auth-security
CommunityOAuth 2.1 + JWT security best practices.
Authormajiayu000
Version1.0.0
Installs0
System Documentation
What problem does it solve?
Securely authenticating and authorizing users at scale is complex. This Skill covers OAuth 2.1 (RFC 9700), PKCE, short-lived tokens, and JWT best practices to design robust auth flows.
Core Features & Use Cases
- OAuth 2.1 + PKCE: Enforces Authorization Code + PKCE with secure token exchange.
- JWT Best Practices: Explicit algorithm whitelisting, checks on token structure, and secure storage.
- Token Storage & Rotation: Secure storage patterns, refresh token rotation, and HttpOnly storage guidance.
Quick Start
Draft an OAuth 2.1 flow using PKCE and implement a verifyAccessToken function that validates algorithm, issuer, audience, and expiration.
Dependency Matrix
Required Modules
None requiredComponents
references
💻 Claude Code Installation
Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.
Please help me install this Skill: Name: auth-security Download link: https://github.com/majiayu000/claude-arsenal/archive/main.zip#auth-security Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
Agent Skills Search Helper
Install a tiny helper to your Agent, search and equip skill from 471,000+ vetted skills library on demand.