Exchange Github OAUTH Code

exchange-github-oauth-code

This skill covers the implementation of GitHub OAuth helper functions.

Trigger: Load this skill when handling GitHub OAuth processes.

Quick Reference

Critical Patterns (Summary)

• Generate OAuth state: Create a unique state parameter for OAuth flow.
• Validate OAuth state: Ensure the state parameter matches the expected value.

Critical Patterns (Detailed)

Generate OAuth state

This function creates a unique state parameter to prevent CSRF attacks during the OAuth flow.

from apps.server.app.services.github_oauth import generate_state

state = generate_state()

Validate OAuth state

This function checks if the provided state matches the expected value to ensure the integrity of the OAuth process.

from apps.server.app.services.github_oauth import validate_state

is_valid = validate_state(received_state, expected_state)

When to Use

• When initiating the GitHub OAuth flow to generate a state parameter.
• When validating the state parameter after the user is redirected back from GitHub.

Commands

docker-compose up
python repoforge/cli.py

Anti-Patterns

Don't: Use hardcoded state values

Hardcoding state values can lead to security vulnerabilities and CSRF attacks.

# BAD
state = "fixed_state_value"