<< All versions
Skill v1.0.1
currentAutomated scan100/100aj-geddes/useful-ai-prompts/oauth-implementation
7 files
──Details
PublishedMay 14, 2026 at 09:39 PM
Content Hashsha256:dc3717275952d023...
Git SHA3f5182cfd739
Bump Typepatch
──Files
Files (1 file, 2.4 KB)
SKILL.md2.4 KBactive
SKILL.md · 97 lines · 2.4 KB
version: "1.0.1" name: oauth-implementation description: > Implement secure OAuth 2.0, OpenID Connect (OIDC), JWT authentication, and SSO integration. Use when building secure authentication systems for web and mobile applications.
OAuth Implementation
Table of Contents
Overview
Implement industry-standard OAuth 2.0 and OpenID Connect authentication flows with JWT tokens, refresh tokens, and secure session management.
When to Use
- User authentication systems
- Third-party API integration
- Single Sign-On (SSO) implementation
- Mobile app authentication
- Microservices security
- Social login integration
Quick Start
Minimal working example:
javascript
// oauth-server.js - Complete OAuth 2.0 implementationconst express = require("express");const jwt = require("jsonwebtoken");const crypto = require("crypto");const bcrypt = require("bcrypt");class OAuthServer {constructor() {this.app = express();this.clients = new Map();this.authorizationCodes = new Map();this.refreshTokens = new Map();this.accessTokens = new Map();// JWT signing keysthis.privateKey = process.env.JWT_PRIVATE_KEY;this.publicKey = process.env.JWT_PUBLIC_KEY;this.setupRoutes();}// Register OAuth clientregisterClient(clientId, clientSecret, redirectUris) {this.clients.set(clientId, {clientSecret: bcrypt.hashSync(clientSecret, 10),// ... (see reference guides for full implementation)
Reference Guides
Detailed implementations in the references/ directory:
| Guide | Contents | |
|---|---|---|
| Node.js OAuth 2.0 Server | Node.js OAuth 2.0 Server | |
| Python OpenID Connect Implementation | Python OpenID Connect Implementation | |
| Java Spring Security OAuth | Java Spring Security OAuth |
Best Practices
✅ DO
- Use PKCE for public clients
- Implement token rotation
- Store tokens securely
- Use HTTPS everywhere
- Validate redirect URIs
- Implement rate limiting
- Use short-lived access tokens
- Log authentication events
❌ DON'T
- Store tokens in localStorage
- Use implicit flow
- Skip state parameter
- Expose client secrets
- Allow open redirects
- Use weak signing keys