web-auth-expert

Implement OAuth 2.1/OIDC with PKCE for TypeScript and Python web authentication.

Updated Jan 31, 2026

Search Tags:#security #authentication #oauth #passkeys #mfa #oidc #webauthn

Ready to run

npx skills add https://github.com/lirielgozi/liri-skills --skill web-auth-expert

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: web-auth-expert
Source: https://github.com/lirielgozi/liri-skills/tree/main/skills/web-auth-expert
Command: npx skills add https://github.com/lirielgozi/liri-skills --skill web-auth-expert

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and sub_agents (resource) components.

What problem does it solve?

This Skill provides comprehensive solutions for implementing robust and secure authentication for web applications, covering modern standards and best practices.

Core Features & Use Cases

Full-Stack Auth: Implement authentication for TypeScript frontends and Python backends.
Diverse Methods: Supports OAuth 2.1/OIDC, Passkeys/WebAuthn, MFA (TOTP, hardware keys), magic links, and password authentication.
Security Standards: Adheres to OWASP ASVS 5.0 and current security best practices.
Use Case: Set up secure login for a new SaaS application using Google Sign-In, mandatory TOTP MFA, and JWT-based session management, ensuring compliance with security standards.

Quick Start

Use the web-auth-expert skill to implement OAuth 2.1 with PKCE for Google login.

Frequently Asked Questions about web-auth-expert

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I implement secure OAuth 2.1 with PKCE for a TypeScript and Python application?▼

Passkeys utilize WebAuthn standards to provide phishing-resistant passwordless authentication for web applications. This Skill implements passkey registration and login flows across TypeScript frontends and Python backends to enhance security.

What is the best way to set up mandatory TOTP MFA for a new SaaS application?▼

The best way to set up mandatory TOTP MFA is to enforce step-up authentication during user login flows. This Skill applies TOTP and hardware key methods alongside primary logins to meet OWASP ASVS 5.0 compliance.

How does WebAuthn work for passwordless authentication in web applications?▼

WebAuthn enables passwordless authentication by using public-key cryptography to verify user identity through passkeys or hardware keys. This Skill implements WebAuthn flows to provide secure, phishing-resistant login alternatives.

Can I use social logins and magic links together in the same authentication system?▼

Yes, you can implement social logins and magic links together within the same authentication system. This Skill supports combining diverse methods like Google Sign-In and magic links with JWT-based session management.

How do I ensure my web authentication system meets OWASP ASVS 5.0 compliance?▼

Ensure OWASP ASVS 5.0 compliance by applying required crypto standards, secure session management, and step-up authentication. This Skill implements authentication flows specifically designed to adhere to these security best practices.