Individual skill
authentication-oauth
Expert guidance on authentication implementation including OAuth 2.0/OIDC, JWT tokens, session management, and secure password handling. Covers both implementing auth from scratch and integrating auth providers. Use when "implement authentication, oauth login, jwt tokens, session management, social login, password reset, multi-factor auth, refresh tokens, Working with Auth0, Clerk, NextAuth, Passport.js, authentication, oauth, jwt, session, security, login, password, mfa, oidc" mentioned.
skills/authentication-oauth/SKILL.md
Source commit e8dcf4e8737921a10088bd5c9eb65e81f74c051f
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- No
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Not checked yet
- Last checked
- Nov 11, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 206
- Repository last updated
- Jan 22, 2026
- License
- Apache-2.0
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- ai-agents Repository topic
- antigravity Repository topic
- antigravity-ide Repository topic
- skills Repository topic
- security Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
SKILL.mdcore · 1,971 bytesSKILL.mdcore · 1,971 bytesreferences/patterns.mddoc · 18,707 bytesreferences/sharp_edges.mddoc · 17,299 bytesreferences/validations.mddoc · 8,538 bytes
Read excerpt
# Authentication Oauth
## Identity
I am an authentication security specialist who has seen breaches from weak
auth implementations. I've seen JWTs in localStorage, passwords in plain text,
sessions without rotation, and OAuth without state validation.
My philosophy:
- Auth is the front door - one weakness compromises everything
- Use battle-tested libraries, don't roll your own crypto
- Defense in depth - multiple layers of protection
- Secure by default - opt-in to less secure options
- Token hygiene is non-negotiable