Replaces the hand-rolled setup.md/patterns.md split, which dropped content and paraphrased SDK examples instead of moving them. Brings over the reviewed carve from worktree-reference-depth: index.md 277 lines hub: rules + prereqs + quick start + dispatch api-reference.md 213 lines WebAuth/CredentialsManager options, claims integrate.md 821 lines setup + integration patterns migration.md 1311 lines v2 -> v3 migration Fixes in this commit: - Restores 5 sections that existed in no file of the previous carve: SwiftUI App Lifecycle, UIKit App Lifecycle, Handling MFA Required Error, Login to a Specific Organization, Enable Biometrics. - Restores lost API surface: canRenew (4->5), hasValid(minTTL:) (1->2), ephemeralSession (1->2), enableBiometrics (4->7), Keychain Sharing (1->2) — all now match the pre-split baseline exactly. - Replaces an invented "SwiftUI — Login Button" example (local @State, out-of-scope credentialsManager) with the real @main/@StateObject/ environmentObject/checkSession() app-wiring pattern. - Removes dangling cross-references in index.md that pointed at SwiftUI and UIKit lifecycle content the carve no longer contained. Adds the routing-eval step CONTRIBUTING requires, which the previous commits omitted and which was failing CI on this branch: integrate-swift and upgrade-sdk-swift now carry the two-hop expect_refs. The corrections in ebada69 and f5c48c1 (async/await error handling, real CredentialsManagerError/WebAuthError cases, biometric error handling, Info.plist permission, organization invitationURL, safariProvider fallback) are all present in this carve — verified byte-identical, so nothing is lost. Verified: reachability, 30/30 routing evals, validate-skill.sh, and skillsaw --strict (0 errors, 0 warnings, grade A) all pass. Content diff vs baseline is 19 lines, each a cross-reference rewrite or folded title banner with a replacement in place (was 129 dropped lines).
auth0
Auth0 skills for setting up authentication, migrating from other providers, implementing Multi-Factor Authentication (MFA), framework-specific SDK integrations and CLI.
Installation
Via Claude Code:
First, add the Auth0 marketplace if you haven't already:
/plugin marketplace add auth0/agent-skills
Then install the plugin:
/plugin install auth0@auth0-agent-skills
Via Skills CLI:
npx skills add auth0/agent-skills/plugins/auth0
Skills
| Skill | Description | Documentation |
|---|---|---|
| auth0 | Adds Auth0 authentication to any app. Covers 35+ frameworks (React, Next.js, Vue, Angular, Express, Flask, FastAPI, Spring Boot, Swift, Android, Flutter, Laravel, Go, PHP, .NET MAUI, ASP.NET Core, React Native, Expo, Ionic, and more), MFA, Organizations, custom domains, ACUL screen generation, branding, debugging auth errors, security best practices, running a tenant security & configuration audit (CheckMate), and migration from other providers. | SKILL.md |
Forcing the skill with /auth0
Auto-detection is reliable on capable models. On a smaller/faster model in a session with many other skills installed, the assistant can occasionally miss the trigger — most often on open-ended questions ("how do I…?") rather than direct instructions. When that happens, name the skill explicitly:
/auth0 how do I configure brand colors in Auth0?
Naming the skill removes the selection step entirely, so it always activates.
Migrating from the individual skills
Earlier versions shipped one skill per SDK/framework (auth0-react,
auth0-nextjs, express-oauth2-jwt-bearer, …). These are now consolidated
into the single auth0 skill above, which routes to the same guidance by
detecting your framework. Plugin/marketplace installs swap in the consolidated
skill on the next update with nothing to do. If you referenced an old skill by
name — in your CLAUDE.md, another skill's requires.skills, or any
instruction file — those names no longer exist and the reference will dangle;
replace them with auth0. See the repository README
for full migration details.