docs: OAuth server section and Sign in with your product guide#3096
Draft
atharvadeosthale wants to merge 14 commits into
Draft
docs: OAuth server section and Sign in with your product guide#3096atharvadeosthale wants to merge 14 commits into
atharvadeosthale wants to merge 14 commits into
Conversation
Appwrite WebsiteProject ID: Website (appwrite/website)Project ID: Tip Preview deployments create instant URLs for every branch and commit |
- New 7-step tutorial: define scopes, per-scope consent, JWKS-validated resource server, and a consumer exercised against it end to end - Scopes page: authorize examples for requesting scopes, and a rich authorization requests (RFC 9396) section with configuration, request, consent, and enforcement - Trim the quick start discovery snippet and overview framing; split client types into bullets
… tasks.write) Aligns the custom-scopes tutorial and announcement blog with the dot notation used by the scopes reference and device-flow pages. Retakes the console and Vantage screenshots that displayed the old names.
Mermaid-rendered flow diagrams (light and dark) placed after the concept heading on the overview, authorization, clients, tokens, scopes, and device-flow pages.
…ate approve with session cookie
Moves docs/partners/oauth-server to docs/products/auth/oauth-server, rewrites all internal links, links it from the Auth sidebar with a new badge until 30 Aug, and resets the section layout to avoid nesting inside the Auth layout.
Adds RFC 9207 to the standards table (verified in cloud main), applies the reviewed PAR wording, removes the settings screenshot from the overview, reworks the clients diagram to contrast the confidential and public token exchange flows, and redraws the authorization and device-flow diagrams as flowcharts with the second device called out.
Session secret placeholder in cookie examples, four components on the overview, marketplace wording, approve/reject terminology, discovery URL purpose, HTTPS redirect URI rule with https example URLs, public client pointer, type param in create examples, full-parameter update examples verified live, state removed from the quick start, approve section restructured as prose with devtools cookie instructions, and a provider docs and developer platform note in next steps.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
OAuth server documentation
Adds a new OAuth server section under Partners, covering Appwrite's OAuth 2.1 / OpenID Connect provider capability: turning a project into an OAuth provider so third-party apps can "Sign in with your product".
Reference and concept pages
Under
docs/partners/oauth-server:Code samples cover all supported client and server SDKs alongside raw HTTP.
Guide: Sign in with your product
A step-by-step tutorial that builds a complete "Sign in with your product" experience end to end with TanStack Start: a provider that hosts the consent screen and a consumer that adds the sign-in button and exchanges the code for tokens server-side.
The finished code lives in a companion repository: appwrite-community/oauth-guide-taskflow.
Notes
Opened as a draft against
projects-api.