b2c-slas-auth-patterns

b2c-slas-auth-patterns is an Auth & identity skill for AI agents, published by SalesforceCommerceCloud in the b2c-developer-tooling repository on GitHub. Skillspace rates b2c-slas-auth-patterns D (64/100) and it passed the safety scan; the rating is based on static analysis only.

Implement SLAS authentication patterns in B2C Commerce including passwordless login (email OTP, SMS OTP, passkeys), session bridging between PWA Kit/Storefront Next and SFRA, hybrid authentication (B2C 25.3+), token refresh flows, trusted system on behalf of (TSOB), and JWT validation. Use this skill whenever the user asks about shopper authentication beyond basic login, token exchange flows, passwordless or biometric auth, keeping sessions alive across storefronts, handling 409 Conflict errors on token endpoints, refreshing shopper tokens, or validating JWTs — even if they don't mention SLAS by name.

Grade
D
Quality
64 / 100
Safety
Passed
GitHub stars
48

Unproven: rated by static analysis only, not yet compared head-to-head.

This rating describes the version of the repository we crawled; it may have changed since, so go by its current files.

View source on GitHubSalesforceCommerceCloud/b2c-developer-tooling

Our review

Architecture
88 / 100
Maturity
Structured: ships references or scripts
Security scan
Low-risk patterns
License
Apache-2.0
Adoption
Adopted by 0 other repositories, in 0 collections

What the scanner flagged

  • mentions secrets in text

Not checked yet

  • Not judged on the rubric yet (not a contender in its category)
  • No blind task eval yet
  • Scope (portable / vendor / repo-internal) not assessed; only the top of each category is read for scope
  • Sibling files (scripts, references) not fetched; security scan covers SKILL.md only

Better-rated skills in Auth & identity

Skillspace indexes and rates this skill; it does not host or endorse it. Run third-party skills at your own risk.