How does this skill handle token expiration?

It provides specific strategies and code patterns for implementing token refresh mechanisms to maintain long-lived sessions without requiring frequent re-authentication.

What is the difference between OAuth and Installation tokens?

OAuth tokens are used for user-context operations initiated by a human, while Installation tokens are used for automated, background processes acting as the App itself.

Does this skill support CLI tools without a browser?

Yes, it includes implementation patterns for the OAuth Device Flow, which is specifically designed for CLI environments where standard browser redirects are not possible.

Can I use this skill to access a user's private repositories?

Yes, the OAuth flows provided enable user-context access to both public and private repositories, strictly respecting the individual user's existing permission levels.

GitHub OAuth Authentication

Name: GitHub OAuth Authentication
Author: adaptive-enforcement-lab

byadaptive-enforcement-lab

0•

セキュリティとテスト

Implements secure OAuth flows for GitHub Apps to enable user-context operations, device-based CLI authorization, and token management.

This skill provides standardized patterns and implementation guides for integrating GitHub OAuth authentication into web applications and CLI tools. It guides Claude in setting up user-context access for GitHub Apps, ensuring proper user attribution in audit logs, respecting individual permission levels, and managing long-lived sessions through token refresh strategies. It is particularly useful when building interactive tools that require access to a user's private repositories or need to perform actions on their behalf while maintaining high security standards.

主な機能

01Standardized web application OAuth flow patterns

020 GitHub stars

03Device flow implementations for CLI-based tools

04User-context permission and attribution guidance

05Token refresh and rotation strategies for GitHub Apps

06Comparative analysis of OAuth versus Installation tokens

ユースケース

01Developing a web-based dashboard that performs actions on behalf of GitHub users with full audit logging

02Implementing secure token rotation logic for long-running application sessions

03Building a CLI tool that requires secure access to a user's private GitHub repositories

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add adaptive-enforcement-lab/claude-skills oauth-user-authentication

For use in Claude.ai and ChatGPT

Download Skill