auth0-android（auth0 安卓） Skills下载安装命令和教程

安装方式

通过对话安装

复制提示词发给支持本地命令或 Skills 的 AI 助手，先确认命令和权限，再让它执行。

请帮我安装这个 Agent Skill：auth0-android（auth0 安卓）
来源仓库：https://github.com/auth0/agent-skills
仓库路径：skills/auth0-android
安装命令：
npx skills add https://github.com/auth0/agent-skills --skill auth0-android
安装前请先检查当前环境是否支持对应 CLI，并向我确认将要执行的命令、安装目录、联网范围和文件读写权限；确认后再执行。

命令行安装

复制命令到本机终端执行。该命令会通过 npx skills 从第三方来源获取 Skill；本站只展示命令，不托管安装包，也不自动执行。

skills.shnpx skills

npx skills add https://github.com/auth0/agent-skills --skill auth0-android

简介

用于辅助安全审计、权限检查、凭据风险和认证流程排查。

适合梳理敏感配置、检查依赖风险、分析鉴权逻辑或生成安全复核清单。
通过系统步骤发现项目结构、识别认证文件和中间件配置，提供路由保护建议。
使用时不能把工具输出直接当最终结论，涉及密钥、令牌或生产系统时应确认最小权限和操作边界。
auth0-android 属于研究检索类 Skill，可作为该场景下的辅助能力补充。

SKILL.md

Auth0 Android Integration

Add authentication to Android applications using com.auth0.android:auth0.

Agent instruction: Before providing SDK setup instructions, fetch the latest release version by running: `` gh api repos/auth0/Auth0.Android/releases/latest --jq '.tag_name' ` Use the returned version in all implementation` dependency lines instead of any hardcoded version below. If the command fails, fall back to checking https://github.com/auth0/Auth0.Android/releases.

Prerequisites

Android API 21 or higher
Kotlin or Java project
Auth0 account with a Native application configured
If you don't have Auth0 set up, see auth0-quickstart

When NOT to Use

React Native apps: Use auth0-react-native
Flutter apps: Use the native Flutter Auth0 SDK
Web SPAs (React, Angular, Vue): Use auth0-react, auth0-angular, or auth0-vue
Node.js/Express servers: Use auth0-express
iOS/macOS apps: Use auth0-swift

Quick Start Workflow

Install SDK: Add the Auth0 Android SDK dependency to your build.gradle: implementation 'com.auth0.android:auth0:{LATEST_VERSION}'
Configure Auth0: Agent instruction: Check whether the user prompt already includes both Auth0 Client ID and Domain. If both are provided, proceed directly to Manual Setup in Setup Guide using those values. If either is missing, you MUST ask the user BEFORE writing any code or files: Question: "How would you like to configure Auth0 for this project?" Options: "Automatic setup (Recommended) — Auth0 CLI creates the app and writes credentials to strings.xml" / "Manual setup — I'll provide my Client ID and Domain" Then follow Setup Guide for the chosen path. Do NOT proceed to step 3 until Auth0 credentials are confirmed.
Initialize: Create an Auth0 account instance: import com.auth0.android.Auth0 val account = Auth0.getInstance(context)
Add Auth UI: Implement login and logout with Web Auth: Agent instruction: Before adding new UI elements, search the project for existing click handlers for login, logout, sign-in, or sign-out buttons (e.g., loginButton, signInButton, logoutButton, signOutButton, or setOnClickListener with auth-related naming). If existing handlers are found, hook the Auth0 code into them without modifying the existing UI. Only create new buttons if no existing handlers are found. Login: import com.auth0.android.Auth0 import com.auth0.android.authentication.AuthenticationAPIClient import com.auth0.android.authentication.storage.SecureCredentialsManager import com.auth0.android.authentication.storage.SharedPreferencesStorage import com.auth0.android.callback.Callback import com.auth0.android.authentication.AuthenticationException import com.auth0.android.provider.WebAuthProvider import com.auth0.android.result.Credentials val account = Auth0.getInstance(context) val authentication = AuthenticationAPIClient(account) val storage = SharedPreferencesStorage(context) val credentialsManager = SecureCredentialsManager(context, authentication, storage) WebAuthProvider.login(account).withScheme(getString(R.string.com_auth0_scheme)).withScope("openid profile email offline_access").start(this, object: Callback<Credentials, AuthenticationException> {override fun onSuccess(result: Credentials) {// User authenticated val idToken = result.idToken val accessToken = result.accessToken // Store credentials securely credentialsManager.saveCredentials(result)} override fun onFailure(error: AuthenticationException) {// Handle authentication failure Log.e("Auth0", "Authentication failed", error)}}) Logout: WebAuthProvider.logout(account).withScheme(getString(R.string.com_auth0_scheme)).start(this, object: Callback<Void?, AuthenticationException> {override fun onSuccess(result: Void) {// User logged out} override fun onFailure(error: AuthenticationException) {Log.e("Auth0", "Logout failed", error)}})
Build & Verify: Agent instruction: After completing the integration, build the project to verify it compiles successfully: ./gradlew assembleDebug If the build fails, analyze the error output and fix the issues. Common integration build failures include: Unresolved reference: Missing import statements — add the required import com.auth0.android.* imports Cannot resolve symbol R.string.com_auth0_scheme: strings.xml not updated — verify com_auth0_scheme, com_auth0_client_id, and com_auth0_domain entries exist Incompatible types in callback: Callback type parameters don't match — ensure Callback<Credentials, AuthenticationException> for login and Callback<Void?, AuthenticationException> for logout Unresolved lifecycleScope: Missing dependency — add implementation 'androidx.lifecycle:lifecycle-runtime-ktx:2.6.+' or move code out of coroutine scope minSdk too low: SDK requires API 21+ — update minSdkVersion to at least 21 Java version mismatch: SDK requires Java 8 — add compileOptions with JavaVersion.VERSION_1_8 Re-run the build after each fix. Track the number of build-fix iterations. Failcheck: If the build still fails after 5–6 fix attempts, stop and ask the user: Question: "The build is still failing after several fix attempts. How would you like to proceed?" Options: "Let the agent continue fixing iteratively" / "I'll fix it manually — show me the errors" / "Skip build verification and proceed" Repeat this check after every 5–6 iterations if errors persist. Do not leave the project in a non-compiling state without the user's explicit consent. The callback URL must match your Auth0 application settings: {SCHEME}://{YOUR_AUTH0_DOMAIN}/android/{YOUR_APP_PACKAGE_NAME}/callback

Detailed Documentation

Setup Guide — Install SDK, configure Auth0 application, set up callback URLs, Android App Links, custom schemes, ProGuard/R8
Integration Patterns — Web Auth login/logout, credential storage, biometric authentication, database login, passwordless authentication, MFA handling, custom tabs, error handling
Testing & Reference — Testing checklist, common issues, security considerations, API reference

Common Mistakes

Mistake	Fix
App type not set to Native in Auth0 Dashboard	Create a Native application type in your Auth0 tenant. The Android SDK requires Native app configuration, not Machine-to-Machine or other types.
Missing callback URL in Allowed Callback URLs	Add `{SCHEME}://{YOUR_AUTH0_DOMAIN}/android/{YOUR_APP_PACKAGE_NAME}/callback` to your Auth0 application's Allowed Callback URLs setting, where `{SCHEME}` matches `com_auth0_scheme` in `strings.xml` (e.g., `demo` by default).
Missing `<uses-permission android:name="android.permission.INTERNET" />`	Add the INTERNET permission to `AndroidManifest.xml`. The SDK requires network access for authentication.
Custom scheme in lowercase	Android requires scheme names to be lowercase. Use `https` (recommended) or lowercase custom scheme like `myapp://callback`.
Forgetting `.validateClaims()` on direct auth calls	Always call `.validateClaims()` when using `AuthenticationAPIClient` directly (for database, passwordless, or API login). Web Auth validates automatically.
Storing tokens in SharedPreferences without encryption	Use `SecureCredentialsManager` to store credentials. Never store tokens manually in plain text. The manager encrypts tokens at rest.
Missing manifest placeholders	Add `manifestPlaceholders = [auth0Domain: "@string/com_auth0_domain", auth0Scheme: "@string/com_auth0_scheme"]` to your `build.gradle` `defaultConfig` block.

Related Skills

auth0-quickstart — Set up an Auth0 account and application
auth0-mfa — Configure multi-factor authentication
auth0-swift — iOS/macOS authentication

Quick Reference

Core Classes

Class	Purpose
`Auth0`	Entry point for SDK, holds app credentials
`WebAuthProvider`	OAuth 2.0 login/logout via browser
`AuthenticationAPIClient`	Direct API calls (database login, passwordless, MFA)
`SecureCredentialsManager`	Secure storage and retrieval of credentials
`Credentials`	User tokens and expiration

Common Use Cases

References

适合场景

01

用户想查找某类 Agent Skill 时

02

需要根据任务场景推荐可安装能力包时

03

需要对比不同来源的安装命令和来源信息时

能力概览

能力 1

按任务关键词查找相关 Skills

能力 2

展示可复制的安装命令

能力 3

保留来源站点、仓库和原始说明，方便继续核验

能力 4

展示第三方安全扫描或审计结果

安装后应在对应宿主中按原始 README 的触发条件使用；具体调用方式请以来源页面和 README 为准。

平台分布

Codex

35.01%

按下载量换算227

Claude

28.13%

按下载量换算183

Cursor

19.35%

按下载量换算126

Gemini CLI

8.81%

按下载量换算57

安全审计

Gen Agent Trust Hub

通过

Socket

通过

Snyk

可疑

权限和风险

操作浏览器

该 Skill 可能涉及浏览器控制能力，使用时可能读取或操作网页内容，需要在受控环境中确认权限边界。

安装前确认

本站仅展示第三方公开信息，不托管安装包，不提供自动安装或运行环境。安装前应自行审查源码、依赖和命令行为。来源安全扫描存在 warning/failed 结果，不能写成本站确认安全。当前只有一个来源，正式发布前建议补源仓库或其他目录站核验。

来源信息

GitHub 仓库

github.com

/auth0/agent-skills

SKILL.md 来源

github.com

/auth0/agent-skills/tree/main/skills/auth0-android

skills-sh

skills.sh

/auth0/agent-skills/auth0-android

继续浏览同类 Skills

更多研究检索 Skills（73,675）返回 Skills 目录

上一个 Skill

auth0-android（auth0 安卓）

用于辅助安全审计、权限检查、凭据风险、认证流程和常见漏洞排查。它适合让 Agent 梳理敏感配置、检查依赖风险、分析鉴权逻辑或生成安全复核清单。使用时不能把工具输出直接当最终结论，涉及密钥、令牌、用户数据或生产系统时，应先确认最小权限、脱敏方式和操作边界。

下一个 Skill

auth0-aspnetcore-api（auth0 aspnetcore API 搜索）

用于辅助 API 设计、接口文档、请求响应结构和服务集成说明。它适合让 Agent 梳理 endpoint、生成 OpenAPI 草稿、检查字段命名、整理错误码或辅助前后端联调。使用时需要确认真实业务语义、鉴权方式、分页和错误处理规则；涉及生成接口文档时，应避免凭空补字段，最好从现有代码、schema 或接口样例中提取事实。