atproto/browser/oauth/resource
Async mirror of atproto/oauth/resource.gleam: wraps a Client so every
request carries Authorization: DPoP <token> and a proof bound to its
method, URL, and access-token hash, with the server-nonce retry. Token
refresh is the caller’s job (it owns session persistence); this module
only signs.
A thin async wrapper over the shared effect kernel in
atproto_core/oauth/resource: it computes the
access-token hash (ath) once with WebCrypto and runs the per-request
signing effect against the base client.
Values
pub fn client(
base: xrpc.Client,
access_token access_token: String,
dpop_key dpop_key: dpop.DpopKey,
) -> promise.Promise(xrpc.Client)
A client that signs every request against the given DPoP-bound access token.