Oauth implementation

Skill ulpi-io/plugin-marketplace/plugins/aj-geddes/skills/oauth-implementation

A curated collection of 7,800+ agent skills for Claude Desktop, sourced from skills.sh

Install

npx -y skills add ulpi-io/plugin-marketplace --skill oauth-implementation

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

2 things to look at

no licenseNo license file was found in the repository. Code published without one is not open source by default, so using it at work is a question for whoever answers licensing questions where you are.
1 stars1 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

What its author says it does

Copied from the file, not written here

Implement secure OAuth 2.0, OpenID Connect (OIDC), JWT authentication, and SSO integration. Use when building secure authentication systems for web and mobile applications.

SKILL.md

2.4 KB, 507 tokens by cl100k_base, as published. Nobody here has run it

Overview

Implement industry-standard OAuth 2.0 and OpenID Connect authentication flows with JWT tokens, refresh tokens, and secure session management.

When to Use

User authentication systems
Third-party API integration
Single Sign-On (SSO) implementation
Mobile app authentication
Microservices security
Social login integration

Quick Start

Minimal working example:

// oauth-server.js - Complete OAuth 2.0 implementation
const express = require("express");
const jwt = require("jsonwebtoken");
const crypto = require("crypto");
const bcrypt = require("bcrypt");

class OAuthServer {
  constructor() {
    this.app = express();
    this.clients = new Map();
    this.authorizationCodes = new Map();
    this.refreshTokens = new Map();
    this.accessTokens = new Map();

    // JWT signing keys
    this.privateKey = process.env.JWT_PRIVATE_KEY;
    this.publicKey = process.env.JWT_PUBLIC_KEY;

    this.setupRoutes();
  }

  // Register OAuth client
  registerClient(clientId, clientSecret, redirectUris) {
    this.clients.set(clientId, {
      clientSecret: bcrypt.hashSync(clientSecret, 10),
// ... (see reference guides for full implementation)

Reference Guides

Detailed implementations in the references/ directory:

Guide	Contents
Node.js OAuth 2.0 Server	Node.js OAuth 2.0 Server
Python OpenID Connect Implementation	Python OpenID Connect Implementation
Java Spring Security OAuth	Java Spring Security OAuth

Best Practices

✅ DO

Use PKCE for public clients
Implement token rotation
Store tokens securely
Use HTTPS everywhere
Validate redirect URIs
Implement rate limiting
Use short-lived access tokens
Log authentication events

❌ DON'T

Store tokens in localStorage
Use implicit flow
Skip state parameter
Expose client secrets
Allow open redirects
Use weak signing keys