Design authentication and authorization systems for applications and APIs.
npx skills add https://github.com/arbazkhan971/godmode --skill auth-arbazkhan971
Please help me install this Agent Skill. Skill: auth Source: https://github.com/arbazkhan971/godmode/tree/main/skills/auth Command: npx skills add https://github.com/arbazkhan971/godmode --skill auth-arbazkhan971
Provides a complete, security-first approach to designing and implementing authentication and authorization for applications and APIs, removing guesswork and preventing common identity-related vulnerabilities.
Use the auth skill to design a JWT-based API authentication strategy with refresh token rotation and TOTP MFA.
High-intent search queries and answers about installing and using this skill.
Design a JWT authentication strategy by enforcing short-lived access tokens and implementing refresh token rotation with revocation and blacklisting. This approach ensures secure session management and prevents unauthorized API access.
Implement MFA using TOTP, WebAuthn passkeys, and recovery codes with fallback guidance. This passwordless pattern secures user identities while providing recovery mechanisms for lost authentication devices.
OAuth2 and SAML single sign-on architecture decisions depend on application type, managing secure token lifecycles and session strategies across web, mobile, SPA, and SSR environments for federated identity.
Yes, you can use mTLS and API keys for microservice authentication. The system generates architecture decisions and implementation artifacts specifically for API-only backends and microservice environments requiring mutual TLS verification.
You need session management and cookie best practices for SPA and SSR backends when handling secure token lifecycles. Proper session strategies prevent identity vulnerabilities by enforcing revocation and secure cookie configurations.
Relying solely on JWT without refresh token rotation limits session revocation and blacklisting capabilities. Security hardening checklists enforce short-lived access tokens and refresh rotation to mitigate token theft and extended unauthorized access.
flvviusConfigure authentication providers and access control for Convex applications.
logo-solutionsValidate deployment readiness across code, infrastructure, and observability for production launches.
patricio0312revImplement OAuth 2.0 and OpenID Connect flows with PKCE and token handling.
imMamdouhaboammarDesign OAuth 2.0, OIDC, SAML, and SCIM authentication systems.
