Move skills to .agent directory
This commit is contained in:
@@ -0,0 +1,34 @@
|
||||
---
|
||||
name: agent-ready-oauth-protected-resource
|
||||
description: >
|
||||
Sub-skill de agent-ready-cloudflare: Implement OAuth Protected Resource Metadata
|
||||
---
|
||||
# Implement OAuth Protected Resource Metadata
|
||||
|
||||
Publish OAuth Protected Resource Metadata so agents can discover how to
|
||||
authenticate per [RFC 9728](https://www.rfc-editor.org/rfc/rfc9728).
|
||||
|
||||
## Requirements
|
||||
|
||||
- Serve JSON at `/.well-known/oauth-protected-resource` with HTTP 200
|
||||
- Include `resource` (your resource identifier URL)
|
||||
- Include `authorization_servers` (array of OAuth/OIDC issuer URLs)
|
||||
- Optionally include `scopes_supported`
|
||||
- Optionally return `WWW-Authenticate` with `resource_metadata` on 401 responses
|
||||
|
||||
## Cloudflare
|
||||
|
||||
Use [Workers](https://developers.cloudflare.com/workers/) to serve the
|
||||
metadata endpoint and [Access](https://developers.cloudflare.com/cloudflare-one/)
|
||||
as the authorization server.
|
||||
|
||||
## Validate
|
||||
|
||||
```
|
||||
POST https://isitagentready.com/api/scan
|
||||
Content-Type: application/json
|
||||
|
||||
{"url": "https://YOUR-SITE.com"}
|
||||
```
|
||||
|
||||
Check that `checks.discovery.oauthProtectedResource.status` is `"pass"`.
|
||||
Reference in New Issue
Block a user