skills.rest
aegntic
aegnticCOMMUNITY
Explore all skills by this author →
Website𝕏@aegnticGitHub

oauth-expert

Provides guidance on implementing secure OAuth 2.0 and SSO with Laravel Sanctum.

4|1|Updated Mar 3, 2026
Search Tags:#authorization#security#authentication#oauth#jwt#token management#openid connect
One-click install
npx skills add https://github.com/aegntic/clawreform --skill oauth-expert-aegntic
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: oauth-expert
Source: https://github.com/aegntic/clawreform/tree/main/crates/clawreform-skills/bundled/oauth-expert
Command: npx skills add https://github.com/aegntic/clawreform --skill oauth-expert-aegntic

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill simplifies the implementation of secure authentication and authorization for applications by providing expert guidance on OAuth 2.0 and OpenID Connect flows, ensuring robust token management and identity federation.

Core Features & Use Cases

  • Secure Authorization Flows: Guides implementation of Authorization Code flow with PKCE, Client Credentials flow, and Device Authorization Flow.
  • Token Management: Provides best practices for JWT validation, refresh token rotation, and token revocation.
  • Identity Federation: Assists in setting up multi-tenant identity solutions and step-up authentication.
  • Use Case: A developer needs to integrate a new web application with an existing identity provider using OAuth 2.0. This Skill will provide step-by-step instructions and best practices for setting up the Authorization Code flow with PKCE, including token validation and secure storage.

Quick Start

Use the oauth-expert skill to implement the Authorization Code flow with PKCE for a new web application.

Frequently Asked Questions about oauth-expert

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement OAuth 2.0 Authorization Code flow with PKCE?▼

OAuth 2.0 Authorization Code flow with PKCE requires generating a code verifier and challenge, redirecting users for login, and exchanging the authorization code plus verifier for access tokens. This Skill provides step-by-step guidance for secure implementation in web applications.

What is the best way to validate JWTs and manage refresh token rotation?▼

JWT validation and refresh token rotation involve verifying token signatures and expiration while issuing new tokens upon each refresh request. This Skill outlines best practices for secure token management, including revocation and avoiding insecure token storage pitfalls.

When do I need OpenID Connect instead of standard OAuth 2.0?▼

OpenID Connect is needed when your application requires user authentication and identity federation on top of OAuth 2.0 authorization. This Skill guides multi-tenant identity solutions and step-up authentication using OpenID Connect protocols.

What are common security pitfalls in OAuth token management?▼

Common OAuth token management security pitfalls include insecure token storage, missing state parameters, and failing to rotate refresh tokens. This Skill addresses these vulnerabilities and provides best practices for secure authorization flows.

Can I use Client Credentials flow and Device Authorization Flow for machine-to-machine communication?▼

Client Credentials and Device Authorization Flows are supported for machine-to-machine communication and input-constrained devices. This Skill provides implementation guidance for these OAuth 2.0 patterns alongside identity federation and BFF architecture.

Does oauth-expert support step-up authentication and BFF patterns?▼

The oauth-expert Skill supports step-up authentication and Backend-for-Frontend (BFF) patterns as part of secure authorization flows. It provides expert guidance on implementing these advanced OAuth 2.0 and OpenID Connect architectures.

Related Skills

Explore More Software Engineering Skills→
davidrrowleydavidrrowley

entra-app-registration

Guide Entra ID app registration and OAuth 2.0 authentication setup.

Community
Intermediate
Arnutt-NArnutt-N

rbac-guard

Implement Role-Based Access Control for multi-role authorization in HR-IMS.

Community
Advanced
Jawad-ChaudharyJawad-Chaudhary

api-fetch-with-auth

Create an authenticated fetch utility for Next.js using better-auth tokens.

Community
Intermediate
ajianazajianaz
4

security-auth

Design authentication systems with OAuth 2, OpenID Connect, JWT, and SAML.

Community
Advanced