원클릭으로
create-pr
Create a pull request following QAuth conventions with gh pr create
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
메뉴
Create a pull request following QAuth conventions with gh pr create
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
Auth engine rules for QAuth. Use when working with CredentialProvider implementations, token claim generation, the provider registry, or the federation layer. Enforces the pluggable provider pattern and correct token claim behaviour.
OAuth 2.1 / OIDC rules for QAuth. Use when working with authorization endpoints, token flows, PKCE, JWKS, OIDC discovery, or spec compliance (RFC 9700, OIDC Core 1.0). Covers endpoint behaviour, email claim rules, and token security.
Database schema rules for QAuth. Use when working with the identity model, Drizzle ORM, migrations, repositories, or claim resolution. Reflects the CURRENT shipped schema — the identifier-abstraction model (ADR-002, IMPLEMENTED via Epic
Link GitHub issues in parent-child (sub-issue) relationships using GraphQL
Add a GitHub issue to a project board using gh project item-add
Create a new GitHub issue following QAuth project conventions using gh issue create
| name | create-pr |
| description | Create a pull request following QAuth conventions with gh pr create |
| disable-model-invocation | true |
Create a PR with gh pr create. For the title format (Conventional Commits +
scope) and PR body format (Closes #N / Fixes #N + bullets), follow the
github-conventions skill.
git status # no unintended uncommitted changes
pnpm nx affected -t lint # lint passes
pnpm nx affected -t test # tests pass
pnpm nx affected -t typecheck # types pass
gh pr create \
--title "feat(scope): description" \
--body "$(cat <<'EOF'
Closes #XX
- Change 1
- Change 2
EOF
)"
Closes #62
- Add TOKEN_RATE_LIMIT and TOKEN_RATE_WINDOW to auth config (30/min, 60s)
- Add MIN_RESPONSE_TIME_MS.TOKEN (300ms) for timing-attack mitigation
- Implement POST /oauth/token: client_secret_post, PKCE, code validation
- Rate limit by IP; audit oauth.token.exchange.success/failure
git diff and git log.github-conventions).Closes #X / Fixes #X to auto-link issues.