skills.rest
Intellifill
IntellifillOFFICIAL
Explore all skills by this author →
WebsiteGitHub

auth-flow

Implement unified Supabase Auth and JWT handling across frontend and backend.

1|Updated Aug 8, 2025
Search Tags:#authentication#jwt#supabase#frontend-security#token-refresh#backend-auth
One-click install
npx skills add https://github.com/Intellifill/IntelliFill --skill auth-flow
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: auth-flow
Source: https://github.com/Intellifill/IntelliFill/tree/main/.claude/skills/auth-flow
Command: npx skills add https://github.com/Intellifill/IntelliFill --skill auth-flow

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides a structured approach to implementing secure authentication in IntelliFill projects, consolidating Supabase Auth, JWT handling, and backend auth mode into a unified flow.

Core Features & Use Cases

  • Unified Auth Flow: Bridges frontend (React-like) and backend API for secure authentication.
  • Token Management: Outlines JWT generation, validation, token refresh, and session persistence with secure storage.
  • Protected Routes & Backend Mode: Guides on implementing route guards, middleware, and backend-auth configuration to avoid direct frontend access to sensitive services.
  • Security Best Practices: Covers rate limiting, password reset, and account lockout to improve security posture.

Quick Start

Begin by configuring your environment for backend auth mode, add the backendAuthStore and API endpoints following the patterns described, and wire protected routes to ensure authenticated access.

Frequently Asked Questions about auth-flow

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement Supabase Auth across frontend and backend?▼

Unified authentication across frontend and backend is implemented by configuring backend auth mode, adding an auth store, and wiring protected API endpoints to bridge client and server contexts.

What is the best way to handle JWT token refresh and session persistence?▼

JWT token refresh and session persistence are handled by following established patterns for token generation, validation, and secure storage to maintain authenticated sessions without exposing sensitive services.

How do I set up protected routes and middleware for backend authentication?▼

Protected routes are set up by implementing route guards and backend-auth configuration middleware, ensuring the frontend avoids direct access to sensitive services by routing through backend endpoints.

Does this auth flow approach support rate limiting and account lockout?▼

The authentication flow includes security best practices such as rate limiting, password reset procedures, and account lockout configurations to improve the overall security posture of the application.

Can I use backend auth mode to prevent direct frontend access to my database?▼

Backend auth mode is specifically designed to prevent direct frontend access by routing sensitive database and service interactions through protected backend API endpoints and validated JWTs.

Related Skills

Explore More Software Engineering Skills→
artofrawrartofrawr
1

supabase-python

Build a FastAPI API with Supabase authentication and SQLModel data access.

Community
Advanced
EstomEstom

fastapi-expert

Build async Python APIs with FastAPI, Pydantic V2, and SQLAlchemy.

Community
Advanced
NickCrewNickCrew
29

api-gateway-patterns

Implement API gateway routing, authentication, and traffic management for microservices.

Community
Intermediate
phuhao00phuhao00

auth-skill

Implement OAuth and OIDC authentication with PKCE for third-party login providers.

Community
Advanced