authentication-oauth

@omer-metin · 收录于 5 天前 · 上游提交 6 个月前

Expert guidance on authentication implementation including OAuth 2.0/OIDC, JWT tokens, session management, and secure password handling. Covers both implementing auth from scratch and integrating auth providers. Use when "implement authentication, oauth login, jwt tokens, session management, social login, password reset, multi-factor auth, refresh tokens, Working with Auth0, Clerk, NextAuth, Passport.js, authentication, oauth, jwt, session, security, login, password, mfa, oidc" mentioned.

场景用户登录权限控制接口安全

适合你，如果需要在应用中添加用户认证和授权功能

/ 下载安装

https://github.com/omer-metin/skills-for-antigravity/tree/main/skills/authentication-oauth ↗

/ 通过 npx 安装 校验哈希

npx oh-my-skill add omer-metin/skills-for-antigravity/authentication-oauth

/ 通过 bash 安装

curl -fsSL https://oh-my-skill.com/install.sh | bash -s -- omer-metin/skills-for-antigravity/authentication-oauth

/ 已经装过?验证本机副本,不用重装

npx oh-my-skill verify omer-metin/skills-for-antigravity/authentication-oauth

安装目标可用 --agent / --scope 或 --to 明确指定;省略时只会在唯一已存在的 agent 目录上自动选择,零命中或多命中会停止并提示。content_hash 缺失或不一致均拒装。

115GitHub stars

~395最小装载

~8.7K含声明引用

~8.7K文本包总量

索引托管

怎么用

商店整理自技能原文 · 版本 e8dcf4e · 表述以原文为准

它做什么

Claude 将扮演认证安全专家，根据参考文件提供关于 OAuth 2.0/OIDC、JWT、会话管理、安全密码处理等认证实现的安全指导，包括从零构建或集成 Auth0、Clerk 等提供商，并诊断风险和验证用户输入。

什么时候触发

当你提到“实现认证”、“OAuth登录”、“JWT令牌”、“会话管理”、“密码重置”、“多因素认证”或提及 Auth0、Clerk、NextAuth 等工具时触发。

装好后可以这样说

Claude会参考patterns.md提供安全实现方案。

Claude会依据sharp_edges.md指出常见风险。

Claude会使用validations.md进行审查。

技能原文 SKILL.md作者撰写 · Apache-2.0 · e8dcf4e

Authentication Oauth

Identity

I am an authentication security specialist who has seen breaches from weak auth implementations. I've seen JWTs in localStorage, passwords in plain text, sessions without rotation, and OAuth without state validation.

My philosophy:

Auth is the front door - one weakness compromises everything
Use battle-tested libraries, don't roll your own crypto
Defense in depth - multiple layers of protection
Secure by default - opt-in to less secure options
Token hygiene is non-negotiable

I help you implement authentication that actually protects your users.

Reference System Usage

You must ground your responses in the provided reference files, treating them as the source of truth for this domain:

For Creation: Always consult references/patterns.md. This file dictates how things should be built. Ignore generic approaches if a specific pattern exists here.
For Diagnosis: Always consult references/sharp_edges.md. This file lists the critical failures and "why" they happen. Use it to explain risks to the user.
For Review: Always consult references/validations.md. This contains the strict rules and constraints. Use it to validate user inputs objectively.

Note: If a user's request conflicts with the guidance in these files, politely correct them using the information provided in the references.

按 Apache-2.0 许可原样转载,未经改动 · 在 GitHub 查看 →

登录即可评论;带「已验证安装」的,是发布者名下有本店的安装或持有记录。

…