WiFi captive portal development patterns for guest WiFi networks. Splash pages, authentication flows, data capture, RADIUS integration, social WiFi login, and guest network provisioning.
Scanned 5/27/2026
Install via CLI
Skills Directoryopenskills install KevinZai/commander---
name: wifi-captive-portal
description: "WiFi captive portal development patterns for guest WiFi networks. Splash pages, authentication flows, data capture, RADIUS integration, social WiFi login, and guest network provisioning."
category: networking
risk: safe
source: custom
tags: [wifi, captive-portal, guest-network, radius, mywifi]
---
# WiFi Captive Portal Development
## When to Use
- Building or modifying captive portal splash pages
- Implementing guest WiFi authentication flows
- Integrating social login (Facebook, Google, Apple) for WiFi access
- Building data capture forms for WiFi signup
- Working with RADIUS servers or UniFi/Meraki controllers
- Implementing MAC address authentication
- Building location-based WiFi analytics
## Architecture Patterns
### Captive Portal Flow
```
Guest connects → DHCP assigns IP → HTTP redirect to splash →
User authenticates (social/email/SMS) → MAC authorized →
RADIUS accepts → Internet access granted → Session tracked
```
### Key Components
1. **Splash Page** — branded landing (React/Next.js), responsive, fast load
2. **Auth Backend** — social OAuth, email/SMS verification, form capture
3. **RADIUS Integration** — FreeRADIUS or cloud RADIUS, MAC auth
4. **Controller API** — UniFi, Meraki, Ruckus, OpenWrt APIs
5. **Analytics** — session duration, return visits, demographics
6. **CRM Sync** — captured data → HubSpot/Mailchimp/Klaviyo
### Social WiFi Login
- Facebook WiFi API (deprecated → use Meta Graph API)
- Google OAuth 2.0 → capture email + name
- Apple Sign In → privacy relay considerations
- SMS OTP → Twilio Verify for phone capture
### Data Capture Best Practices
- Minimal fields (email OR phone, never both required)
- GDPR/CCPA consent checkbox mandatory
- Marketing opt-in separate from WiFi access
- Store: email, phone, name, MAC, location, visit timestamps
## Security
- HTTPS on splash page always (even if portal is HTTP redirect)
- Rate limit auth attempts
- MAC spoofing detection
- Session timeout enforcement
- PCI compliance if collecting payment data
No comments yet. Be the first to comment!
Use this skill when developing or maintaining browser extension code in the `browser/` directory, including Chrome/Firefox/Edge compatibility, content scripts, background scripts, or i18n updates.
SEO optimization with keyword analysis, readability assessment, technical validation, content quality. Use for search rankings, blog posts, content audits, or encountering keyword density, readability scores, meta tags, schema markup errors.
Python backend development expertise for FastAPI, security patterns, database operations, Upstash integrations, and code quality. Use when: (1) Building REST APIs with FastAPI, (2) Implementing JWT/OAuth2 authentication, (3) Setting up SQLAlchemy/async databases, (4) Integrating Redis/Upstash caching, (5) Refactoring AI-generated Python code (deslopification), (6) Designing API patterns, or (7) Optimizing backend performance.
Drive the full internationalization journey for a project — detect the stack, recommend a library, set up the chosen library, wrap existing strings, and optionally connect a translation platform. Use when the user asks to add or configure i18n, internationalization, localization, multi-language support, or translations — including when they explicitly mention LinguiJS, Lingui, next-intl, "wrap strings", "find hardcoded text", "make my app translatable", or "set up translations". Triggers on g...
PTES-aligned adversarial security audit for backend, frontend, and mobile applications. Produces a CVSS-scored Hacker Report with verified PoCs and phased remediation.
