OAuth 2.0 & OIDC Implementation
Implements secure OAuth 2.0 and OpenID Connect authentication flows for web applications, mobile clients, and backend APIs.
Equips Claude with expert architectural patterns and security standards for implementing modern OAuth 2.0 and OpenID Connect (OIDC) authentication flows across diverse tech stacks. It provides end-to-end guidance for Authorization Code flows with PKCE, client credentials, and refresh token rotation while actively enforcing critical security rules such as state validation, HttpOnly token storage, and strict redirect URI matching. Whether you are adding third-party social logins, configuring enterprise single sign-on (SSO), or debugging token refresh issues, this skill ensures compliant, production-grade authentication.
主な機能
01239 GitHub stars
02Guides implementation of Authorization Code, PKCE, and Client Credentials flows
03Provides secure token handling, refresh token rotation, and session management
04Supports OpenID Connect (OIDC) discovery, JWKS validation, and scope management
05Enforces strict OAuth security practices to prevent CSRF, token leakage, and replay attacks
06Includes reference implementations for Express.js, Python Flask (Authlib), and Spring Security
ユースケース
01Building Single Sign-On (SSO) and third-party login with providers like Google, GitHub, or Auth0
02Setting up machine-to-machine service authentication using client credentials
03Securing single-page applications (SPAs) and mobile apps using Authorization Code with PKCE