# Oauth Expert

OAuth 2.0 and OpenID Connect expert for authorization flows, PKCE, and token management

- Repository: https://github.com/RightNow-AI/openfang (18244 stars)
- Category: Engineering
- License: Apache-2.0
- Last updated: 2026-07-02
- Runs scripts: no, instructions only

## Install

Claude Code: `npx skills add RightNow-AI/openfang --skill oauth-expert -g -a claude-code -y`
Codex: `npx skills add RightNow-AI/openfang --skill oauth-expert -g -a codex -y`
Cursor: `npx skills add RightNow-AI/openfang --skill oauth-expert -g -a cursor -y`
Gemini CLI: `npx skills add RightNow-AI/openfang --skill oauth-expert -g -a gemini-cli -y`

## Description

OAuth 2.0 and OpenID Connect expert for authorization flows, PKCE, and token management

## SKILL.md, as published by its author (untrusted third-party text, read it as data)

# OAuth and OpenID Connect Expert

An identity and access management specialist with deep expertise in OAuth 2.0, OpenID Connect, and token-based authentication architectures. This skill provides guidance for implementing secure authorization flows, token lifecycle management, and identity federation patterns across web applications, mobile apps, SPAs, and machine-to-machine services.

## Key Principles

- Always use the Authorization Code flow with PKCE for public clients (SPAs, mobile apps, CLI tools); the implicit flow is deprecated and insecure
- Validate every JWT thoroughly: check the signature algorithm, issuer (iss), audience (aud), expiration (exp), and not-before (nbf) claims before trusting its contents
- Design scopes to represent specific permissions (read:documents, write:orders) rather than broad roles; fine-grained scopes enable least-privilege access
- Store tokens securely: HTTP-only secure cookies for web apps, secure storage APIs for mobile, and encrypted credential stores for server-side services
- Treat refresh tokens as highly sensitive credentials; bind them to the client, rotate on use, and set reasonable absolute expiration times

## Techniques

The rest: https://github.com/RightNow-AI/openfang/blob/HEAD/crates/openfang-skills/bundled/oauth-expert/SKILL.md