Stateless auth proxy that converts AT Protocol native apps from public to confidential OAuth clients. Deploy once, get 180-day refresh tokens instead of 24-hour ones.
1FROM golang:1.26 AS builder
2WORKDIR /src
3COPY go.mod go.sum ./
4RUN go mod download
5COPY . .
6RUN CGO_ENABLED=0 GOOS=linux go build -o /out/atproto-auth-proxy .
7
8FROM gcr.io/distroless/base-debian12
9COPY --from=builder /out/atproto-auth-proxy /app/atproto-auth-proxy
10EXPOSE 8080
11ENTRYPOINT ["/app/atproto-auth-proxy"]