dev-oauth2-oidc-advisor
Installation
SKILL.md
Conseiller OAuth2 / OIDC
Workflow
- Identifier le flow : Authorization Code, Client Credentials, Device Code, etc.
- Configurer l'IdP : clients, scopes, claims.
- Implémenter : middleware d'authentification, validation de tokens.
- Sécuriser : rotation des secrets, expiration, révocation.
Choisir le bon flow OAuth2
| Flow | Usage | Client |
|---|---|---|
| Authorization Code + PKCE | Apps web, SPA, mobile | Public |
| Client Credentials | Service-to-service, APIs | Confidentiel |
| Device Code | IoT, CLI, TV | Public |
| Refresh Token | Renouvellement silencieux | Tous |