This is the comprehensive OAuth2 reference you'll want when implementing anything from social login to M2M authentication. It walks through all the grant types with actual flow diagrams and when to use each one, covers PKCE for SPAs and mobile apps, and explains token management strategies without assuming you already know the difference between authorization and resource servers. The best part is the practical guidance: it tells you straight up that implicit flow is deprecated and why, explains device flow for smart TVs and CLI tools, and covers the security considerations that matter in production. If you're migrating from sessions to tokens or building an authorization server from scratch, this gives you the full picture in one place.

skills.sh installs
603
GitHub stars
63
last updated
Aug 21, 2026

Install

$ npx -y skills add manutej/luxor-claude-marketplace --skill oauth2-authentication --agent claude-code

Installs into .claude/skills of the current project.

Files

OAuth2 Authentication

A comprehensive skill for implementing secure authentication and authorization using OAuth2 and OpenID Connect. This skill covers all major authorization flows, token management strategies, security best practices, and real-world implementation patterns for web, mobile, and API applications.

When to Use This Skill

Use this skill when:

  • Implementing user authentication in web applications, SPAs, or mobile apps
  • Building API authorization with access tokens and refresh tokens
  • Integrating social login (Google, GitHub, Facebook, Twitter, etc.)
  • Creating secure machine-to-machine (M2M) authentication
  • Implementing single sign-on (SSO) across multiple applications
  • Building an OAuth2 authorization server or identity provider
  • Adding delegated authorization to allow third-party access
  • Securing APIs with token-based authentication
  • Implementing passwordless authentication flows
  • Adding multi-tenant authentication with organization-specific rules
  • Migrating from session-based to token-based authentication
  • Implementing fine-grained access control with OAuth2 scopes

Core Concepts

OAuth2 Fundamentals

Sponsors

Details

Repository
github.com/manutej/luxor-claude-marketplace
Categories
Backend & APIs, Security
First seen
Jun 3, 2026

More from manutej/luxor-claude-marketplace

All 66
1encoredev avatarencore-go-apiencoredev/skillsDefine typed API endpoints in Encore Go using `//encore:api` annotations. Covers typed request/response structs, path/query/header/cookie params, and error retu597skills.sh installs
2aj-geddes avatardatabase-schema-documentationaj-geddes/useful-ai-promptsDocument database schemas, ERD diagrams, table relationships, indexes, and constraints. Use when documenting database schema, creating ERD diagrams, or writing 576skills.sh installs
3aj-geddes avatarapi-error-handlingaj-geddes/useful-ai-promptsImplement comprehensive API error handling with standardized error responses, logging, monitoring, retry logic, and validation patterns. Use when building resil513skills.sh installs
4yoanbernabeu avatarsupabase-audit-tables-readyoanbernabeu/supabase-pentest-skillsAttempt to read data from exposed tables to verify actual data exposure and RLS effectiveness.511skills.sh installs
5manutej avatargrpc-microservicesmanutej/luxor-claude-marketplaceComprehensive gRPC microservices skill covering protobuf schemas, service definitions, streaming patterns, interceptors, load balancing, and production gRPC arc510skills.sh installs
6yoanbernabeu avatarsupabase-audit-buckets-publicyoanbernabeu/supabase-pentest-skillsIdentify storage buckets that are publicly accessible and may contain sensitive data.509skills.sh installs