Lazycat Auth Integration

This handles auth integration for Lazycat MicroServer, a Chinese platform that wraps apps with OIDC single sign-on and injects user identity via HTTP headers. You configure it through a manifest file where you specify your OIDC callback path and which routes should be public. The platform automatically adds headers like X-HC-User-ID and X-HC-User-Role to authenticated requests, so your backend can trust them without additional verification. It also covers API tokens for scripted access when you can't rely on browser cookies. Useful if you're deploying on this specific infrastructure and need to wire up their auth system without building your own login flow.

skills.sh installs: 231
GitHub stars: 61
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add whoamihappyhacking/lazycat-skills --skill lazycat-auth-integration --agent claude-code

Installs into .claude/skills of the current project.

Files

懒猫微服认证接入

先确认目标 lzcos 与 lzc-cli 版本；编写配置前必须读取 references/spec-sync.md，按其中流程现场核对官方原文。LPK V2 示例要求 lzcos >= 1.5.0、lzc-cli >= 2.0.0；更老目标不能直接套用。

先选机制

需求	机制	最低系统版本	必读
应用使用统一登录	OIDC	`1.3.5+`	`references/oidc.md`
后端识别平台用户	Ingress 注入 Header	以目标版本官方文档为准	`references/http-request-headers.md`
脚本访问系统 API	API Auth Token	`1.4.3+`	`references/api-auth-token.md`
极少数路径绕过平台 HTTP 登录	`public_path`	以目标版本官方文档为准	`references/public-api.md`
应用代表当前用户访问自身/其他应用	`.lzcx` + 委托票据	`1.5.2+`	`references/app-interconnect.md`

OIDC 最小流程

从上游应用文档确认准确回调路径。
在 lzc-manifest.yml 设置 application.oidc_redirect_path；没有此字段就不会生成 OIDC 环境变量。
仅把应用需要的 OIDC 变量传入对应服务，优先使用 issuer discovery。
不把动态生成的 client secret 写入镜像、数据库或文档。

以下沿用官方 Outline 镜像与回调，只展示 OIDC 相关片段；Outline 所需数据库、Redis、存储及其他环境变量仍须按其部署文档配置，本片段不能独立启动。

# package.yml（LPK V2 静态元数据片段）
package: cloud.lazycat.app.outline
version: 0.0.1
name: Outline

SKILL.md on GitHub

Details

Repository: github.com/whoamihappyhacking/lazycat-skills
Category: Backend & APIs
First seen: Jun 3, 2026

More from whoamihappyhacking/lazycat-skills

All 5