Plugin qa-auth-flows
Authentication flow testing: OAuth 2.0 with PKCE, multi-factor authentication, and session management, plus Keycloak, Auth0 and Okta integration tests. Anchored on RFC 7636, RFC 9700 and OWASP ASVS V3. A critic agent (token-storage-security-critic) flags tokens in localStorage, auth cookies missing httpOnly / Secure / SameSite, and tokens leaking into logs or URLs.
Cómo instalar el plugin qa-auth-flows
Ejecuta ambos comandos dentro de Claude Code. El primero agrega el marketplace una vez; el segundo instala el plugin.
/plugin marketplace add testland/qa
/plugin install qa-auth-flows@testland-qaQué hay dentro de qa-auth-flows
7 partes leídas de los archivos del propio plugin.
Agentes 1
Llama como @agent-qa-auth-flows:name- @agent-qa-auth-flows:token-storage-security-criticsonnet
Use proactively whenever a PR touches auth tokens, cookies, API client setup or refresh logic. Flags tokens in localStorage or sessionStorage, cookies missing httpOnly, Secure or SameSite, tokens in logs or URLs, and missing rotation or expiry, with a BLOCK or PASS verdict.
Skills 6
Claude lo carga cuando la tarea coincide- auth0-tests
Tests Auth0 tenant configurations, OIDC authentication flows, and serverless Actions or legacy Rules and Hooks.
- keycloak-tests
Perform integration testing for Keycloak identity providers using Testcontainers to spin up isolated, throwaway instances with realm imports.
- mfa-flow-test-author
Automates testing for multi-factor authentication flows including TOTP, HOTP, SMS/email OTP, WebAuthn passkeys, and recovery codes.
- oauth-flow-test-author
Use whenever an OAuth 2.0 or OpenID Connect client or resource server needs tests, whatever the identity provider: auth code with PKCE, client credentials, refresh-token rotation and reuse detection, state and nonce checks, scopes and strict redirect-URI matching, per the RFCs.
- okta-tests
Tests Okta Identity Engine configurations, OIDC authentication flows, MFA enforcement, and SCIM provisioning.
- session-management-test-author
Authors security tests for web application session management including cookie attributes, timeouts, and session fixation defenses.
Usando qa-auth-flows en Claude Code
Pide un agente por nombre:
@agent-qa-auth-flows:token-storage-security-criticLas Skills no necesitan comando. Claude las lee cuando tu solicitud coincide con lo que describen.
Actualizar, desactivar o eliminar
- Actualizar el plugin (shell)
- claude plugin update qa-auth-flows@testland-qa
- Refrescar el marketplace
- /plugin marketplace update testland-qa
- Desactivarlo por ahora
- /plugin disable qa-auth-flows@testland-qa
- Eliminarlo
- /plugin uninstall qa-auth-flows@testland-qa
Skills en qa-auth-flows
- auth0-teststestland/qa
Tests Auth0 tenant configurations, OIDC authentication flows, and serverless Actions or legacy Rules and Hooks.
3 archivos13estrellas - keycloak-teststestland/qa
Perform integration testing for Keycloak identity providers using Testcontainers to spin up isolated, throwaway instances with realm imports.
14 archivos13estrellas - mfa-flow-test-authortestland/qa
Automates testing for multi-factor authentication flows including TOTP, HOTP, SMS/email OTP, WebAuthn passkeys, and recovery codes.
3 archivos13estrellas - oauth-flow-test-authortestland/qa
Use whenever an OAuth 2.0 or OpenID Connect client or resource server needs tests, whatever the identity provider: auth code with PKCE, client credentials, refresh-token rotation and reuse detection, state and nonce checks, scopes and strict redirect-URI matching, per the RFCs.
13 archivos13estrellas - okta-teststestland/qa
Tests Okta Identity Engine configurations, OIDC authentication flows, MFA enforcement, and SCIM provisioning.
2 archivos13estrellas - session-management-test-authortestland/qa
Authors security tests for web application session management including cookie attributes, timeouts, and session fixation defenses.
13 archivos13estrellas
Preguntas sobre el plugin qa-auth-flows
¿Cómo instalo el plugin qa-auth-flows?
En Claude Code ejecuta /plugin marketplace add testland/qa y luego /plugin install qa-auth-flows@testland-qa.
¿Qué incluye el plugin qa-auth-flows?
qa-auth-flows agrupa 1 agente, 6 skills.
¿Qué agentes vienen con qa-auth-flows?
token-storage-security-critic. Llama a uno con @agent-qa-auth-flows:token-storage-security-critic.
¿Cómo actualizo o elimino el plugin qa-auth-flows?
Actualízalo con claude plugin update qa-auth-flows@testland-qa en tu shell, o desde la pestaña Installed de /plugin. Elimínalo con /plugin uninstall qa-auth-flows@testland-qa.
¿Bajo qué licencia está el plugin qa-auth-flows?
MIT, como se indica en el manifiesto del plugin.