skills.rest
jorgeochipinti97
jorgeochipinti97COMMUNITY
Explore all skills by this author →
GitHub

auth-architect

Design and audit authentication systems for web and mobile applications.

Updated Jan 22, 2026
Search Tags:#authorization#security#authentication#oauth#rbac#auth#abac
One-click install
npx skills add https://github.com/jorgeochipinti97/dublin-skills --skill auth-architect
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: auth-architect
Source: https://github.com/jorgeochipinti97/dublin-skills/tree/main/skills/security/auth-architect
Command: npx skills add https://github.com/jorgeochipinti97/dublin-skills --skill auth-architect

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Authentication and authorization often become the root cause of security flaws if not designed and audited properly.

Core Features & Use Cases

  • Design patterns for OAuth/OIDC, passkeys, email/password, and magic links
  • RBAC/ABAC strategies, multi-tenant RBAC, token rotation, CSRF protection, audit logging
  • Use cases across Next.js, NestJS, Clerk/Supabase Auth integrations
  • Real-world audits and vulnerability remediation for session fixation, token leakage, and mass assignment

Quick Start

Audit your current authentication flow and output concrete hardening steps for OAuth, passwordless, and RBAC configurations.

Frequently Asked Questions about auth-architect

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I design secure OAuth and passkey authentication for web and mobile apps?▼

Secure OAuth and passkey authentication is designed by implementing patterns for token rotation, secure token storage, and CSRF protection across web and mobile platforms. This approach covers OAuth/OIDC, passkeys, email+password, and magic links.

What is the best way to implement multi-tenant RBAC in a NestJS backend?▼

Multi-tenant RBAC in a NestJS backend is best implemented using structured role and attribute-based access control strategies. This enables granular permission management and secure authorization across different tenant boundaries.

Can I use this approach to audit existing authentication flows for token leakage?▼

Yes, you can audit existing authentication flows to identify vulnerabilities like token leakage and session fixation. The process outputs concrete hardening steps and remediation strategies for OAuth, passwordless, and RBAC configurations.

Does this authentication architecture work with Clerk and Supabase Auth integrations?▼

Yes, this authentication architecture fully supports Clerk and Supabase Auth integrations. It provides tailored use cases and design patterns for integrating these platforms within Next.js and NestJS environments.

How do I enforce MFA and audit logging in a Next.js application?▼

To enforce MFA and audit logging in a Next.js application, apply secure authentication design patterns that mandate multi-factor verification steps and track user actions. This ensures safe user data practices and comprehensive security monitoring.

Related Skills

Explore More Software Engineering Skills→
u1pnsu1pns
8

software-architect

Translate a PRD into a technical blueprint with stack, architecture, and security models.

Community
Advanced
hiroto0701hiroto0701

security-patterns

Implement JWT authentication and security patterns for hardened applications.

Community
Advanced
TencentCloudBaseTencentCloudBase
1.1k

postgresql-development-cloudbase

Manage CloudBase PostgreSQL schemas, migrations, and row-level security policies.

Official
Advanced
sitharaj88sitharaj88
1

azure-rbac

Generate Azure RBAC assignments, custom roles, managed identities, and policies in Bicep, Terraform, and Azure CLI.

Community
Advanced