skills.rest
ory
oryOFFICIAL
Explore all skills by this author →
WebsiteGitHub

ory-temporal-worker

Set up Temporal TypeScript workers with Ory authentication and permission checks.

Updated Jun 2, 2026
Search Tags:#workflow#authentication#TypeScript#Temporal#Ory
One-click install
npx skills add https://github.com/ory/codex-plugins --skill ory-temporal-worker
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ory-temporal-worker
Source: https://github.com/ory/codex-plugins/tree/main/plugins/ory-codex/skills/ory-temporal-worker
Command: npx skills add https://github.com/ory/codex-plugins --skill ory-temporal-worker

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires @temporalio/create, @temporalio/worker, @ory/argus, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill assists in setting up a secure Temporal TypeScript worker where every activity is gated by Ory for authentication and authorization, ensuring a robust and secure workflow.

Core Features & Use Cases

  • Ory Authentication: Integrates Ory for secure user authentication.
  • Dynamic Client Registration: Utilizes OAuth2 DCR for identity resolution.
  • Permission Checks: Each activity runs an Ory Permission check to ensure security.
  • Trace Span Emission: Emit trace spans for better monitoring and debugging.
  • Deterministic Workflow: Maintains determinism in workflows.

Quick Start

Scaffold an Ory-authenticated Temporal worker using this skill by executing: 'ory temporal-worker'

Frequently Asked Questions about ory-temporal-worker

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I secure Temporal TypeScript worker activities with authentication?▼

Scaffolding a secured Temporal TypeScript worker with Ory requires @temporalio/create, @temporalio/worker, and @ory/argus to gate activities with authentication and permission checks.

How does OAuth2 dynamic client registration work with Temporal workflows?▼

The setup maintains deterministic workflow execution by validating authentication before activities run, preventing non-deterministic identity resolution from breaking the workflow state.

Do I need TypeScript to use Ory authentication with Temporal workers?▼

Trace span emission is integrated into the worker setup, allowing you to monitor and debug the authenticated Temporal workflow activities effectively during execution.

What's the best way to add permission checks to Temporal workflow activities?▼

Using @ory/argus alongside the Temporal worker dependencies allows you to emit trace spans for better monitoring while keeping the workflow deterministic.

Why does my Temporal TypeScript workflow break when adding authentication?▼

By using OAuth2 DCR for identity resolution and emitting trace spans, the setup ensures that authentication does not interfere with the deterministic execution required by Temporal.

Related Skills

Explore More Software Engineering Skills→
MakisuoMakisuo
1.6k

clickhousectl-local-dev

Install and configure a local ClickHouse environment with clickhousectl.

Community
Intermediate
therealbilltherealbill
3

monitoring-setup

Configure Prometheus scrapes, Grafana dashboards, and Alertmanager rules for Temporal clusters.

Community
Advanced
oryory

ory-local-dev

Manage Docker containers for a local Ory authentication stack.

Official
Advanced
p-o-ke-naep-o-ke-nae

temporal-python-testing

Test Temporal Python workflows and activities for deterministic execution and failure scenarios using pytest and WorkflowEnvironment time-skipping.

Community
Advanced