How does this skill handle token expiration?

It provides specific strategies and code patterns for implementing token refresh mechanisms to maintain long-lived sessions without requiring frequent re-authentication.

What is the difference between OAuth and Installation tokens?

OAuth tokens are used for user-context operations initiated by a human, while Installation tokens are used for automated, background processes acting as the App itself.

Does this skill support CLI tools without a browser?

Yes, it includes implementation patterns for the OAuth Device Flow, which is specifically designed for CLI environments where standard browser redirects are not possible.

Can I use this skill to access a user's private repositories?

Yes, the OAuth flows provided enable user-context access to both public and private repositories, strictly respecting the individual user's existing permission levels.

GitHub OAuth Authentication

Name: GitHub OAuth Authentication
Author: adaptive-enforcement-lab

byadaptive-enforcement-lab

安全与测试

Implements secure OAuth flows for GitHub Apps to enable user-context operations, device-based CLI authorization, and token management.

关于

This skill provides standardized patterns and implementation guides for integrating GitHub OAuth authentication into web applications and CLI tools. It guides Claude in setting up user-context access for GitHub Apps, ensuring proper user attribution in audit logs, respecting individual permission levels, and managing long-lived sessions through token refresh strategies. It is particularly useful when building interactive tools that require access to a user's private repositories or need to perform actions on their behalf while maintaining high security standards.

主要功能

Standardized web application OAuth flow patterns
0 GitHub stars
Device flow implementations for CLI-based tools
User-context permission and attribution guidance
Token refresh and rotation strategies for GitHub Apps
Comparative analysis of OAuth versus Installation tokens

使用场景

Developing a web-based dashboard that performs actions on behalf of GitHub users with full audit logging
Implementing secure token rotation logic for long-running application sessions
Building a CLI tool that requires secure access to a user's private GitHub repositories

关于

主要功能

Standardized web application OAuth flow patterns
0 GitHub stars
Device flow implementations for CLI-based tools
User-context permission and attribution guidance
Token refresh and rotation strategies for GitHub Apps
Comparative analysis of OAuth versus Installation tokens

使用场景

Developing a web-based dashboard that performs actions on behalf of GitHub users with full audit logging
Implementing secure token rotation logic for long-running application sessions
Building a CLI tool that requires secure access to a user's private GitHub repositories