Plugin qa-auth-flows
Authentication flow testing: OAuth 2.0 with PKCE, multi-factor authentication, and session management, plus Keycloak, Auth0 and Okta integration tests. Anchored on RFC 7636, RFC 9700 and OWASP ASVS V3. A critic agent (token-storage-security-critic) flags tokens in localStorage, auth cookies missing httpOnly / Secure / SameSite, and tokens leaking into logs or URLs.
Cara install plugin qa-auth-flows
Jalankan kedua perintah di dalam Claude Code. Perintah pertama menambahkan marketplace sekali; perintah kedua meng-install plugin.
/plugin marketplace add testland/qa
/plugin install qa-auth-flows@testland-qaApa yang ada di dalam qa-auth-flows
7 bagian dibaca dari file asli plugin tersebut.
Agents 1
Panggil sebagai @agent-qa-auth-flows:name- @agent-qa-auth-flows:token-storage-security-criticsonnet
Use proactively whenever a PR touches auth tokens, cookies, API client setup or refresh logic. Flags tokens in localStorage or sessionStorage, cookies missing httpOnly, Secure or SameSite, tokens in logs or URLs, and missing rotation or expiry, with a BLOCK or PASS verdict.
Skills 6
Claude memuatnya saat tugas sesuai- auth0-tests
Tests Auth0 tenant configurations, OIDC authentication flows, and serverless Actions or legacy Rules and Hooks.
- keycloak-tests
Perform integration testing for Keycloak identity providers using Testcontainers to spin up isolated, throwaway instances with realm imports.
- mfa-flow-test-author
Automates testing for multi-factor authentication flows including TOTP, HOTP, SMS/email OTP, WebAuthn passkeys, and recovery codes.
- oauth-flow-test-author
Use whenever an OAuth 2.0 or OpenID Connect client or resource server needs tests, whatever the identity provider: auth code with PKCE, client credentials, refresh-token rotation and reuse detection, state and nonce checks, scopes and strict redirect-URI matching, per the RFCs.
- okta-tests
Tests Okta Identity Engine configurations, OIDC authentication flows, MFA enforcement, and SCIM provisioning.
- session-management-test-author
Authors security tests for web application session management including cookie attributes, timeouts, and session fixation defenses.
Menggunakan qa-auth-flows di Claude Code
Minta agent berdasarkan nama:
@agent-qa-auth-flows:token-storage-security-criticSKILL tidak memerlukan command. Claude membacanya saat permintaan Anda sesuai dengan deskripsinya.
Update, matikan, atau hapus
- Update plugin (shell)
- claude plugin update qa-auth-flows@testland-qa
- Refresh marketplace
- /plugin marketplace update testland-qa
- Matikan untuk sementara
- /plugin disable qa-auth-flows@testland-qa
- Hapus
- /plugin uninstall qa-auth-flows@testland-qa
Skill dalam qa-auth-flows
- auth0-teststestland/qa
Tests Auth0 tenant configurations, OIDC authentication flows, and serverless Actions or legacy Rules and Hooks.
3 file13bintang - keycloak-teststestland/qa
Perform integration testing for Keycloak identity providers using Testcontainers to spin up isolated, throwaway instances with realm imports.
14 file13bintang - mfa-flow-test-authortestland/qa
Automates testing for multi-factor authentication flows including TOTP, HOTP, SMS/email OTP, WebAuthn passkeys, and recovery codes.
3 file13bintang - oauth-flow-test-authortestland/qa
Use whenever an OAuth 2.0 or OpenID Connect client or resource server needs tests, whatever the identity provider: auth code with PKCE, client credentials, refresh-token rotation and reuse detection, state and nonce checks, scopes and strict redirect-URI matching, per the RFCs.
13 file13bintang - okta-teststestland/qa
Tests Okta Identity Engine configurations, OIDC authentication flows, MFA enforcement, and SCIM provisioning.
2 file13bintang - session-management-test-authortestland/qa
Authors security tests for web application session management including cookie attributes, timeouts, and session fixation defenses.
13 file13bintang
Pertanyaan tentang plugin qa-auth-flows
Bagaimana cara install plugin qa-auth-flows?
Di Claude Code, jalankan /plugin marketplace add testland/qa, lalu /plugin install qa-auth-flows@testland-qa.
Apa saja yang disertakan plugin qa-auth-flows?
qa-auth-flows membundel 1 agent, 6 skill.
Agent apa saja yang disertakan dalam qa-auth-flows?
token-storage-security-critic. Panggil salah satunya dengan @agent-qa-auth-flows:token-storage-security-critic.
Bagaimana cara update atau menghapus plugin qa-auth-flows?
Update dengan claude plugin update qa-auth-flows@testland-qa di shell Anda, atau dari tab Installed di /plugin. Hapus dengan /plugin uninstall qa-auth-flows@testland-qa.
Apa lisensi untuk plugin qa-auth-flows?
MIT, sebagaimana dinyatakan dalam manifest plugin.