feat : add sudloh oidc skill

2026-10-05 15:48:46 +07:00
parent e2fa1aafb6
commit 261f0d717d
2 changed files with 112 additions and 0 deletions
@@ -0,0 +1,10 @@
+---
+name: sudloh-oidc
+description: Integrate a Sudloh application or API with account.sudloh.com's OIDC sign-in and token validation. Use for guide.sudloh.com, buzz.sudloh.com, or another registered Sudloh client.
+---
+
+# Sudloh OIDC integration
+
+Read [references/api.md](references/api.md) before implementing a client or protected API. It defines the issuer, endpoints, security checks, credentials, examples, and sign-out behavior. Treat OIDC discovery as the current source of endpoint URLs at runtime.
+
+For Guide and Buzz, request the exact HTTPS callback URL and the assigned `client_id` and `client_secret` from the account service operator. Each app owns its own session. Do not send a browser's account service cookie to an app API or treat an ID token as an API access token.