How are client secrets and IDs handled?

The skill enforces the use of Rails credentials (Rails.application.credentials) rather than environment variables, ensuring that sensitive IdP integration details are stored securely.

Does this skill support JWT tokens?

This skill utilizes a database-backed session model with signed cookies rather than JWTs. This approach provides better audit trails and the ability to track user session history effectively.

Can I use Devise with the afal-auth skill?

No, this skill is specifically designed to use OmniAuth with the AFAL IdP, following AFAL's internal security standards which prioritize centralized identity management over local password systems like Devise.

How does it handle authorization and roles?

Roles are provided by the AFAL IdP during the authentication callback and stored in the application's User model, where they can be used with authorization gems like Pundit.

AFAL Rails Authentication

Name: AFAL Rails Authentication
Author: Grupo-AFAL

byGrupo-AFAL

•

Seguridad y Pruebas

Implements secure OmniAuth-based authentication for Ruby on Rails applications using the AFAL Identity Provider.

The afal-auth skill provides a standardized framework for integrating Rails applications with the AFAL Identity Provider (id.afal.mx). It enforces secure, session-based authentication using a database-backed model inspired by the 37signals pattern, ensuring full auditability of user logins including IP addresses and user agents. By automating the setup of OmniAuth strategies, user mapping, and centralized authentication concerns, it allows developers to implement robust sign-in flows while maintaining strict compliance with AFAL's security standards and avoiding the complexities of third-party libraries like Devise.

Características Principales

01Automated OmniAuth strategy configuration for AFAL IdP

021 GitHub stars

03Opt-out controller authentication patterns for secure-by-default access

04Standardized User model mapping for IdP-provided roles and organizations

05Database-backed session management with IP and User-Agent tracking

06Pre-configured Minitest helpers for rapid authentication testing

Casos de Uso

01Integrating a new Rails application with the centralized AFAL IdP

02Setting up multi-tenant session management based on IdP organization data

03Replacing legacy password-based authentication with OAuth2 single sign-on

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add grupo-afal/claude-plugins afal-auth

For use in Claude.ai and ChatGPT

Características Principales

01Automated OmniAuth strategy configuration for AFAL IdP

021 GitHub stars

03Opt-out controller authentication patterns for secure-by-default access

04Standardized User model mapping for IdP-provided roles and organizations

05Database-backed session management with IP and User-Agent tracking

06Pre-configured Minitest helpers for rapid authentication testing

Casos de Uso

01Integrating a new Rails application with the centralized AFAL IdP

02Setting up multi-tenant session management based on IdP organization data

03Replacing legacy password-based authentication with OAuth2 single sign-on

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add grupo-afal/claude-plugins afal-auth

For use in Claude.ai and ChatGPT