oauth-oidc-protocols
OAuth 2.0 and OpenID Connect protocol fundamentals including authorization code flow with PKCE, client credentials, refresh tokens, discovery documents, JWKS, and token introspection. Protocol-level troubleshooting and compliance.
Install
With your agent
Install OMGSkills skill "duendesoftware/duende-skills:skills/oauth-oidc-protocols" into this agent's normal skills directory: call the OMGSkills MCP get_install_plan tool for your agent and run the script it returns (it installs only the pinned commit and verifies SKILL.md), and stop if MCP or the pin is unavailable. Do not overwrite or change existing skills without asking me.
Manual command
git clone https://github.com/DuendeSoftware/duende-skills /tmp/duende-skills && ln -s /tmp/duende-skills/skills/oauth-oidc-protocols ~/.claude/skills/oauth-oidc-protocolsFrom README
OAuth 2.0 & OpenID Connect Protocols When to Use This Skill Use this skill when: Choosing the correct OAuth 2.0 grant type for a scenario Debugging token exchange flows or redirect-based authentication Understanding what claims and headers appear in identity tokens vs access tokens Implementing or troubleshooting PKCE (Proof Key for Code Exchange) Working with discovery documents, JWKS endpoints, or token introspection Reviewing security properties of different protocol flows Implementing refresh token rotation or token revocation Core Principles OAuth 2.0 is for Authorization, OIDC is for Authentication — OAuth alone does not tell you who the user is. OpenID Connect adds an identity layer (the ID token) on top of OAuth. Authorization Code + PKCE is the Universal Flow — Use it for web apps, SPAs (via BFF), native apps, and any interactive scenario. It replaced implicit flow. Tokens are Opaque to Clients — Clients should not parse access tokens.
More from this repo
aspnetcore-authentication
ASP.NET Core authentication middleware configuration including OpenID Connect, JWT Bearer, cookie authentication,...
aspnetcore-authorization
ASP.NET Core authorization patterns including policy-based authorization, IAuthorizationHandler implementations,...
claims-authorization
Claims transformation and profile service patterns for Duende IdentityServer — IProfileService, IClaimsTransformation,...