Skip to main content
affpapa.org
RU EN
skill CX Codex

oauth2-authentication — Claude Code skill: how to install

Guides your assistant through configuring OAuth2 and OpenID Connect flows. Helps secure API endpoints, configure PKCE for public clients, and manage access tokens.

Install into Claude Code · Skills CLI (Vercel) All methods and platforms ↓ 
npx skills add manutej/luxor-claude-marketplace --skill oauth2-authentication -a claude-code
Open on GitHub

What oauth2-authentication does

The skill provides step-by-step guidance on standard authorization patterns. It covers Authorization Code with PKCE for single-page and mobile apps, traditional server-side flows with client secrets, and Client Credentials for headless service-to-service communication. It also details the device authorization flow intended for CLI tools and connected displays.

Legacy patterns receive direct warnings: Implicit Flow and Resource Owner Password Credentials are flagged as security hazards. Public applications unable to safeguard a client secret must use PKCE, because skipping code verifier validation leaves auth code interception attacks wide open.

What it helps with

  • configure Authorization Code with PKCE for single-page applications
  • implement machine-to-machine auth via Client Credentials
  • structure OAuth2 permission scopes for API endpoints
  • replace insecure Implicit Flow patterns with code exchange flows

Example prompts for the agent

  • Implement PKCE authorization code exchange for our mobile client
  • Set up a machine-to-machine Client Credentials flow between backend services
  • Define OAuth2 scopes and validate incoming access tokens on our API

How to install oauth2-authentication

1Skills CLI (Vercel)

npx skills add manutej/luxor-claude-marketplace --skill oauth2-authentication -a claude-code

2Manually: put the files in place

~/.claude/skills/oauth2-authentication/SKILL.md

Copy the whole skill folder; for one project use .claude/skills/oauth2-authentication/

Step by step, with commands for each platform: How to install skills in Claude Code: five ways

Questions about oauth2-authentication

How to install oauth2-authentication in Claude Code?

Run npx skills add manutej/luxor-claude-marketplace --skill oauth2-authentication -a claude-code.

What flows does oauth2-authentication cover?

It details Authorization Code, PKCE, Client Credentials, and Device Flow, while outlining security flaws in deprecated options like Implicit and ROPC.

Why does the skill discourage Resource Owner Password Credentials?

The flow forces clients to handle plain user credentials directly and lacks multi-factor authentication support. The guide recommends Authorization Code with PKCE instead.

Similar skills

All skills for Security →
oauth2-provider-design Samuel Berthe Guides the architectural design of an OAuth 2.1 authorization server for B2B SaaS. Useful when issuing tokens to third-party clients and defining consent flows. CX Codex +1 7,800installs testing-oauth2-implementation-flaws mahipal A skill that probes OAuth 2.0 and OpenID Connect flows for code interception, redirect URI tricks, CSRF, token leakage and PKCE bypass. CX Codex +1 350installs oauth-oidc-misconfiguration yaklang Testing playbook for OAuth 2.0 and OpenID Connect configurations. It guides security reviews of redirect URIs, state parameters, PKCE enforcement, and account binding flows. CX Codex +1 3,700installs authentication codewithmukesh A skill that feeds your coding agent working patterns for ASP.NET Core auth: JWT bearer, OpenID Connect, Identity, authorization policies. CX Codex +1 2,800installs testing-api-authentication-weaknesses mahipal Tests REST API authentication for bypasses, broken JWT implementations, and unprotected endpoints. Useful for security auditing before production. CX Codex +1 484installs oauth-implementation Mindrally Guides coding agents through OAuth 2.0 and 2.1 setup with PKCE, state checks, and token rotation. Built to prevent insecure grants like implicit flow. CX Codex +1 719installs

From the same set65

ux-principles Gives your coding agent usability heuristics, user research methods and accessibility checks, so interface work follows known rules instead of guesswork. CX Codex +1 836installs frontend-architecture A skill for planning frontend structure: layers, patterns, state management and module boundaries. Useful once an app outgrows a flat folder of components. CX Codex +1 722installs axum-web-framework Guides coding assistants through building Rust web services with Axum. It covers routing, extractors, Tower middleware, and state handling. CX Codex +1 649installs alembic A skill that walks your agent through Alembic migrations on SQLAlchemy projects, from alembic init to production rollout and rollback. CX Codex +1 644installs aws-cloud-architecture Plan AWS infrastructure with guidance on compute, storage, security, serverless services, and costs. Useful when designing or configuring a cloud architecture. CX Codex +1 594installs fastapi-microservices-development Guide for structuring Python microservices using FastAPI, covering dependency injection, asynchronous routes, and service-to-service communication. CX Codex +1 587installs wireframing A skill for interface design work: it walks from rough sketches and screen structure to a layout close to the final design. CX Codex +1 566installs expressjs-development A skill that feeds your coding agent Express.js patterns: routing, middleware, request and response handling, error handling. CX Codex +1 555installs

Project sponsors

Companies that keep this analytics open
Gold sponsor
Nutra.Club

Impressions, clicks and code copies — open statistics. We keep the numbers public for the same reason NeBlask itself is public. Become a sponsor