to the monorepo's root LICENSElicencegithub.com

Links3

Package pub.dev Repo github.com Docs atprotodart.com

Relations4 edges

atproto.dartPart ofDart SDK monorepo for AT Protocol and Bluesky did_plcDepends onAn independent DID PLC Directory client atproto_oauthUsed byOAuth 2.0 with DPoP for the AT Protocol feed_generatorUsed byA Bluesky custom feed generator template