Skip to content

feat: Add auth0-hono quickstart skill#88

Open
tusharpandey13 wants to merge 4 commits into
mainfrom
feat/auth0-hono-skill
Open

feat: Add auth0-hono quickstart skill#88
tusharpandey13 wants to merge 4 commits into
mainfrom
feat/auth0-hono-skill

Conversation

@tusharpandey13

@tusharpandey13 tusharpandey13 commented May 14, 2026

Copy link
Copy Markdown

Summary

  • Adds auth0-hono integration skill for @auth0/auth0-hono SDK
  • Session-based authentication middleware for Hono web framework
  • Includes SKILL.md + references (setup.md, integration.md, api.md)
  • Covers: middleware setup, protected routes, claim-based auth, session mgmt, access tokens, error handling, silent login,
    organizations, TypeScript typing

Summary by CodeRabbit

  • Documentation
    • Added comprehensive Auth0 Hono skill documentation including setup guides, API references, integration patterns, real-world examples, and a test report.
    • Auth0 Hono is now listed in the marketplace with installation instructions and framework support details.

Review Change Stack

@coderabbitai

coderabbitai Bot commented May 14, 2026

Copy link
Copy Markdown
📝 Walkthrough

Walkthrough

This PR adds comprehensive documentation for a new Auth0 Hono skill, including a main skill guide, setup procedures, API reference, integration patterns, and real-world examples. A test report validates the documentation against the SDK.

Changes

Auth0 Hono Skill Documentation

Layer / File(s) Summary
Skill Definition & Test Validation
plugins/auth0/skills/auth0-hono/SKILL.md, plugins/auth0/skills/auth0-hono/references/skill-test-report.md, plugins/auth0/README.md, README.md
Skill metadata, prerequisites, and usage constraints; test report documenting methodology, test results, resolved documentation issues, and quality assessment; marketplace entries in root and Auth0 plugin READMEs.
Quick Start Workflow
plugins/auth0/skills/auth0-hono/SKILL.md
Six-step quick-start covering SDK installation, environment variable setup, middleware registration, route implementation with public and protected endpoints, error handling, and server testing. Includes common mistakes table, related skills, quick reference summaries for middleware, route protection, session utilities, tokens, and error types.
Setup Guide & API Reference
plugins/auth0/skills/auth0-hono/references/setup.md, plugins/auth0/skills/auth0-hono/references/api.md
End-to-end setup guide with automatic and manual installation paths, ESM verification, post-setup configuration, SDK installation, secret management for development and production, and verification checklist. API reference documenting middleware configuration options, environment variables, OIDC and Auth0 claims, complete TypeScript example, testing checklist, troubleshooting table, and security considerations.
Integration Patterns & Real-World Examples
plugins/auth0/skills/auth0-hono/references/integration.md, plugins/auth0/skills/auth0-hono/references/examples.md
Integration guide covering middleware setup, authentication lifecycle, route protection with claim and organization checks, session management including custom session stores, access token retrieval with federated exchange, silent login, onCallback hooks, error handling with Auth0-specific types, and testing with mock middleware. Examples include basic Hono app with navigation, RBAC with helper factories, organization multi-tenancy, external API calls with tokens, session enrichment, Redis store configuration, Cloudflare Workers/Deno/Bun deployments, API-style JSON error responses, SSO patterns, hybrid web+API routing, and standalone route handler mounting with custom paths.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~12 minutes

Poem

🐰 A Hono skill takes flight,
With docs that shine so bright,
Auth0 flows with session care,
Routes protected everywhere!
Quick start guides the way,
Examples for the day. ✨

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title 'feat: Add auth0-hono quickstart skill' directly and accurately summarizes the main change—adding comprehensive documentation for the Auth0 Hono integration as a new quickstart skill.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch feat/auth0-hono-skill

Tip

💬 Introducing Slack Agent: The best way for teams to turn conversations into code.

Slack Agent is built on CodeRabbit's deep understanding of your code, so your team can collaborate across the entire SDLC without losing context.

  • Generate code and open pull requests
  • Plan features and break down work
  • Investigate incidents and troubleshoot customer tickets together
  • Automate recurring tasks and respond to alerts with triggers
  • Summarize progress and report instantly

Built for teams:

  • Shared memory across your entire org—no repeating context
  • Per-thread sandboxes to safely plan and execute work
  • Governance built-in—scoped access, auditability, and budget controls

One agent for your entire SDLC. Right inside Slack.

👉 Get started


Comment @coderabbitai help to get the list of available commands and usage tips.

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🧹 Nitpick comments (2)
plugins/auth0/skills/auth0-hono/references/setup.md (1)

40-60: 💤 Low value

Consider removing blank line inside blockquote.

The blank line at line 46 inside the blockquote triggers a linting warning. While this is a minor formatting issue, removing it would improve consistency with Markdown linting rules.

📝 Proposed fix
 > **Run bootstrap script:**
-> ```bash
+> ```bash
 > cd scripts && npm install && node bootstrap.mjs <project-path>
 > ```
+>
 > The script will:
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@plugins/auth0/skills/auth0-hono/references/setup.md` around lines 40 - 60,
Remove the stray blank line inside the blockquote around the fenced bash snippet
so the blockquote is continuous; specifically edit the quoted section containing
the ```bash fenced code (the line starting with "cd scripts && npm install &&
node bootstrap.mjs <project-path>") and delete the empty line immediately after
the closing ``` so the following "The script will:" line remains directly inside
the same blockquote.
plugins/auth0/skills/auth0-hono/SKILL-TEST-REPORT.md (1)

102-117: ⚡ Quick win

Add language identifier to fenced code block.

The fenced code block should specify a language identifier for proper syntax highlighting and linting compliance.

📝 Proposed fix
-```
+```text
 plugins/auth0/skills/auth0-hono/SKILL.md
   - Added ESM prerequisite
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@plugins/auth0/skills/auth0-hono/SKILL-TEST-REPORT.md` around lines 102 - 117,
The fenced code block that begins with "```" showing the change summary (the
snippet containing "plugins/auth0/skills/auth0-hono/SKILL.md") lacks a language
identifier; update that opening fence to include a language (e.g., change "```"
to "```text") so the block reads "```text" to enable proper syntax highlighting
and linting for the summary block.
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Nitpick comments:
In `@plugins/auth0/skills/auth0-hono/references/setup.md`:
- Around line 40-60: Remove the stray blank line inside the blockquote around
the fenced bash snippet so the blockquote is continuous; specifically edit the
quoted section containing the ```bash fenced code (the line starting with "cd
scripts && npm install && node bootstrap.mjs <project-path>") and delete the
empty line immediately after the closing ``` so the following "The script will:"
line remains directly inside the same blockquote.

In `@plugins/auth0/skills/auth0-hono/SKILL-TEST-REPORT.md`:
- Around line 102-117: The fenced code block that begins with "```" showing the
change summary (the snippet containing
"plugins/auth0/skills/auth0-hono/SKILL.md") lacks a language identifier; update
that opening fence to include a language (e.g., change "```" to "```text") so
the block reads "```text" to enable proper syntax highlighting and linting for
the summary block.

ℹ️ Review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: ba2259fc-7b55-4eeb-a1cc-71afa89a61b9

📥 Commits

Reviewing files that changed from the base of the PR and between b420ff5 and 91ce6cb.

📒 Files selected for processing (6)
  • plugins/auth0/skills/auth0-hono/SKILL-TEST-REPORT.md
  • plugins/auth0/skills/auth0-hono/SKILL.md
  • plugins/auth0/skills/auth0-hono/references/api.md
  • plugins/auth0/skills/auth0-hono/references/examples.md
  • plugins/auth0/skills/auth0-hono/references/integration.md
  • plugins/auth0/skills/auth0-hono/references/setup.md

@github-actions

Copy link
Copy Markdown

✅ skillsaw — All checks passed

Full report
Linting: /home/runner/work/agent-skills/agent-skills


Summary:
  Errors:   0
  Warnings: 0

✓ All checks passed!

skillsaw 0.4.3 · config · custom rules · run

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 2

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@plugins/auth0/skills/auth0-hono/references/skill-test-report.md`:
- Around line 6-8: The report exposes sensitive Auth0 identifiers and an email;
locate the lines containing the "Auth0 Tenant:", "Client ID:" and any personal
email in skill-test-report.md and replace their actual values with placeholders
(e.g., <REDACTED_TENANT>, <REDACTED_CLIENT_ID>, <REDACTED_EMAIL>) or anonymized
test values, ensuring no real tenant/domain, client IDs or user emails remain;
run a quick grep for those labels to verify all occurrences (including the other
reported occurrence) are redacted before committing.
- Around line 102-117: The fenced code block under "Files Modified" in
plugins/auth0/skills/auth0-hono/references/skill-test-report.md is missing a
language tag (triggering MD040); update the opening fence from ``` to include a
language (for example ```text) so the block becomes ```text and satisfies
markdownlint MD040—ensure the change is applied to the block that lists the
modified files (the block showing plugins/auth0/skills/auth0-hono/SKILL.md,
references/api.md, references/integration.md, etc.).
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: e0ec953a-e5f2-481e-bb8a-ccee5d6fff56

📥 Commits

Reviewing files that changed from the base of the PR and between de1154b and 98db45a.

📒 Files selected for processing (2)
  • plugins/auth0/README.md
  • plugins/auth0/skills/auth0-hono/references/skill-test-report.md
✅ Files skipped from review due to trivial changes (1)
  • plugins/auth0/README.md

Comment on lines +6 to +8
**Auth0 Tenant:** dev-10whndm3tf8jetu5.us.auth0.com
**Client ID:** vxx3Ko8xqRJgYqgvkOcuAiGLbYTiYYGM

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Redact tenant/client/user identifiers before committing this report.

This file currently exposes environment and user-identifying data (tenant domain, client ID, and personal email). Please replace with placeholders/anonymized values to avoid leaking PII and internal test metadata.

Suggested redaction patch
-**Auth0 Tenant:** dev-10whndm3tf8jetu5.us.auth0.com
-**Client ID:** vxx3Ko8xqRJgYqgvkOcuAiGLbYTiYYGM
+**Auth0 Tenant:** <redacted-tenant>.us.auth0.com
+**Client ID:** <redacted-client-id>
...
-| Authenticated `GET /` | browser | User greeting + email | `{"message":"Hello, tushar.pandey@okta.com!","email":"tushar.pandey@okta.com"}` | PASS |
+| Authenticated `GET /` | browser | User greeting + email | `{"message":"Hello, user@example.com!","email":"user@example.com"}` | PASS |

Also applies to: 41-41

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@plugins/auth0/skills/auth0-hono/references/skill-test-report.md` around lines
6 - 8, The report exposes sensitive Auth0 identifiers and an email; locate the
lines containing the "Auth0 Tenant:", "Client ID:" and any personal email in
skill-test-report.md and replace their actual values with placeholders (e.g.,
<REDACTED_TENANT>, <REDACTED_CLIENT_ID>, <REDACTED_EMAIL>) or anonymized test
values, ensuring no real tenant/domain, client IDs or user emails remain; run a
quick grep for those labels to verify all occurrences (including the other
reported occurrence) are redacted before committing.

Comment on lines +102 to +117
```
plugins/auth0/skills/auth0-hono/SKILL.md
- Added ESM prerequisite
- Added pauseSilentLogin, resumeSilentLogin to Quick Reference
- Added toSafeRedirect utility to Quick Reference
- Added ERR_PACKAGE_PATH_NOT_EXPORTED to Common Mistakes

plugins/auth0/skills/auth0-hono/references/api.md
- Fixed response_type default: 'id_token' → 'code'
- Fixed idpLogout default: false → true
- Fixed response_mode default: 'form_post' → — (conditional)
- Fixed route defaults: short paths → full paths

plugins/auth0/skills/auth0-hono/references/integration.md
- Fixed custom routes description (values used as-is, no prefix)
```

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor | ⚡ Quick win

Add a language to the fenced code block to satisfy markdownlint MD040.

The fenced block under “Files Modified” is missing a language tag.

Suggested lint fix
-```
+```text
 plugins/auth0/skills/auth0-hono/SKILL.md
   - Added ESM prerequisite
   - Added pauseSilentLogin, resumeSilentLogin to Quick Reference
   - Added toSafeRedirect utility to Quick Reference
   - Added ERR_PACKAGE_PATH_NOT_EXPORTED to Common Mistakes
 ...
 plugins/auth0/skills/auth0-hono/references/integration.md
   - Fixed custom routes description (values used as-is, no prefix)
</details>

<details>
<summary>🧰 Tools</summary>

<details>
<summary>🪛 markdownlint-cli2 (0.22.1)</summary>

[warning] 102-102: Fenced code blocks should have a language specified

(MD040, fenced-code-language)

</details>

</details>

<details>
<summary>🤖 Prompt for AI Agents</summary>

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In @plugins/auth0/skills/auth0-hono/references/skill-test-report.md around lines
102 - 117, The fenced code block under "Files Modified" in
plugins/auth0/skills/auth0-hono/references/skill-test-report.md is missing a
language tag (triggering MD040); update the opening fence from to include a language (for exampletext) so the block becomes ```text and satisfies
markdownlint MD040—ensure the change is applied to the block that lists the
modified files (the block showing plugins/auth0/skills/auth0-hono/SKILL.md,
references/api.md, references/integration.md, etc.).


</details>

<!-- fingerprinting:phantom:triton:hawk -->

<!-- This is an auto-generated comment by CodeRabbit -->

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant