メニュー
Context about how OAuth authentication works in seer. Use when understanding OAuth flows, token management, scope validation, or debugging OAuth issues.
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
use when creating or updating end-to-end tests for the Seer application. This skill provides guidance on how to structure and implement e2e tests effectively.
React Flow best practices for workflow canvas in seer-frontend. Use when modifying WorkflowCanvas, adding new block types, debugging node rendering issues, or optimizing React Flow performance.
Apply Seer design system patterns when creating or modifying UI components. Auto-triggers for badge, button, input, and form components in src/components/.
Use this when you are asked to debug production errors
Guide for adding new external integrations (OAuth or API key-based) to seer. Use when implementing new service integrations like Google, GitHub, Slack, etc.
Context about runtime credential resolution in seer. Use when understanding how OAuth tokens, resources, and secrets are resolved for tool execution.
| name | oauth-integration |
| description | Context about how OAuth authentication works in seer. Use when understanding OAuth flows, token management, scope validation, or debugging OAuth issues. |
| allowed-tools | Read, Grep, Glob |
Frontend connect button → GET /{provider}/connect?scope=... → build base64-encoded state → provider.build_authorize_kwargs() → Authlib redirect to OAuth provider → user authorizes → GET /{provider}/callback?code=...&state=... → manual httpx code exchange → provider.resolve_granted_scopes() → provider.fetch_user_profile() → store_oauth_connection() → redirect to frontend
OAuth Client Registration (auth/oauth.py) — Authlib Starlette integration. Google uses OpenID Connect metadata URL. GitHub/Discord use manual authorize + token URLs. get_oauth_provider() maps integration types to providers (gmail/googlesheets/googledrive → google).
Helper Utilities (auth/helpers.py) — Scope parsing (space or comma-separated), scope validation with Google hierarchy (broad scopes satisfy narrow ones), scope merging on reconnect (accumulative), account ID extraction (provider-specific).
OAuthConnection model (database/models_oauth.py) — stores user, provider, provider_account_id, encrypted access/refresh tokens, expires_at, scopes string, status. Unique constraint: (user, provider, provider_account_id).
Token Management (tools/oauth_manager.py) — get_oauth_token() resolves by connection_id or provider, checks expiry, auto-refreshes. refresh_oauth_token() posts to provider-specific endpoint and updates the connection record.
include_granted_scopes=true to add scopes without revoking existingexpires_at < now, not proactively| File | Purpose |
|---|---|
src/seer/services/integrations/auth/oauth.py | OAuth client registration, provider mapping |
src/seer/services/integrations/auth/helpers.py | Scope parsing, validation, storage, merging |
src/seer/api/integrations/router.py | /connect, /callback, /disconnect endpoints |
src/seer/tools/oauth_manager.py | Token resolution and refresh |
src/seer/database/models_oauth.py | OAuthConnection model |
/integration-providers · /credential-resolution · /add-integration