Implement authentication and access control for Next.js 15 and Supabase applications.
npx skills add https://github.com/BOM-98/FinTracker --skill auth
Please help me install this Agent Skill. Skill: auth Source: https://github.com/BOM-98/FinTracker/tree/main/.claude/skills/auth Command: npx skills add https://github.com/BOM-98/FinTracker --skill auth
Implementing robust authentication and access control is inherently complex and prone to security vulnerabilities. This skill provides a standardized, secure, and multi-tenant ready authentication system for Next.js 15 + Supabase applications, eliminating common security pitfalls and development overhead.
Protect the '/settings' route in a Next.js Server Component, redirecting unauthenticated users to '/login'.
High-intent search queries and answers about installing and using this skill.
Authentication and access control in Next.js 15 + Supabase uses httpOnly cookie-based sessions managed via Supabase Auth. The Skill provides server-side token validation, middleware token refresh, and role-based route protection for Server Components and Server Actions, plus multi-tenant data isolation with Row Level Security policies.
Protect Server Components and Server Actions using built-in authorization checks that validate user tokens via supabase.auth.getUser() and enforce role-based access rules. The Skill supplies requireAuth, requireAdmin, and requireFamilyAccess helpers to redirect unauthenticated or unauthorized users.
Yes. Supabase supports multi-tenant family-based data isolation through Row Level Security policies that restrict data access by family ID. The Skill implements admin and member role enforcement across Server Components, Server Actions, and route handlers to enforce tenant boundaries.
The Skill supports email and password login, email-verified registration, and OAuth via GitHub, all using Supabase's secure httpOnly cookie-based session handling. Token validation and refresh occur server-side for both traditional and OAuth flows.
Use the requireAdmin authorization check in your Next.js Server Component or route handler to verify admin role membership. Unauthorized users are redirected to a specified fallback route; the Skill handles token validation and role enforcement automatically.
wsimmondsTrigger Next.js server actions from client components to set cookies.
wyre-technologyManage Liongard detections, alerts, metrics, and timeline events via API.
cryptodiscolabAudits Supabase database architecture for RLS policies and data integrity.
JosiahSiegelImplement NextAuth.js v5 authentication with OAuth, JWT sessions, and role-based access control.