Plugin qa-auth-flows
Authentication flow testing: OAuth 2.0 with PKCE, multi-factor authentication, and session management, plus Keycloak, Auth0 and Okta integration tests. Anchored on RFC 7636, RFC 9700 and OWASP ASVS V3. A critic agent (token-storage-security-critic) flags tokens in localStorage, auth cookies missing httpOnly / Secure / SameSite, and tokens leaking into logs or URLs.
Comment installer le plugin qa-auth-flows
Exécutez les deux commandes dans Claude Code. La première ajoute la marketplace une seule fois ; la seconde installe le plugin.
/plugin marketplace add testland/qa
/plugin install qa-auth-flows@testland-qaContenu de qa-auth-flows
7 parties lues depuis les fichiers du plugin.
Agents 1
Appeler via @agent-qa-auth-flows:name- @agent-qa-auth-flows:token-storage-security-criticsonnet
Use proactively whenever a PR touches auth tokens, cookies, API client setup or refresh logic. Flags tokens in localStorage or sessionStorage, cookies missing httpOnly, Secure or SameSite, tokens in logs or URLs, and missing rotation or expiry, with a BLOCK or PASS verdict.
Skills 6
Claude le charge quand la tâche correspond- auth0-tests
Tests Auth0 tenant configurations, OIDC authentication flows, and serverless Actions or legacy Rules and Hooks.
- keycloak-tests
Perform integration testing for Keycloak identity providers using Testcontainers to spin up isolated, throwaway instances with realm imports.
- mfa-flow-test-author
Automates testing for multi-factor authentication flows including TOTP, HOTP, SMS/email OTP, WebAuthn passkeys, and recovery codes.
- oauth-flow-test-author
Use whenever an OAuth 2.0 or OpenID Connect client or resource server needs tests, whatever the identity provider: auth code with PKCE, client credentials, refresh-token rotation and reuse detection, state and nonce checks, scopes and strict redirect-URI matching, per the RFCs.
- okta-tests
Tests Okta Identity Engine configurations, OIDC authentication flows, MFA enforcement, and SCIM provisioning.
- session-management-test-author
Authors security tests for web application session management including cookie attributes, timeouts, and session fixation defenses.
Utiliser qa-auth-flows dans Claude Code
Demandez un agent par son nom :
@agent-qa-auth-flows:token-storage-security-criticLes Skills ne nécessitent pas de commande. Claude les lit quand votre requête correspond à leur description.
Mettre à jour, désactiver ou supprimer
- Mettre à jour le plugin (shell)
- claude plugin update qa-auth-flows@testland-qa
- Actualiser le marketplace
- /plugin marketplace update testland-qa
- Le désactiver pour le moment
- /plugin disable qa-auth-flows@testland-qa
- Le supprimer
- /plugin uninstall qa-auth-flows@testland-qa
Skills dans qa-auth-flows
- auth0-teststestland/qa
Tests Auth0 tenant configurations, OIDC authentication flows, and serverless Actions or legacy Rules and Hooks.
3 fichiers13étoiles - keycloak-teststestland/qa
Perform integration testing for Keycloak identity providers using Testcontainers to spin up isolated, throwaway instances with realm imports.
14 fichiers13étoiles - mfa-flow-test-authortestland/qa
Automates testing for multi-factor authentication flows including TOTP, HOTP, SMS/email OTP, WebAuthn passkeys, and recovery codes.
3 fichiers13étoiles - oauth-flow-test-authortestland/qa
Use whenever an OAuth 2.0 or OpenID Connect client or resource server needs tests, whatever the identity provider: auth code with PKCE, client credentials, refresh-token rotation and reuse detection, state and nonce checks, scopes and strict redirect-URI matching, per the RFCs.
13 fichiers13étoiles - okta-teststestland/qa
Tests Okta Identity Engine configurations, OIDC authentication flows, MFA enforcement, and SCIM provisioning.
2 fichiers13étoiles - session-management-test-authortestland/qa
Authors security tests for web application session management including cookie attributes, timeouts, and session fixation defenses.
13 fichiers13étoiles
Questions sur le plugin qa-auth-flows
Comment installer le plugin qa-auth-flows ?
Dans Claude Code, exécutez /plugin marketplace add testland/qa, puis /plugin install qa-auth-flows@testland-qa.
Que contient le plugin qa-auth-flows ?
qa-auth-flows regroupe 1 agent, 6 skills.
Quels agents sont inclus avec qa-auth-flows ?
token-storage-security-critic. Appelez-en un avec @agent-qa-auth-flows:token-storage-security-critic.
Comment mettre à jour ou supprimer le plugin qa-auth-flows ?
Mettez-le à jour avec claude plugin update qa-auth-flows@testland-qa dans votre shell, ou depuis l'onglet Installed de /plugin. Supprimez-le avec /plugin uninstall qa-auth-flows@testland-qa.
Sous quelle licence est le plugin qa-auth-flows ?
MIT, comme indiqué dans le manifeste du plugin.