This is only beginning of the issues with bsky api, to create clickable links in the post you need to manually provide indices. To create link embeds you need to manually provide all the details, including uploading the thumbnail.

Best APIs I've used just give you a non expiring key and you can curl the requests straight away. The rest always require you to dance with extra api calls to generate temporary tokens for no good reason. And everyone always does it in slightly different ways.

Why do people always design API (@bsky.app in this case) auth in such weird ways, just give me an api token. All this means is that I'm going to store the password to login every time.

👋