Stats
Actions
Tags
Configures secure OAuth 2.0 authorization flows including PKCE-augmented auth code, client credentials, and device grants. Covers PKCE implementation, token lifecycle management, scopes, and OAuth 2.1 compliance.
How this skill is triggered — by the user, by Claude, or both
Slash command
/cybersecurity-skills-zh:configuring-oauth2-authorization-flowThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
配置安全的 OAuth 2.0 授权流程，包括带 PKCE（Proof Key for Code Exchange）的授权码流、客户端凭据和设备授权授予。本技能涵盖流程选择、PKCE 实施、令牌生命周期管理、范围设计以及符合 OAuth 2.1 安全要求。
配置安全的 OAuth 2.0 授权流程，包括带 PKCE（Proof Key for Code Exchange）的授权码流、客户端凭据和设备授权授予。本技能涵盖流程选择、PKCE 实施、令牌生命周期管理、范围设计以及符合 OAuth 2.1 安全要求。
PKCE（RFC 7636）防止授权码拦截攻击：
code_verifier（43-128 个字符，不保留 URI 字符）code_challenge = BASE64URL(SHA256(code_verifier))code_challenge 和 code_challenge_method=S256code_verifierSHA256(code_verifier) 与存储的 code_challenge 匹配read:users、write:orders、admin:settings| 控制项 | NIST 800-53 | 描述 |
|---|---|---|
| 访问控制 | AC-3 | 基于令牌的访问执行 |
| 认证 | IA-5 | 客户端凭据管理 |
| 会话管理 | SC-23 | 令牌生命周期管理 |
| 审计 | AU-3 | 记录所有令牌颁发和撤销 |
| 加密保护 | SC-13 | PKCE 和令牌签名 |
npx claudepluginhub killvxk/cybersecurity-skills-zhImplement secure OAuth 2.0 flows: Authorization Code with PKCE, Client Credentials, and Device Grant. Covers token lifecycle, scope design, and OAuth 2.1 security requirements.
Configures OAuth 2.0 authorization flows including Authorization Code with PKCE, Client Credentials, and Device Authorization Grant. Covers flow selection, PKCE implementation, token lifecycle, and OAuth 2.1 security best practices.
Configures secure OAuth 2.0 authorization flows: Authorization Code with PKCE, Client Credentials, Device Grant. Covers PKCE implementation, token lifecycle, scopes, and OAuth 2.1 best practices for IAM.