Provide OmniAuth-based AFAL IdP authentication for Rails applications.
npx skills add https://github.com/Grupo-AFAL/claude-plugins --skill afal-auth
Please help me install this Agent Skill. Skill: afal-auth Source: https://github.com/Grupo-AFAL/claude-plugins/tree/main/rails-tools/skills/afal-auth Command: npx skills add https://github.com/Grupo-AFAL/claude-plugins --skill afal-auth
Provides a standardized, secure authentication pattern for AFAL Rails applications that centralizes sign-in through the AFAL IdP and replaces ad-hoc or insecure local auth approaches. It removes ambiguity about credentials handling, session lifecycle, and multi-tenant scoping so teams can implement production-ready SSO consistently.
Redirect users to /auth/afal_idp, implement SessionsController#create to find or create a User from the OmniAuth hash, create a Session record, and set cookies.signed[:session_id] to the session id.
High-intent search queries and answers about installing and using this skill.
OmniAuth SSO with database-backed session management in Rails is implemented using a custom OAuth2 strategy that creates a Session record tracked via cookies.signed[:session_id] to enable server-side audit trails and revocation.
Multi-tenant scoping with IdP authentication in Rails applications works by retrieving organization data from the IdP userinfo endpoint and applying model defaults through a shared Authentication concern that sets Current.user attributes.
Testing OmniAuth authentication strategies in Rails with Minitest is supported through included Minitest patterns and fixtures that provide reliable test coverage for session creation, user find-or-create logic, and IdP data mapping.
Rails.application.credentials can be used to manage OmniAuth IdP secrets securely by storing the OAuth2 client credentials there, which the custom afal_idp strategy reads to authenticate against the AFAL IdP.
OmniAuth setup requires omniauth-rails_csrf_protection for controller authentication to prevent CSRF attacks during the OAuth2 initiation phase, complementing the opt-out Authentication concern that resumes sessions into Current attributes.
A custom OAuth2 strategy for centralized SSO in Rails is needed instead of local authentication when your applications require standardized sign-in through a central IdP, database-backed session audit trails, and multi-tenant organization scoping.
litestar-orgGenerate SQLAlchemy models, repositories, and services for Python web frameworks.
Maple-and-SpruceCoordinate session documentation and lifecycle updates across the SDLC.
ShoebtamboliConfigure Devise authentication for Ruby on Rails applications.
vTRKASelect OAuth 2.x/OIDC authentication flows by client type and constraints.
