oauth

Implement OAuth 2.0/2.1 authorization flows in Fastify applications.

1|Updated Mar 5, 2026
One-click install
npx skills add https://github.com/novvoo/skill-router --skill oauth-novvoo
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: oauth
Source: https://github.com/novvoo/skill-router/tree/main/agent/skills/oauth
Command: npx skills add https://github.com/novvoo/skill-router --skill oauth-novvoo

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires @fastify/oauth2, @fastify/cookie, @fastify/session, fastify-plugin, @fastify/jwt, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill simplifies the complex process of implementing and managing OAuth 2.0/2.1 authorization flows within Fastify applications, ensuring robust API security and user authentication.

Core Features & Use Cases

  • OAuth Flow Implementation: Supports Authorization Code with PKCE, Client Credentials, and Device Flows.
  • Token Management: Handles JWT validation, refresh token rotation, and token introspection.
  • Route Protection: Enables securing Fastify routes and plugins using OAuth scopes and JWT validation.
  • Use Case: Secure your Fastify backend API by implementing a login flow using Google OAuth, validating user tokens on incoming requests, and ensuring only authorized users can access specific endpoints.

Quick Start

Use the oauth skill to implement the Authorization Code with PKCE flow in your Fastify application.

Frequently Asked Questions about oauth

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement OAuth 2.0 authorization flows in a Fastify application?

Implement OAuth 2.0 authorization flows in Fastify by using this Skill to set up Authorization Code with PKCE, Client Credentials, and Device Flows, handling token issuance and route protection automatically.

What is the best way to secure Fastify routes using JWT and OAuth scopes?

Secure Fastify routes using JWT and OAuth scopes by validating user tokens on incoming requests, ensuring only authorized users with correct scopes can access specific endpoints.

How does token introspection and refresh token rotation work with Fastify?

Refresh token rotation and token introspection in Fastify work by validating JWTs and issuing new tokens securely, managing API access control without exposing client credentials.

Can I use Google OAuth for user authentication in my Fastify backend API?

Use Google OAuth for user authentication in a Fastify backend API by implementing a login flow that validates user tokens on incoming requests and secures endpoints using OAuth 2.0 standards.

Does this OAuth implementation comply with the OAuth 2.1 standard?

This OAuth implementation complies with OAuth 2.1 standards by supporting Authorization Code with PKCE, managing token introspection, and ensuring secure handling of client credentials for API access control.

Why do I need an authorization server to implement OAuth 2.1 in Fastify?

An authorization server is required to implement OAuth 2.1 in Fastify because it handles client credential management, token issuance, and validation, which are necessary for robust API security and user authentication.