Menü
Create a pull request following QAuth conventions with gh pr create
Mit Codex oder Claude installieren Kopieren Sie diesen Prompt, fügen Sie ihn in Codex, Claude oder einen anderen Assistant ein und lassen Sie die Skill-Seite prüfen und installieren.
Basierend auf der SOC-Berufsklassifikation
Auth engine rules for QAuth. Use when working with CredentialProvider implementations, token claim generation, the provider registry, or the federation layer. Enforces the pluggable provider pattern and correct token claim behaviour.
OAuth 2.1 / OIDC rules for QAuth. Use when working with authorization endpoints, token flows, PKCE, JWKS, OIDC discovery, or spec compliance (RFC 9700, OIDC Core 1.0). Covers endpoint behaviour, email claim rules, and token security.
Database schema rules for QAuth. Use when working with the identity model, Drizzle ORM, migrations, repositories, or claim resolution. Reflects the CURRENT shipped schema — the identifier-abstraction model (ADR-002, IMPLEMENTED via Epic
Link GitHub issues in parent-child (sub-issue) relationships using GraphQL
Add a GitHub issue to a project board using gh project item-add
Create a new GitHub issue following QAuth project conventions using gh issue create
| name | create-pr |
| description | Create a pull request following QAuth conventions with gh pr create |
| disable-model-invocation | true |
Create a PR with gh pr create. For the title format (Conventional Commits +
scope) and PR body format (Closes #N / Fixes #N + bullets), follow the
github-conventions skill.
git status # no unintended uncommitted changes
pnpm nx affected -t lint # lint passes
pnpm nx affected -t test # tests pass
pnpm nx affected -t typecheck # types pass
gh pr create \
--title "feat(scope): description" \
--body "$(cat <<'EOF'
Closes #XX
- Change 1
- Change 2
EOF
)"
Closes #62
- Add TOKEN_RATE_LIMIT and TOKEN_RATE_WINDOW to auth config (30/min, 60s)
- Add MIN_RESPONSE_TIME_MS.TOKEN (300ms) for timing-attack mitigation
- Implement POST /oauth/token: client_secret_post, PKCE, code validation
- Rate limit by IP; audit oauth.token.exchange.success/failure
git diff and git log.github-conventions).Closes #X / Fixes #X to auto-link issues.