skills.rest
lirielgozi
lirielgoziCOMMUNITY
Explore all skills by this author →
GitHub

web-auth-expert

Implement OAuth 2.1/OIDC with PKCE for TypeScript and Python web authentication.

Updated Jan 31, 2026
Search Tags:#security#authentication#oauth#passkeys#mfa#oidc#webauthn
One-click install
npx skills add https://github.com/lirielgozi/liri-skills --skill web-auth-expert
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: web-auth-expert
Source: https://github.com/lirielgozi/liri-skills/tree/main/skills/web-auth-expert
Command: npx skills add https://github.com/lirielgozi/liri-skills --skill web-auth-expert

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and sub_agents (resource) components.

What problem does it solve?

This Skill provides comprehensive solutions for implementing robust and secure authentication for web applications, covering modern standards and best practices.

Core Features & Use Cases

  • Full-Stack Auth: Implement authentication for TypeScript frontends and Python backends.
  • Diverse Methods: Supports OAuth 2.1/OIDC, Passkeys/WebAuthn, MFA (TOTP, hardware keys), magic links, and password authentication.
  • Security Standards: Adheres to OWASP ASVS 5.0 and current security best practices.
  • Use Case: Set up secure login for a new SaaS application using Google Sign-In, mandatory TOTP MFA, and JWT-based session management, ensuring compliance with security standards.

Quick Start

Use the web-auth-expert skill to implement OAuth 2.1 with PKCE for Google login.

Frequently Asked Questions about web-auth-expert

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement secure OAuth 2.1 with PKCE for a TypeScript and Python application?▼

Passkeys utilize WebAuthn standards to provide phishing-resistant passwordless authentication for web applications. This Skill implements passkey registration and login flows across TypeScript frontends and Python backends to enhance security.

What is the best way to set up mandatory TOTP MFA for a new SaaS application?▼

The best way to set up mandatory TOTP MFA is to enforce step-up authentication during user login flows. This Skill applies TOTP and hardware key methods alongside primary logins to meet OWASP ASVS 5.0 compliance.

How does WebAuthn work for passwordless authentication in web applications?▼

WebAuthn enables passwordless authentication by using public-key cryptography to verify user identity through passkeys or hardware keys. This Skill implements WebAuthn flows to provide secure, phishing-resistant login alternatives.

Can I use social logins and magic links together in the same authentication system?▼

Yes, you can implement social logins and magic links together within the same authentication system. This Skill supports combining diverse methods like Google Sign-In and magic links with JWT-based session management.

How do I ensure my web authentication system meets OWASP ASVS 5.0 compliance?▼

Ensure OWASP ASVS 5.0 compliance by applying required crypto standards, secure session management, and step-up authentication. This Skill implements authentication flows specifically designed to adhere to these security best practices.

Related Skills

Explore More Software Engineering Skills→
lxt070409lxt070409
1

debugging-hermes-tui-commands

Diagnose and resolve Hermes TUI slash command registration and autocomplete issues.

Community
Advanced
AJBcodingAJBcoding
4

moai-security-auth

Implement MFA, WebAuthn, OAuth 2.1, and JWT-based authentication with NextAuth.js 5.x.

Community
Advanced
fartybobofartybobo
4

audit-security

Audit code reviews for OWASP Top 10:2025, ASVS 5.0, and Agentic AI security vulnerabilities.

Official
Advanced
daffy0208daffy0208
34

api-integration-builder

Implement OAuth 2.0, API keys, webhooks, and retry logic for third-party integrations.

Community
Advanced