About
Mastering authentication is critical for modern application security, and this skill provides a comprehensive framework for implementing OAuth2 and OpenID Connect correctly. It covers the full spectrum of authorization flows—from Authorization Code with PKCE for mobile and web apps to Client Credentials for machine-to-machine communication—while providing deep guidance on token management, JWT structure, and critical security measures like state validation and refresh token rotation. Whether you're building a new identity provider or integrating social logins, this toolkit ensures your implementation adheres to current security best practices and RFC standards.
