qa-auth-flows Plugin
Authentication flow testing: OAuth 2.0 with PKCE, multi-factor authentication, and session management, plus Keycloak, Auth0 and Okta integration tests. Anchored on RFC 7636, RFC 9700 and OWASP ASVS V3. A critic agent (token-storage-security-critic) flags tokens in localStorage, auth cookies missing httpOnly / Secure / SameSite, and tokens leaking into logs or URLs.
So installierst du das qa-auth-flows Plugin
Führe beide Befehle in Claude Code aus. Der erste fügt den Marketplace einmalig hinzu; der zweite installiert das Plugin.
/plugin marketplace add testland/qa
/plugin install qa-auth-flows@testland-qaWas ist in qa-auth-flows enthalten
7 Teile wurden aus den eigenen Dateien des Plugins gelesen.
Agents 1
Aufrufen als @agent-qa-auth-flows:name- @agent-qa-auth-flows:token-storage-security-criticsonnet
Use proactively whenever a PR touches auth tokens, cookies, API client setup or refresh logic. Flags tokens in localStorage or sessionStorage, cookies missing httpOnly, Secure or SameSite, tokens in logs or URLs, and missing rotation or expiry, with a BLOCK or PASS verdict.
Skills 6
Claude lädt es, wenn die Aufgabe passt- auth0-tests
Tests Auth0 tenant configurations, OIDC authentication flows, and serverless Actions or legacy Rules and Hooks.
- keycloak-tests
Perform integration testing for Keycloak identity providers using Testcontainers to spin up isolated, throwaway instances with realm imports.
- mfa-flow-test-author
Automates testing for multi-factor authentication flows including TOTP, HOTP, SMS/email OTP, WebAuthn passkeys, and recovery codes.
- oauth-flow-test-author
Use whenever an OAuth 2.0 or OpenID Connect client or resource server needs tests, whatever the identity provider: auth code with PKCE, client credentials, refresh-token rotation and reuse detection, state and nonce checks, scopes and strict redirect-URI matching, per the RFCs.
- okta-tests
Tests Okta Identity Engine configurations, OIDC authentication flows, MFA enforcement, and SCIM provisioning.
- session-management-test-author
Authors security tests for web application session management including cookie attributes, timeouts, and session fixation defenses.
Verwendung von qa-auth-flows in Claude Code
Frage nach einem Agent per Name:
@agent-qa-auth-flows:token-storage-security-criticSkills benötigen keinen Command. Claude liest sie, wenn deine Anfrage dem entspricht, was sie beschreiben.
Aktualisieren, deaktivieren oder entfernen
- Plugin aktualisieren (shell)
- claude plugin update qa-auth-flows@testland-qa
- marketplace aktualisieren
- /plugin marketplace update testland-qa
- Vorerst deaktivieren
- /plugin disable qa-auth-flows@testland-qa
- Entfernen
- /plugin uninstall qa-auth-flows@testland-qa
Skills in qa-auth-flows
- auth0-teststestland/qa
Tests Auth0 tenant configurations, OIDC authentication flows, and serverless Actions or legacy Rules and Hooks.
3 Dateien13Stars - keycloak-teststestland/qa
Perform integration testing for Keycloak identity providers using Testcontainers to spin up isolated, throwaway instances with realm imports.
14 Dateien13Stars - mfa-flow-test-authortestland/qa
Automates testing for multi-factor authentication flows including TOTP, HOTP, SMS/email OTP, WebAuthn passkeys, and recovery codes.
3 Dateien13Stars - oauth-flow-test-authortestland/qa
Use whenever an OAuth 2.0 or OpenID Connect client or resource server needs tests, whatever the identity provider: auth code with PKCE, client credentials, refresh-token rotation and reuse detection, state and nonce checks, scopes and strict redirect-URI matching, per the RFCs.
13 Dateien13Stars - okta-teststestland/qa
Tests Okta Identity Engine configurations, OIDC authentication flows, MFA enforcement, and SCIM provisioning.
2 Dateien13Stars - session-management-test-authortestland/qa
Authors security tests for web application session management including cookie attributes, timeouts, and session fixation defenses.
13 Dateien13Stars
Fragen zum qa-auth-flows Plugin
Wie installiere ich das qa-auth-flows Plugin?
Führe in Claude Code /plugin marketplace add testland/qa aus, dann /plugin install qa-auth-flows@testland-qa.
Was enthält das qa-auth-flows Plugin?
qa-auth-flows bündelt 1 Agent, 6 Skills.
Welche Agents sind bei qa-auth-flows dabei?
token-storage-security-critic. Rufe einen mit @agent-qa-auth-flows:token-storage-security-critic auf.
Wie aktualisiere oder entferne ich das qa-auth-flows Plugin?
Aktualisiere es mit claude plugin update qa-auth-flows@testland-qa in deiner shell oder über den Installed-Tab von /plugin. Entferne es mit /plugin uninstall qa-auth-flows@testland-qa.
Unter welcher Lizenz steht das qa-auth-flows Plugin?
MIT, wie im Manifest des Plugins angegeben.