Agent skill · security · aj-geddes
oauth-implementation
Implement secure OAuth 2.0, OpenID Connect (OIDC), JWT authentication, and SSO integration. Use when building secure authentication systems for web and mobile applications.
Why this skill is useful
Provides detailed implementation examples and best practices for OAuth 2.0 and OpenID Connect that the AI wouldn't reliably generate on its own.
What it needs
About 1k tokens when loaded. Last updated 2026-03-04. 307 stars on the source repository.
What this skill does
OAuth Implementation Table of Contents Overview When to Use Quick Start Reference Guides Best Practices Overview Implement industry-standard OAuth 2.0 and OpenID Connect authentication flows with JWT tokens, refresh tokens, and secure session management. When to Use User authentication systems Third-party API integration Single Sign-On (SSO) implementation Mobile app authentication Microservices security Social login integration Quick Start Minimal working example: Reference Guides Detailed implementations in the references/ directory: Guide Contents --- --- Node.js OAuth 2.0 Server Node.js OAuth 2.0 Server Python OpenID Connect Implementation Python OpenID Connect Implementation Java Spring Security OAuth Java Spring Security OAuth Best Practices ✅ DO Use PKCE for public clients Implement token rotation Store tokens securely Use HTTPS everywhere Validate redirect URIs Implement rate limiting Use short-lived access tokens Log authentication events ❌ DON'T Store tokens in localStorage Use implicit flow Skip state parameter Expose client secrets Allow open redirects Use weak signing keys
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aj-geddes/oauth-implementation