Kuba Suder 🇵🇱🇺🇦
banner
mackuba.eu
Kuba Suder 🇵🇱🇺🇦
@mackuba.eu
Indie Mac/iOS & web developer • Currently building random fun things on ATProto using Ruby and occasionally JavaScript → https://blue.mackuba.eu

"mostly-happy-but-occasionally-grumpy Ruby guy" - Why

🌍 Kraków, Poland 🇵🇱🇪🇺 • ✝️
Reposted by Kuba Suder 🇵🇱🇺🇦
how much more explicit does it need to get that X is functionally equivalent to state power now?

bsky.app/profile/robi...
January 13, 2026 at 12:45 PM
See the initial description here: bugs.ruby-lang.org/issues/21824
Bug #21824: performance regression in regexp matching after update to 4.0 - Ruby - Ruby Issue Tracking System
Redmine
bugs.ruby-lang.org
January 13, 2026 at 9:54 AM
What's the discourse?
January 13, 2026 at 4:30 AM
And now thanks to me, the name "Slackware" will be embedded in the Ruby source code 🙃
January 13, 2026 at 4:13 AM
Yup app passwords
January 13, 2026 at 4:04 AM
If the token is not JWT, is there any way to tell if it's expired or not before just trying to use it?
January 13, 2026 at 4:04 AM
Yeah good point
January 13, 2026 at 4:03 AM
So here the access tokens are for 2h and refresh tokens for 3 months, and when you refresh (likely after those 2 hours) you get both replaced and the refresh token is again for 3 months from now, moved ahead. (IIRC in OAuth the refresh token has a permanent expiry time that isn't pushed ahead)
January 13, 2026 at 3:03 AM
Also, it's possible to decode the tokens from base64 and then from JSON, and look at the expiry timestamps there: (this is issue time + expiry time for AT & RT before and after refresh, notice that everything is offset by 40s in the second section)
January 13, 2026 at 3:01 AM
🙇🏻‍♂️
January 13, 2026 at 2:54 AM
For app password, IIRC access token is 2h and refresh token is "very very long"
January 13, 2026 at 2:50 AM
I *think* this should be more or less that, unless it was updated again later: docs.bsky.app/blog/oauth-i...
OAuth Improvements | Bluesky
We've been making improvements to the end-user and developer experiences with atproto OAuth, and wanted to share some updates.
docs.bsky.app
January 13, 2026 at 2:48 AM
And it's the other way around, access token is short, refresh token is longer lived
January 13, 2026 at 2:46 AM
I think the answer is very different for OAuth vs. app passwords, might be why you're seeing different answers
January 13, 2026 at 2:46 AM
Why is it still negative??
January 13, 2026 at 1:02 AM
❤️
January 13, 2026 at 12:36 AM
Poor guy, what did he get himself into…
January 12, 2026 at 11:25 PM
I found your guy too
January 12, 2026 at 11:15 PM
₿money
January 12, 2026 at 11:04 PM
It could be painful tbh
January 12, 2026 at 10:44 PM