objc-oauth-dpop-conformance-audit

What problem does it solve?

This Skill addresses the critical need to ensure the robust security and correct implementation of OAuth 2.0 and DPoP (Demonstrating Proof-of-Possession) protocols within Objective-C codebases, preventing vulnerabilities related to token handling and proof validation.

Core Features & Use Cases

• Security Auditing: Scans Objective-C code for potential weaknesses in OAuth and DPoP implementations.
• Vulnerability Identification: Pinpoints issues in token lifecycle management, proof verification, nonce handling, key rotation, and clock-skew edge cases.
• Use Case: When reviewing authentication hardening measures or investigating security-sensitive regressions, this Skill provides a focused audit to identify conformance gaps and potential exploits.

Quick Start

Run the scan_oauth_dpop_conformance.sh script against the current directory and output results to /tmp/objc-oauth-dpop-conformance-audit.