social-auth

What problem does it solve?

The Security-first Social Auth Core provides a discovery-first approach to OAuth 2.0 + OpenID Connect (OIDC) social login, enforcing safe, deterministic outputs before any code is written.

Core Features & Use Cases

• OAuth 2.0 + PKCE with strict invariants (no implicit flow)
• Provider coverage: Google, GitHub, LinkedIn, Apple, Twitter/X (plus pattern for adding others)
• Framework adapters and governance guidance for Next.js, Express, vanilla Node, Laravel, Django, Flask, Rails, and Vue
• Accounts linking, multi-provider identities, and take-over protections across deployments

Quick Start

Read AGENT_EXECUTION_SPEC.md and governance references, confirm provider scope, framework, and environment, then begin with a Discovery Report before any coding.