auth-security
OAuth 2.1 + JWT authentication security best practices. Use when implementing auth, API authorization, token management. Follows RFC 9700 (2025).
OAuth 2.1 + JWT authentication security best practices. Use when implementing auth, API authorization, token management. Follows RFC 9700 (2025).
Validate account security and authentication protocols.
Add authentication with Better Auth (TypeScript). Use for email/password, OAuth providers (Google, GitHub), 2FA/MFA, passkeys/WebAuthn, sessions, RBAC, rate limiting.
Security auditing for Rust/WebAssembly applications. Identifies vulnerabilities, reviews unsafe code, validates input handling, and ensures secure defaults. Follows OWASP guidelines and Rust security best practices.
Claude Codeで秘密情報を安全に管理するための多層防御アプローチガイド。APIトークン、DB認証情報、SSH鍵などを保護する3層防御戦略(物理的分離 + deny設定 + PreToolUse Hook)。
Provides security guidelines for input validation, authentication, authorization, and secure coding practices. Use when implementing auth, handling user input, working with credentials, or conducting security reviews.
Get a secret value. Requires authentication. Use for Agentuity cloud platform operations
Automatically validates security best practices and prevents vulnerabilities
Master Redis security - authentication, ACL, TLS encryption, network hardening, and production security best practices
Provides security guidelines for input validation, authentication, authorization, and secure coding practices. Use when implementing auth, handling user input, working with credentials, or conducting security reviews.
Expert-level application security, OWASP Top 10, penetration testing, and security best practices
Phase 5 - Validation checks before publishing
BigCommerce OAuth, embedded app JWT validation, and pre-registration patterns for VioletConnect
Better Auth integration for Electron desktop apps with secure IPC, context isolation, and encrypted session storage
Add authorization methods for a new entity to AuthorizationService. Use after creating a resource service. Triggers on "add permissions", "authorization methods", "entity permissions", "add auth methods".
Systematic verification of codebase context before code generation to prevent assumption bugs. Trigger keywords: context, assumptions, helpers, authentication, current_user, verify, validate context
Execute internal red team security audits to identify protocol vulnerabilities and alignment risks.
Implement authentication providers for Umbraco backoffice using official docs
Implement Clerk authentication with Next.js 16 proxy pattern, session claims, onboarding gates, and user metadata management. Use when working with authentication, authorization, or user session management.
Claude implements OAuth 2.0 and OpenID Connect authorization flows. Use when adding social login, integrating OAuth providers, managing tokens, or securing APIs with OAuth.