maui-authentication
Facilitates authentication in .NET MAUI apps using OAuth 2.0 and Microsoft Entra ID, supporting various platforms and social logins.
Install this skill
Security score
The maui-authentication skill was audited on Mar 1, 2026 and we found 20 security issues across 4 threat categories, including 3 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Curl to non-GitHub URL
| 257 | curl -LO https://aka.ms/msidweb/aspire/entra-id-provisioning-skill |
Curl to non-GitHub URL
| 731 | curl -LO https://aka.ms/msidweb/aspire/entra-id-code-skill |
Access to hidden dotfiles in home directory
| 263 | cp -R /tmp/msidweb/.github/skills/entra-id-aspire-provisioning ~/.claude/skills/ |
Access to system keychain/keyring
| 155 | Store tokens securely using `SecureStorage` (Keychain on iOS, Keystore on Android): |
Access to system keychain/keyring
| 354 | .WithIosKeychainSecurityGroup("com.microsoft.adalcache"); |
Access to system keychain/keyring
| 534 | #### 2. Entitlements.plist — Keychain sharing (required for token cache) |
Access to system keychain/keyring
| 537 | <key>keychain-access-groups</key> |
Access to system keychain/keyring
| 761 | - [ ] iOS: `Entitlements.plist` has keychain group `com.microsoft.adalcache` |
External URL reference
| 29 | Url = new Uri("https://your-server.com/auth/login"), |
External URL reference
| 185 | private const string AuthUrl = "https://your-server.com/auth/login"; |
External URL reference
| 257 | curl -LO https://aka.ms/msidweb/aspire/entra-id-provisioning-skill |
External URL reference
| 272 | 1. Go to [Microsoft Entra admin center](https://entra.microsoft.com) → App registrations → New registration |
External URL reference
| 279 | - Windows/macOS: `http://localhost` |
External URL reference
| 297 | "Authority": "https://login.microsoftonline.com/{TenantId}", |
External URL reference
| 312 | public const string Authority = $"https://login.microsoftonline.com/{TenantId}"; |
External URL reference
| 362 | builder = builder.WithRedirectUri("http://localhost"); |
External URL reference
| 469 | <manifest xmlns:android="http://schemas.android.com/apk/res/android"> |
External URL reference
| 568 | No special platform setup. MSAL uses `http://localhost` redirect by default. |
External URL reference
| 620 | client.BaseAddress = new Uri("https://your-api.azurewebsites.net/"); |
External URL reference
| 731 | curl -LO https://aka.ms/msidweb/aspire/entra-id-code-skill |
Install this skill with one command
/learn @davidortinau/maui-authentication