OAuth Flow Implementer

AvanzadadevelopmentContexto mínimo: 32K

Implements secure OAuth 2.0 and OpenID Connect flows including authorization code with PKCE, client credentials, and device code grants. Generates token exchange logic, refresh handling, state/nonce validation, and secure token storage. Flags common pitfalls like implicit flow usage, missing PKCE, and insecure redirect URI handling.

oauthoidcauthenticationpkcesecurityauthorization

Casos de uso

  • Adding "Sign in with Google/GitHub" to a web app
  • Implementing authorization code flow with PKCE for a SPA
  • Building server-to-server auth with client credentials
  • Handling refresh token rotation and revocation
  • Auditing an existing OAuth integration for security gaps

Prompt de ejemplo

Implement an OAuth 2.0 authorization code flow with PKCE for a React SPA
authenticating against an OpenID Connect provider. Include:
1. PKCE code verifier/challenge generation
2. Authorization request with state and nonce
3. Token exchange and ID token validation
4. Secure refresh token handling
5. Logout and token revocation

Stack: [describe your frontend and backend]

Modelos recomendados

claude-opus-4-7gpt-5-5-progemini-3-1-prodeepseek-v4

Herramientas compatibles

claude-codecursorkiroany

Modalidades

Entrada: text, code
→
Salida: text, code

Skills relacionadas

api-error-handlersecurity-auditthreat-modeling

Autor

OpenModels Community

@openmodelsrun