auth-engine

Define credential verification, token claim generation, and provider registration rules for QAuth.

23|1|Updated Oct 14, 2025
One-click install
npx skills add https://github.com/qauth-labs/qauth --skill auth-engine
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: auth-engine
Source: https://github.com/qauth-labs/qauth/tree/main/.claude/skills/auth-engine
Command: npx skills add https://github.com/qauth-labs/qauth --skill auth-engine

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill specifies the core rules and patterns for QAuth's authentication engine, enabling consistent handling of credential verification, token claim generation, and provider integration.

Core Features & Use Cases

  • Credential verification: Implements a pluggable interface for various credential providers like password and wallet authentication.
  • Token claim enforcement: Ensures proper generation of claims such as sub, email, and acr based on source trust levels.
  • Use Case: Developers can extend the authentication system with new providers or adjust claim logic to meet security requirements.

Quick Start

Refer to the documentation to implement or customize credential providers and integrate them into the QAuth authentication flow.

Frequently Asked Questions about auth-engine

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement custom credential verification for new authentication providers?

Token claim generation enforces proper creation of claims like sub, email, and acr based on source trust levels, ensuring accurate identity validation and secure token issuance across provider integrations.

Can I extend the authentication system with new identity providers?

Yes, developers can extend the authentication system by registering new providers and adjusting claim logic to meet specific security requirements, using the defined pluggable interfaces and claim resolution patterns.

What is token claim generation and how does it handle source trust levels?

Token claim generation defines rules for creating claims like sub, email, and acr based on source trust levels, ensuring proper identity validation and secure token issuance across different credential providers.

Does the authentication engine support password and wallet authentication providers?

Yes, the engine implements a pluggable interface that supports various credential providers including password and wallet authentication, allowing consistent credential verification across different authentication methods.

What are the limitations when adjusting claim logic for security requirements?

Adjusting claim logic requires strict adherence to interface standards and claim resolution logic, meaning customizations must align with the defined authentication rules to maintain secure and extensible authentication workflows.