Integrate BC Government OIDC authentication for React SPAs and .NET APIs.
npx skills add https://github.com/rloisell/rl-agents-n-skills --skill bc-gov-iam
Please help me install this Agent Skill. Skill: bc-gov-iam Source: https://github.com/rloisell/rl-agents-n-skills/tree/main/bc-gov-iam Command: npx skills add https://github.com/rloisell/rl-agents-n-skills --skill bc-gov-iam
This Skill provides practical guidance and implementation patterns to integrate BC Government identity providers (DIAM and Common SSO) using OIDC and Keycloak so applications can perform secure authentication and token-based authorization without ad-hoc setup mistakes.
Configure your React SPA to use oidc-client-ts with PKCE against loginproxy.gov.bc.ca and provide the oidcConfig, callback page, silent renew entry, and corresponding .NET JwtBearer settings for the API.
High-intent search queries and answers about installing and using this skill.
BC Government OIDC authentication for a React SPA is configured using oidc-client-ts and react-oidc-context, enforcing the PKCE S256 flow to securely authenticate against the Common SSO or DIAM realms via loginproxy.gov.bc.ca.
.NET JWT validation for a DIAM Keycloak API requires configuring JwtBearer authentication with specific token validation parameters and claim extraction to protect endpoints and validate access tokens issued by the BC Government identity provider.
Yes, BC Gov Common SSO supports backchannel logout for confidential clients by providing a specific handler pattern and Keycloak client registration settings to manage token revocation and session termination across services.
Keycloak confidential client secrets for BC Government apps should be stored in Vault, using a recommended Vault path to securely manage credentials and avoid ad-hoc setup mistakes during deployment.
Silent renew issues with oidc-client-ts in a React SPA often stem from misconfigured OIDC settings or audience mapping; troubleshooting involves verifying your silent renew entry point and token validation parameters against the Keycloak client configuration.
wilfriedagoConfigure Keycloak realms, clients, and authentication flows for SSO.
fatihkanDetect session management vulnerabilities in web applications and APIs.
DuendeSoftwareValidate IdentityServer JWT and reference tokens with scope-based authorization.
modu-aiImplement Auth0-based SSO, SAML, and OIDC with multi-tenant authorization workflows.
