Add X OAuth announcement blog

Author: adityaoberai

.optimize-cache.json

@@ -1119,6 +1119,7 @@
   "images\\blog\\why-you-need-to-try-the-new-bun-runtime\\bun-buildtime.png": "69b92a76d4e7935d666da1b010e6606a8b73c009de23e00a891c551fb1d042dd",
   "images\\blog\\why-you-need-to-try-the-new-bun-runtime\\cover.png": "96d6da52011044ed190620d57510a98964bec3f3339712960acead8f2208529a",
   "images\\blog\\why-you-need-to-try-the-new-bun-runtime\\ts-buildtime.png": "f1e53206a80937c86b33f615ba6936a8c10266dc01ba221da4a7c2735e806ae9",
+  "images\\blog\\x-oauth2-appwrite\\cover.png": "1e6bfcc38f758e57a684a3b092bd8500e45353e7dc164af20753882ecbf8373e",
   "images\\brand\\new-brand-grid-desktop.png": "3469b9692f5f8be1a635974c14a3e55c0f311559e499ffe83a145234db93da90",
   "images\\brand\\new-brand-grid-mobile.png": "129543e6f56036bbfd3f0e8e12534b179b3202885f687ab71429f7b6c7e95fd2",
   "images\\brand\\t-shirts.png": "ae53c30bc47e43ac23ffdcd54a90e5bdf7170e04eeb2e7c3f758e771dfd29e1e",

src/routes/blog/post/x-oauth2-appwrite/+page.markdoc

@@ -0,0 +1,155 @@
+---
+layout: post
+title: Announcing X OAuth support in Appwrite Auth
+description: Appwrite now supports X (formerly Twitter) OAuth2 login. Learn how to add it to your app in minutes.
+date: 2026-04-09
+cover: /images/blog/x-oauth2-appwrite/cover.png
+timeToRead: 5
+author: aditya-oberai
+category: announcement, tutorial
+featured: false
+---
+
+We're excited to announce that Appwrite Auth now includes an X OAuth adapter. You can now let users sign in with their X account using Appwrite's built-in OAuth2 support, with no custom backend code required.
+
+X is one of the most widely used social platforms, with hundreds of millions of active users. Adding "Sign in with X" gives your users a fast, familiar way to get started without creating a new account, and gives you a verified identity to work with from day one.
+
+In this guide, we'll walk through what this means for your app, why it matters, and how to set it up.
+
+# Why X OAuth is useful for developers and users
+
+For users, social login removes the friction of registration. There's no new password to create or forget, no verification email to wait for. They click one button, approve access, and they're in.
+
+For developers, social login with Appwrite means you don't have to implement or maintain any OAuth infrastructure yourself. Appwrite handles the redirect, the token exchange, the session creation, and the refresh flow. You call one SDK method. The rest happens server-side.
+
+X in particular is valuable for apps that are social or content-focused. If your users are already on X, letting them authenticate with it creates a natural connection between their X identity and your product. You can also use the access token Appwrite stores to call the X API on their behalf, enabling things like reading their profile, fetching their posts, or building X-connected features.
+
+Appwrite's X adapter also implements **OAuth 2.0 with PKCE** (Proof Key for Code Exchange), which is required by X's API v2 and protects against authorization code interception attacks. This is handled automatically with no extra configuration needed on your end.
+
+# How OAuth2 works in Appwrite
+
+When a user signs in with X, Appwrite manages the entire OAuth2 flow on your behalf:
+
+1. Your app calls an Appwrite SDK method, which returns an authorization URL.
+2. The user is redirected to X's consent screen.
+3. After granting access, X redirects back to Appwrite with an authorization code.
+4. Appwrite exchanges the code for an access token and refresh token with X.
+5. Appwrite redirects the user to your success URL with a `userId` and `secret`.
+6. Your app uses these to create an Appwrite session.
+
+Appwrite's X adapter uses **OAuth 2.0 with PKCE** (Proof Key for Code Exchange), which is required by X's API v2 and adds an extra layer of security by preventing authorization code interception attacks.
+
+# Creating an X Developer app
+
+To connect Appwrite to X, you first need to register an app on the [X Developer Portal](https://console.x.com).
+
+Log in and create a new project, then create a new app inside that project (or use an existing one). Give your app a name that reflects what you're building.
+
+![X Developer Portal - New App](/images/integrations/oauth-x/new-app.png)
+
+Once the app is created, open the app's **Settings** and scroll down to **User authentication settings**. Click **Set up** and configure the following:
+
+- **App permissions**: Select **Read** at a minimum. If your app needs to post or access direct messages, select the appropriate permissions.
+- **Type of App**: Select **Web App, Automated App or Bot**.
+- **Callback URI / Redirect URL**: Temporarily add `https://temporary-endpoint.com/`. You'll replace this with the real URI from Appwrite in the next step.
+
+![X OAuth2 user authentication settings](/images/integrations/oauth-x/oauth2.png)
+
+After saving, X will display a **Client ID** and **Client Secret**. Save both. The Client Secret is only shown once, so copy it somewhere safe before closing the page.
+
+# Enabling X as a provider in Appwrite
+
+Head to your [Appwrite Console](https://cloud.appwrite.io/) and open your project. Navigate to **Auth** > **Settings**, scroll to **OAuth2 Providers**, and click on **X**.
+
+![X OAuth2 provider in Appwrite](/images/integrations/oauth-x/provider.png)
+
+Enable the provider and paste in your **Client ID** and **Client Secret**. Appwrite will display a **Redirect URI**. Copy it and go back to your X app's **User authentication settings** to replace the temporary callback URL with this value.
+
+Save the changes in both the X Developer Portal and Appwrite.
+
+# Logging in from your frontend
+
+With the provider configured, you can trigger X login using the Appwrite SDK. Here's an example using the JavaScript SDK:
+
+```js
+import { Client, Account, OAuthProvider } from 'appwrite';
+
+const client = new Client()
+    .setEndpoint('https://<REGION>.cloud.appwrite.io/v1')
+    .setProject('<PROJECT_ID>');
+
+const account = new Account(client);
+
+const authUrl = await account.createOAuth2Token({
+    provider: OAuthProvider.X,
+    success: 'https://your-app.com/auth/callback',
+    failure: 'https://your-app.com/auth/login?error=oauth'
+});
+
+window.location.href = authUrl;
+```
+
+Then on your callback page, read the `userId` and `secret` from the query string and create the session manually:
+
+```js
+const params = new URLSearchParams(window.location.search);
+const userId = params.get('userId');
+const secret = params.get('secret');
+
+if (userId && secret) {
+    await account.createSession({ userId, secret });
+    window.location.href = '/dashboard';
+}
+```
+
+# Accessing user data
+
+After login, you can fetch the authenticated user's profile from Appwrite:
+
+```js
+const user = await account.get();
+
+console.log(user.name);   // display name from X
+console.log(user.email);  // email from X (if granted)
+```
+
+If you need the X access token to call the X API directly, retrieve it from the user's identities:
+
+```js
+const { identities } = await account.listIdentities();
+const xIdentity = identities.find(i => i.provider === 'x');
+
+console.log(xIdentity.providerAccessToken); // X OAuth2 access token
+```
+
+You can use this access token to make requests to the [X API v2](https://docs.x.com) on behalf of the user.
+
+# Refreshing the access token
+
+X access tokens expire. When you need a fresh token, call `updateSession` to silently renew it using the stored refresh token:
+
+```js
+await account.updateSession({ sessionId: 'current' });
+
+const { identities } = await account.listIdentities();
+const xIdentity = identities.find(i => i.provider === 'x');
+
+console.log(xIdentity.providerAccessToken); // fresh token
+```
+
+This renews the X access token without interrupting the user's Appwrite session.
+
+# Final thoughts
+
+Adding X login to your app with Appwrite comes down to three things: registering an app on the X Developer Portal, configuring the provider in the Appwrite Console, and calling one SDK method. Appwrite handles the PKCE flow, token exchange, and session management for you.
+
+If you have questions or run into issues, the [Appwrite Discord server](https://appwrite.io/discord) is the best place to get help.
+
+# Further reading
+
+- [X OAuth integration guide](/integrations/oauth-x)
+- [Appwrite Auth OAuth2 docs](/docs/products/auth/oauth2)
+- [X Developer Portal](https://console.x.com)
+- [X API OAuth2 documentation](https://docs.x.com/fundamentals/authentication/oauth-2-0/overview)
+- [Understanding OAuth and OpenID Connect](/blog/post/oauth-openid)
+- [Appwrite Auth API reference](/docs/references/cloud/client-web/account)

src/routes/integrations/oauth-x/+page.markdoc

@@ -11,7 +11,7 @@ category: auth
 product:
     avatar: '/images/integrations/avatars/x.png'
     vendor: X
-    description: 'X (formerly Twitter) is a social media platform where users can post short messages, follow others, and engage in real-time conversations on topics ranging from news and politics to entertainment and technology.'
+    description: 'X is a social media platform where users can post short messages, follow others, and engage in real-time conversations on topics ranging from news and politics to entertainment and technology.'
 platform:
     - 'Cloud'
 images:
@@ -63,7 +63,7 @@ Follow the [OAuth 2 login](/docs/products/auth/oauth2#init) flow to test your pr
 
 If you would like to learn more about X and Appwrite Auth, we have some resources that you should visit:
 
-- [X Developer Portal](https://developer.twitter.com/en/portal/dashboard)
+- [X Developer Portal](https://console.x.com)
 - [Implement OAuth login in your apps using Appwrite Auth](/docs/products/auth/oauth2)
 - [Understanding OAuth and OpenID Connect](/blog/post/oauth-openid)
 - [Appwrite Auth API reference](/docs/references/cloud/client-web/account)