Oauth2

x-api helps you work with the X/Twitter API for posting, reading timelines, search, and basic analytics. It guides auth choices, endpoint selection, and request shape for API Development tasks, including bearer-token reads and OAuth 1.0a write flows.

springboot-security is a practical Spring Boot security guide for authentication, authorization, validation, CSRF/CORS, secrets, headers, rate limiting, and dependency checks. Use the springboot-security skill for Security Audit work or to harden a Java service with fewer security misconfiguration risks.

auth-implementation-patterns is a practical skill for designing and implementing authentication and authorization patterns, including sessions, JWT, OAuth2/OIDC, RBAC, and access control checks for APIs and apps.

azure-identity-ts helps TypeScript apps authenticate to Azure services with @azure/identity. Use this skill to choose the right credential for local development, production, CI/CD, managed identity, service principals, workload identity, or browser login. It is especially useful for Backend Development and clear azure-identity-ts guide workflows.

create-auth-skill helps add Better Auth to JS or TS apps with a planning-first workflow. It scans your repo, detects framework and database signals, asks structured setup questions, then guides route wiring, providers, auth pages, and migration-safe implementation.

oauth helps you implement and troubleshoot OAuth 2.0/2.1 in Fastify apps for login, access tokens, PKCE, refresh tokens, and route protection. Use it as an oauth guide for backend development when you need practical oauth usage, install steps, and help resolving redirect URI, scope, CSRF, or token validation issues.

detecting-oauth-token-theft helps investigate OAuth token theft, replay, and session hijacking in Microsoft Entra ID and M365. Use this detecting-oauth-token-theft skill for Security Audit, incident response, and hardening reviews. It focuses on sign-in anomalies, suspicious scopes, new devices, and containment steps.

The configuring-oauth2-authorization-flow skill helps you design and validate OAuth 2.0 authorization setups for Access Control, with Authorization Code + PKCE, Client Credentials, and Device Authorization Grant. Use this configuring-oauth2-authorization-flow guide to choose grants, set redirect URIs, review scopes, and align with OAuth 2.1 best practices.

security skill for OWASP patterns, secrets management, and security testing. Use it to review auth, user input, API keys, env vars, and repo hygiene, especially for Security Audit work.

reddit-api helps you plan and implement Reddit API integrations with PRAW for Python or Snoowrap for Node.js. Use this reddit-api skill for API Development when you need setup guidance for app creation, authentication, rate limits, and practical usage for bots, tools, and data workflows.

azure-identity-rust helps Rust apps authenticate to Azure SDK clients with Microsoft Entra ID. This skill covers install, usage, and credential selection for backend development, local workflows, managed identity, and service principal auth. It also helps avoid deprecated azure_sdk_* crates and use official azure_* crates correctly.

entra-agent-id is a Microsoft Entra Agent ID preview skill for backend development teams building OAuth2-capable AI agent identities with Graph beta. It covers blueprint setup, blueprint principals, agent identities, permissions, sponsors, workload identity federation, and sidecar-based auth. Use it to understand entra-agent-id install, usage, and rollout constraints.