auth-architect

Name: auth-architect
Availability: InStock
Author: jorgeochipinti97

Design and audit authentication systems for web and mobile applications.

Updated Jan 22, 2026

Search Tags:#authorization #security #authentication #oauth #rbac #auth #abac

Ready to run

npx skills add https://github.com/jorgeochipinti97/dublin-skills --skill auth-architect

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: auth-architect
Source: https://github.com/jorgeochipinti97/dublin-skills/tree/main/skills/security/auth-architect
Command: npx skills add https://github.com/jorgeochipinti97/dublin-skills --skill auth-architect

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Authentication and authorization often become the root cause of security flaws if not designed and audited properly.

Core Features & Use Cases

Design patterns for OAuth/OIDC, passkeys, email/password, and magic links
RBAC/ABAC strategies, multi-tenant RBAC, token rotation, CSRF protection, audit logging
Use cases across Next.js, NestJS, Clerk/Supabase Auth integrations
Real-world audits and vulnerability remediation for session fixation, token leakage, and mass assignment

Quick Start

Audit your current authentication flow and output concrete hardening steps for OAuth, passwordless, and RBAC configurations.

Frequently Asked Questions about auth-architect

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I design secure OAuth and passkey authentication for web and mobile apps?▼

Secure OAuth and passkey authentication is designed by implementing patterns for token rotation, secure token storage, and CSRF protection across web and mobile platforms. This approach covers OAuth/OIDC, passkeys, email+password, and magic links.

What is the best way to implement multi-tenant RBAC in a NestJS backend?▼

Multi-tenant RBAC in a NestJS backend is best implemented using structured role and attribute-based access control strategies. This enables granular permission management and secure authorization across different tenant boundaries.

Can I use this approach to audit existing authentication flows for token leakage?▼

Yes, you can audit existing authentication flows to identify vulnerabilities like token leakage and session fixation. The process outputs concrete hardening steps and remediation strategies for OAuth, passwordless, and RBAC configurations.

Does this authentication architecture work with Clerk and Supabase Auth integrations?▼

Yes, this authentication architecture fully supports Clerk and Supabase Auth integrations. It provides tailored use cases and design patterns for integrating these platforms within Next.js and NestJS environments.

How do I enforce MFA and audit logging in a Next.js application?▼

To enforce MFA and audit logging in a Next.js application, apply secure authentication design patterns that mandate multi-factor verification steps and track user actions. This ensures safe user data practices and comprehensive security monitoring.