Protecting APIs with Duende IdentityServer: JWT bearer authentication, reference token introspection, scope-based authorization, DPoP/mTLS proof-of-possession validation, local API authentication, and multi-audience scenarios.
Install
npx skills add DuendeSoftware/duende-skills --skill identityserver-api-protectionnpx skills add DuendeSoftware/duende-skills --skill identityserver-api-protection -a claude-code -gnpx skills add DuendeSoftware/duende-skills --skill identityserver-api-protection -a codex -ggemini skills install https://github.com/DuendeSoftware/duende-skills.git --path skills/identityserver-api-protectiongh skill install DuendeSoftware/duende-skills identityserver-api-protectiongit clone --depth 1 https://github.com/DuendeSoftware/duende-skills /tmp/DuendeSoftware__duende-skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/DuendeSoftware__duende-skills/skills/identityserver-api-protection ~/.claude/skills/identityserver-api-protection # Claude Code
cp -R /tmp/DuendeSoftware__duende-skills/skills/identityserver-api-protection ~/.agents/skills/identityserver-api-protection # Codex, Cursor, Gemini CLI, Copilot, OpenCode