OAuth 2.0 + OIDC para Educabot (Go/TS/React/RN). Authorization Code + PKCE, id_token validation, multi-provider (Google, Microsoft, Apple, GitHub).
The English summary is being prepared. Showing the original description.
Run score Not tested
See how to installReview the instructions the agent will receive before you install.
| Flow | Uso | Estado |
|---|---|---|
| Authorization Code + PKCE | SPA, mobile, web server | Default |
| Authorization Code (client_secret) | Backend confidencial | OK |
| Client Credentials | Server-to-server M2M | OK |
| Implicit / Password Grant | — | Deprecado |
Regla: siempre Authorization Code + PKCE, incluso con client_secret (defense in depth).
| Provider | Scopes mínimos | Notas |
|---|---|---|
| Google (default) | openid email profile | hd claim para dominio escolar. +classroom.rosters.readonly si Classroom |
| Microsoft | openid email profile User.Read | Tenant-specific o common |
| Apple | name email | Requerido en iOS si hay otros social logins. ES256, email puede ser relay |
| GitHub | read:user user:email | No OIDC — parsear /user. Solo staff interno |
golang.org/x/oauth2 + github.com/coreos/go-oidc/v3openid-client (evitar passport-*)@react-oauth/google (solo Google) o flow PKCE manual (multi-provider)expo-auth-session. Bare RN: react-native-app-authcode_verifier = random 43-128 chars → code_challenge = base64url(sha256(verifier)). Cliente genera verifier, envía challenge en /authorize, envía verifier en /token.
| Parámetro | Propósito | Validación |
|---|---|---|
state | CSRF | Random opaco, guardar server-side, comparar en callback |
nonce | Replay protection | Incluir en request, verificar en id_token |
code_challenge S256 | PKCE | Ver arriba |
redirect_uri | Whitelist exacto | HTTPS siempre (excepto localhost dev) |
Verificar: signature (JWKS), iss exacto, aud = client_id, exp no vencido, nonce match, hd si Workspace.
id_token NO es session token. Crear sesión propia:
Nunca localStorage/sessionStorage para tokens.
Verificar email_verified=true → buscar por email → pedir confirmación al usuario → guardar en user_identities(user_id, provider, provider_sub). No auto-linkear sin confirmación.
Validar claim hd en id_token server-side. Mapear via schools(domain, tenant_id).
No registro individual de menores. Usar Google Classroom rostering (cuenta Workspace gestionada por escuela). No pedir datos extra sin consentimiento parental.
state, id_token como sessionstate + nonce generados y validadosemail_verified=true antes de trusthd validado si Workspace escolarNo reviews yet. Tell others what you thought.
No login needed. Share how it worked for you, ask a question, or note where it did not run.
No comments yet. Be the first to write one.
Plan, design, and implement A/B tests and experiments with statistical rigor. Covers hypothesis frameworks, sample sizing, metrics, and result analysis.
The English summary is being prepared. Showing the original description.
Web/mobile accessibility decision guide: WCAG 2.2 AA, ARIA, keyboard nav, focus management, contrast, testing. Use for: a11y, accessibility, wcag, aria, screen reader, keyboard, contrast.
The English summary is being prepared. Showing the original description.
Generate, iterate, and scale ad creative for paid advertising across Google, Meta, LinkedIn, and X. Covers platform specs, creative frameworks, and quality validation.
The English summary is being prepared. Showing the original description.
Musica interactiva para juegos: layering vertical, re-secuenciacion horizontal, stingers, reglas de transicion con sync points, y mapeo de estados de gameplay a musica. Usar para: musica adaptativa, sistema de musica dinamica, transiciones musicales, combat music.
The English summary is being prepared. Showing the original description.
Design multi-agent systems, create agent architectures, define communication patterns, and build autonomous agent workflows with structured evaluation frameworks.
The English summary is being prepared. Showing the original description.
Inter-agent communication protocol for C-suite agent teams. Defines invocation syntax, loop prevention, isolation rules, response formats, and quality loops.
The English summary is being prepared. Showing the original description.