“oauth”的搜索结果

指导在VPS或容器中运行的Hermes连接需要OAuth的远程MCP服务器，梳理认证回调无法到达的问题，并协助手动授权和连接故障诊断。

• 连接远程Hermes与OAuth MCP
• 排查授权后卡在localhost的问题
• 没有交互式终端时手动授权

Implement and debug Google OAuth 2.0 refresh tokens bound to a client key. Covers key generation, signed DPoP proofs that demonstrate key possession, and nonce challenge retries in WebCrypto and JavaScript environments.

中文简介正在准备中。当前显示英语简介。

• Bind Google OAuth refresh tokens to a client key
• Debug DPoP proof signatures and nonce retries
• Plan a backend for a browser application using DPoP

Configure OAuth 2.0 authorization for web and mobile apps or service communication. Choose suitable flows, implement PKCE to protect authorization codes, limit permissions, and manage token storage, renewal, and revocation with security checks.

中文简介正在准备中。当前显示英语简介。

• Implement authorization with PKCE for web and mobile apps
• Configure authorization for service-to-service communication
• Review token storage, renewal, and revocation

Configure OAuth, the authorization flow used for provider sign-in, with portless development URLs. It guides callback registration and authentication library settings, helping diagnose rejected domains, redirect URL mismatches, and callbacks that point to the wrong address.

中文简介正在准备中。当前显示英语简介。

• Setting up provider sign-in with portless development URLs
• Diagnosing redirect URL mismatch errors
• Using an owned domain when .localhost is rejected

Build remote MCP servers, which let AI agents call external tools, on Cloudflare Workers. This skill covers server code, tool definitions, OAuth authentication, local testing, deployment, and connecting a Codex client.

中文简介正在准备中。当前显示英语简介。

• Building a remote MCP server
• Adding OAuth authentication to MCP tools
• Exposing external APIs as tools for AI agents

Manage OmniRoute API keys and provider authentication from the command line. Register, rotate, or revoke keys, inspect usage and expiration, set spending and model restrictions, and start or check OAuth sign-in connections.

中文简介正在准备中。当前显示英语简介。

• Registering provider API keys and listing existing keys
• Rotating keys with a grace period or revoking them
• Checking usage and setting spending or model restrictions

Trace mailbox abuse in a CTF sandbox, a controlled security challenge environment. The skill connects OAuth permissions, forwarding rules, delegated access, and message logs to concrete mail effects, documenting the smallest reproducible sequence and supporting evidence.

中文简介正在准备中。当前显示英语简介。

• Trace how OAuth consent enables mailbox access
• Investigate forwarding and inbox rule effects
• Verify shared mailbox and delegated access

Investigate stolen OAuth tokens and their reuse in Microsoft Entra ID through sign-in log analysis. Follow response procedures for revoking sessions and reviewing app permissions, and configure device-bound token protection and session monitoring for Azure and M365 environments.

中文简介正在准备中。当前显示英语简介。

• Investigating anomalous token usage alerts
• Responding to suspected session hijacking
• Finding token reuse in sign-in logs

Launch a standalone Chrome browser in a Daytona sandbox and control it through CDP, a browser debugging connection. Use it to complete sign-in, OAuth authorization, and web administration flows, then verify the visible results.

中文简介正在准备中。当前显示英语简介。

• Signing into Den Web in a standalone browser
• Completing OAuth authorization pages
• Configuring settings available only on the web

Use when managing Connected Apps for integration purposes — configuring OAuth policies, IP restrictions, refresh token expiry, pre-authorization assignment via profile or permission set, and monitoring connected app usage via EventLogFile. Also covers the running-integration operations: revoking a grant, rotating the consumer key or secret, pairing the app to an integration user's permission set, and the periodic review. Trigger keywords: 'revoke OAuth token', 'DeleteToken', 'OauthToken query returns nothing', 'ipRelaxation ENFORCE', 'permissionSetName', 'PermissionSetAssignment ExpirationDate', 'LoginHistory Application', 'connected app quarterly review', 'rotate consumer secret'. NOT for choosing which OAuth grant flow to implement — use integration/oauth-flows-and-connected-apps. NOT for decoding a specific OAuth error such as invalid_grant — use admin/connected-app-troubleshooting. NOT for authoring the full connectedApp / External Client App / Named Credential file or choosing the auth artefact — use admin/connected-apps-and-auth.

中文简介正在准备中。当前显示原文说明。

Trace OAuth and OIDC sign-in flows in a CTF sandbox, from redirects through token exchange to application acceptance. Show where tokens become a recognized identity or permission, and preserve the smallest reproducible flow.

中文简介正在准备中。当前显示英语简介。

• Trace sign-in redirects and callback parameters
• Inspect state, nonce, and PKCE validation
• Check how tokens become application identity or permissions

Prepare a local LangBot environment for development and browser testing. The skill covers service startup, shared connection settings, browser access, proxy troubleshooting, and reusable login profiles, with guidance for Linux and WSL environments.

中文简介正在准备中。当前显示英语简介。

• Prepare a local Linux or WSL development environment
• Start services and verify WebUI access
• Choose Computer Use or Playwright MCP for browser control

Prepare a Python environment for Mixpanel analysis by installing required libraries and checking credentials and connectivity. Use it for first-time setup, missing dependencies, or guidance on service account and OAuth sign-in options.

中文简介正在准备中。当前显示英语简介。

• Set up a new environment for Mixpanel analysis
• Install missing Python analysis libraries
• Configure service account or OAuth credentials

Troubleshooting Connected App OAuth flows — IP relaxation vs IP restriction, refresh token policy traps (default kills the connection on first refresh), session-revocation semantics, the OAuth error-code catalog (`invalid_grant`, `invalid_client_id`, `unsupported_grant_type`), per-user vs admin-pre-approved flows, and the user-policy check (Connected App must be assigned to the user via profile / permset). Covers the Login History debug trail. NOT for designing the OAuth flow itself — use integration/oauth-flows-and-connected-apps. NOT for a SAML / SSO login failure — use security/sso-saml-troubleshooting. Trigger keywords: 'invalid_grant', 'OAUTH_APP_BLOCKED', 'redirect_uri_mismatch', 'LoginHistory Status', 'LoginSubType', 'OauthRefreshToken', 'ForwardedForIp', 'SetupAuditTrail connected app', 'refreshTokenPolicy zero', 'isSecretRequiredForRefreshToken', 'works once then fails', 'diagnosis record'.

中文简介正在准备中。当前显示原文说明。

Guide authorized API security assessments from endpoint discovery to documented findings. Use a staged workflow to examine authentication, access permissions, input handling, data exposure, and request limits across REST, GraphQL, WebSocket, and SOAP APIs.

中文简介正在准备中。当前显示英语简介。

• Planning an authorized API security assessment
• Reviewing JWT and OAuth 2.0 authentication
• Checking permissions across users and roles

Build connections between applications and external APIs, interfaces used to exchange data with other services. The skill guides authentication, data conversion, webhook verification, request limits, retries, and troubleshooting to support reliable API clients.

中文简介正在准备中。当前显示英语简介。

• Connect payment, email, or SMS services to an application
• Implement OAuth and manage API credentials
• Verify webhooks and process incoming events

Operate Chrome or Brave using signed-in browser sessions to verify deployed pages, reproduce bugs, inspect page structure, and examine errors or network traffic. An optional macOS bridge extends control to native applications and operating system input.

中文简介正在准备中。当前显示英语简介。

• Verify page appearance after deployment
• Reproduce blank pages and disappearing content
• Inspect console errors and network traffic

Design authentication and access permissions for web apps, mobile apps, and backend services using OAuth 2.0 and OpenID Connect. Get guidance on authorization flows, token validation, secure storage, renewal, and revocation.

中文简介正在准备中。当前显示英语简介。

• Add login to a web or mobile app
• Review token storage and renewal
• Design access permissions between services

Google OAuth クライアント設定の手順を案内する。「OAuth 設定」「Google 認証の準備」「クライアント ID 作成」「認証手順を教えて」「Google ログイン準備」「OAuth セットアップ」「認証設定したい」などで起動。

中文简介正在准备中。当前显示原文说明。

Tests OAuth 2.0 and OpenID Connect implementations for security flaws including authorization code interception, redirect URI manipulation, CSRF in OAuth flows, token leakage, scope escalation, and PKCE bypass. The tester evaluates the authorization server, client application, and token handling for common misconfigurations that enable account takeover or unauthorized access. Activates for requests involving OAuth security testing, OIDC vulnerability assessment, OAuth2 redirect bypass, or aut...

中文简介正在准备中。当前显示原文说明。

Inspect a site's login flow for token leaks, missing protections against forged requests, exposed session cookies, and OAuth configuration issues. Produce a structured findings report with severity ratings and a pass, warn, or fail verdict.

中文简介正在准备中。当前显示英语简介。

• Reviewing a login flow before deployment
• Investigating suspected token leaks
• Checking authentication redirects

Review suspicious emails for phishing and business email fraud by examining sender authentication, message content, links, and attachments. Organize indicators of compromise, which are traces of malicious activity, and recommend controls for the email environment.

中文简介正在准备中。当前显示英语简介。

• Investigating a suspected phishing email
• Reviewing SPF, DKIM, and DMARC settings
• Checking for business email fraud

Assess authorized single sign-on systems using SAML, OIDC, and OAuth2. Map the login flow, check signatures, redirects, and token validation, then document reproducible findings and their impact, including identity or tenant confusion.

中文简介正在准备中。当前显示英语简介。

• Review redirect and token checks in a single sign-on flow
• Assess SAML signatures and assertion handling
• Investigate tenant confusion and logout failures

Plan and implement user login and access permissions using sessions, JWT tokens, or OAuth2. Apply role-based permissions, protect APIs, and review common weaknesses in password handling, cookies, token expiration, and server-side checks.

中文简介正在准备中。当前显示英语简介。

• Implementing user login and logout
• Adding social login or enterprise SSO
• Controlling access by user role