qa-auth-flows 플러그인
Authentication flow testing: OAuth 2.0 with PKCE, multi-factor authentication, and session management, plus Keycloak, Auth0 and Okta integration tests. Anchored on RFC 7636, RFC 9700 and OWASP ASVS V3. A critic agent (token-storage-security-critic) flags tokens in localStorage, auth cookies missing httpOnly / Secure / SameSite, and tokens leaking into logs or URLs.
qa-auth-flows 플러그인 설치 방법
두 명령을 모두 Claude Code 안에서 실행하십시오. 첫 번째는 마켓플레이스를 한 번 추가하고, 두 번째는 플러그인을 설치합니다.
/plugin marketplace add testland/qa
/plugin install qa-auth-flows@testland-qaqa-auth-flows 구성 요소
플러그인 파일에서 읽어온 7개의 항목입니다.
Agents 1
@agent-qa-auth-flows:name 으로 호출- @agent-qa-auth-flows:token-storage-security-criticsonnet
Use proactively whenever a PR touches auth tokens, cookies, API client setup or refresh logic. Flags tokens in localStorage or sessionStorage, cookies missing httpOnly, Secure or SameSite, tokens in logs or URLs, and missing rotation or expiry, with a BLOCK or PASS verdict.
Skills 6
작업이 일치하면 Claude가 로드합니다- auth0-tests
Tests Auth0 tenant configurations, OIDC authentication flows, and serverless Actions or legacy Rules and Hooks.
- keycloak-tests
Perform integration testing for Keycloak identity providers using Testcontainers to spin up isolated, throwaway instances with realm imports.
- mfa-flow-test-author
Automates testing for multi-factor authentication flows including TOTP, HOTP, SMS/email OTP, WebAuthn passkeys, and recovery codes.
- oauth-flow-test-author
Use whenever an OAuth 2.0 or OpenID Connect client or resource server needs tests, whatever the identity provider: auth code with PKCE, client credentials, refresh-token rotation and reuse detection, state and nonce checks, scopes and strict redirect-URI matching, per the RFCs.
- okta-tests
Tests Okta Identity Engine configurations, OIDC authentication flows, MFA enforcement, and SCIM provisioning.
- session-management-test-author
Authors security tests for web application session management including cookie attributes, timeouts, and session fixation defenses.
Claude Code에서 qa-auth-flows 사용하기
이름으로 agent를 요청하세요:
@agent-qa-auth-flows:token-storage-security-criticSkills는 명령어가 필요하지 않습니다. 요청이 설명과 일치하면 Claude가 이를 읽습니다.
업데이트, 비활성화 또는 삭제
- 플러그인 업데이트 (shell)
- claude plugin update qa-auth-flows@testland-qa
- marketplace 새로고침
- /plugin marketplace update testland-qa
- 일시적으로 비활성화
- /plugin disable qa-auth-flows@testland-qa
- 삭제
- /plugin uninstall qa-auth-flows@testland-qa
qa-auth-flows의 스킬
- auth0-teststestland/qa
Tests Auth0 tenant configurations, OIDC authentication flows, and serverless Actions or legacy Rules and Hooks.
3개 파일13스타 - keycloak-teststestland/qa
Perform integration testing for Keycloak identity providers using Testcontainers to spin up isolated, throwaway instances with realm imports.
14개 파일13스타 - mfa-flow-test-authortestland/qa
Automates testing for multi-factor authentication flows including TOTP, HOTP, SMS/email OTP, WebAuthn passkeys, and recovery codes.
3개 파일13스타 - oauth-flow-test-authortestland/qa
Use whenever an OAuth 2.0 or OpenID Connect client or resource server needs tests, whatever the identity provider: auth code with PKCE, client credentials, refresh-token rotation and reuse detection, state and nonce checks, scopes and strict redirect-URI matching, per the RFCs.
13개 파일13스타 - okta-teststestland/qa
Tests Okta Identity Engine configurations, OIDC authentication flows, MFA enforcement, and SCIM provisioning.
2개 파일13스타 - session-management-test-authortestland/qa
Authors security tests for web application session management including cookie attributes, timeouts, and session fixation defenses.
13개 파일13스타
qa-auth-flows 플러그인 질문
qa-auth-flows 플러그인은 어떻게 설치하나요?
Claude Code에서 /plugin marketplace add testland/qa를 실행한 다음 /plugin install qa-auth-flows@testland-qa을 실행하십시오.
qa-auth-flows 플러그인에는 무엇이 포함되나요?
qa-auth-flows은(는) 1개 에이전트, 6개 스킬을(를) 묶습니다.
qa-auth-flows에는 어떤 agent가 포함되어 있나요?
token-storage-security-critic입니다. @agent-qa-auth-flows:token-storage-security-critic로 호출하세요.
qa-auth-flows 플러그인을 어떻게 업데이트하거나 삭제하나요?
shell에서 claude plugin update qa-auth-flows@testland-qa를 사용하여 업데이트하거나 /plugin의 Installed 탭에서 수행하세요. 삭제하려면 /plugin uninstall qa-auth-flows@testland-qa을 사용하세요.
qa-auth-flows 플러그인의 라이선스는 무엇인가요?
플러그인 manifest에 명시된 대로 MIT입니다.