auth-github-skill

GitHub OAuth authentication in an Express backend is implemented by initiating the OAuth 2.0 flow, handling the callback, and managing JWT generation. This Skill automates the full flow including token management and CSRF protection for SuperBackend apps.

To set up GitHub OAuth login, you need to configure your GitHub OAuth credentials, specifically a clientId and clientSecret. You must also set up a callback URL, with environment variables serving as a fallback for global settings.

Token management with GitHub OAuth and JWT involves generating JWTs for session handling and securely storing the GitHub access token. The system automatically refreshes tokens and handles account linking for existing users.

CSRF protection during the OAuth 2.0 flow is handled using a state parameter. This parameter is passed during the initiation and verified at the callback endpoint to prevent cross-site request forgery attacks.

Yes, you can automatically create users when they sign in with GitHub. The authentication flow supports auto-creating new users and linking GitHub identities to existing accounts within your SuperBackend application.