OAuth Flow Architect

This skill provides guidance for implementing OAuth 2.0 and OpenID Connect (OIDC) authentication flows securely and correctly.

Core Competencies

• OAuth 2.0 Flows: Authorization Code, PKCE, Client Credentials
• OpenID Connect: ID tokens, UserInfo, discovery
• Token Management: Refresh, revocation, storage
• Security: CSRF, token theft, redirect URI validation

OAuth 2.0 Fundamentals

The Problem OAuth Solves