القائمة
Create a pull request following QAuth conventions with gh pr create
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
Auth engine rules for QAuth. Use when working with CredentialProvider implementations, token claim generation, the provider registry, or the federation layer. Enforces the pluggable provider pattern and correct token claim behaviour.
OAuth 2.1 / OIDC rules for QAuth. Use when working with authorization endpoints, token flows, PKCE, JWKS, OIDC discovery, or spec compliance (RFC 9700, OIDC Core 1.0). Covers endpoint behaviour, email claim rules, and token security.
Database schema rules for QAuth. Use when working with the identity model, Drizzle ORM, migrations, repositories, or claim resolution. Reflects the CURRENT shipped schema — the identifier-abstraction model (ADR-002, IMPLEMENTED via Epic
Link GitHub issues in parent-child (sub-issue) relationships using GraphQL
Add a GitHub issue to a project board using gh project item-add
Create a new GitHub issue following QAuth project conventions using gh issue create
| name | create-pr |
| description | Create a pull request following QAuth conventions with gh pr create |
| disable-model-invocation | true |
Create a PR with gh pr create. For the title format (Conventional Commits +
scope) and PR body format (Closes #N / Fixes #N + bullets), follow the
github-conventions skill.
git status # no unintended uncommitted changes
pnpm nx affected -t lint # lint passes
pnpm nx affected -t test # tests pass
pnpm nx affected -t typecheck # types pass
gh pr create \
--title "feat(scope): description" \
--body "$(cat <<'EOF'
Closes #XX
- Change 1
- Change 2
EOF
)"
Closes #62
- Add TOKEN_RATE_LIMIT and TOKEN_RATE_WINDOW to auth config (30/min, 60s)
- Add MIN_RESPONSE_TIME_MS.TOKEN (300ms) for timing-attack mitigation
- Implement POST /oauth/token: client_secret_post, PKCE, code validation
- Rate limit by IP; audit oauth.token.exchange.success/failure
git diff and git log.github-conventions).Closes #X / Fixes #X to auto-link issues.