Description
oauth is an agent skill from the vercel-labs portless project that helps a coding agent set up OAuth sign-in for a local development server. OAuth providers check redirect URIs against domain rules, and .localhost subdomains are rejected by Google and Apple, which do not accept them, and handled differently by Facebook, while Microsoft and GitHub are more lenient about localhost. The skill explains this problem and the fix, which is to serve the app on a real, valid domain with portless's --tld option, so that the redirect URIs you register with each provider work. It covers configuring providers such as Google, Apple, Microsoft, Facebook and GitHub to accept the portless local URLs, and it is meant for use when you are setting up OAuth redirect URIs. The skill uses portless, a tool that gives local dev servers stable named URLs. It is listed on skills.sh, where the page shows install counts, GitHub stars and security audit results. Install it with npx skills add https://github.com/vercel-labs/portless --skill oauth.…
Highlights
- OAuth redirect URI setup for local dev
- Explains provider domain rules
- Uses portless --tld for valid domains
- Covers Google, Apple, Microsoft, Facebook and GitHub
- Installs from skills.sh
Ratings & Reviews
No ratings yet
Be the first to rate oauth.
People also visit
better-auth-security-best-practices
Configure rate limiting, manage auth secrets, set up CSRF protection
oauth FAQ
What problem does this skill solve?
OAuth providers often reject redirect URIs on .localhost subdomains, so sign-in fails during local development.
Which providers are strict?
The skill says Google and Apple are the strictest. Microsoft and GitHub are more lenient with localhost, and Facebook requires each URI to be registered exactly.
What is the fix?
Serve the app on a real domain with portless and its --tld option, then register those redirect URIs with the provider.
How do I install it?
Run npx skills add https://github.com/vercel-labs/portless --skill oauth.
What are the security audit results?
skills.sh lists three audits: Gen Agent Trust Hub Pass, Socket Pass and Snyk Pass.
How popular is it?
The page shows about 3.0K installs, and the portless repository has 12.7K GitHub stars.
What are the best oauth alternatives?
Popular alternatives to oauth include entra-app-registration, flowstudio-power-automate-mcp and gws-shared. See all oauth alternatives