Oauth Implementation

This walks you through implementing OAuth 2.0, OpenID Connect, and JWT authentication from scratch. You get complete server implementations in Node.js, Python, and Java Spring Security, covering authorization code flows, token management, and PKCE for mobile clients. The quick start drops you into a functional Express OAuth server with all the core components. Best practices are solid and opinionated: use PKCE, rotate tokens, never touch implicit flow, keep access tokens short-lived. If you're building authentication for a new app or integrating SSO across microservices, this gives you the security patterns without having to piece together blog posts and RFCs.

skills.sh installs: 558
GitHub stars: 379
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add aj-geddes/useful-ai-prompts --skill oauth-implementation --agent claude-code

Installs into .claude/skills of the current project.

Files

Overview

Implement industry-standard OAuth 2.0 and OpenID Connect authentication flows with JWT tokens, refresh tokens, and secure session management.

When to Use

User authentication systems
Third-party API integration
Single Sign-On (SSO) implementation
Mobile app authentication
Microservices security
Social login integration

Quick Start

Minimal working example:

// oauth-server.js - Complete OAuth 2.0 implementation
const express = require("express");
const jwt = require("jsonwebtoken");
const crypto = require("crypto");
const bcrypt = require("bcrypt");

class OAuthServer {
  constructor() {
    this.app = express();
    this.clients = new Map();
    this.authorizationCodes = new Map();
    this.refreshTokens = new Map();
    this.accessTokens = new Map();

    // JWT signing keys
    this.privateKey = process.env.JWT_PRIVATE_KEY;
    this.publicKey = process.env.JWT_PUBLIC_KEY;

    this.setupRoutes();
  }

SKILL.md on GitHub