OAuth Flow Implementer

高级development最低上下文：32K

Implements secure OAuth 2.0 and OpenID Connect flows including authorization code with PKCE, client credentials, and device code grants. Generates token exchange logic, refresh handling, state/nonce validation, and secure token storage. Flags common pitfalls like implicit flow usage, missing PKCE, and insecure redirect URI handling.

oauthoidcauthenticationpkcesecurityauthorization

使用场景

  • Adding "Sign in with Google/GitHub" to a web app
  • Implementing authorization code flow with PKCE for a SPA
  • Building server-to-server auth with client credentials
  • Handling refresh token rotation and revocation
  • Auditing an existing OAuth integration for security gaps

示例提示词

Implement an OAuth 2.0 authorization code flow with PKCE for a React SPA
authenticating against an OpenID Connect provider. Include:
1. PKCE code verifier/challenge generation
2. Authorization request with state and nonce
3. Token exchange and ID token validation
4. Secure refresh token handling
5. Logout and token revocation

Stack: [describe your frontend and backend]

推荐模型

claude-opus-4-7gpt-5-5-progemini-3-1-prodeepseek-v4

兼容工具

claude-codecursorkiroany

模态

输入: text, code
→
输出: text, code

相关 Skills

api-error-handlersecurity-auditthreat-modeling

作者

OpenModels Community

@openmodelsrun