auth-flow-validator

What problem does it solve?

Authentication flows often suffer from weak token handling, insecure password storage, and flaky session management, leading to data breaches and user risk.

Core Features & Use Cases

• JWT validation and rotation guidance: Ensure proper signing algorithms, token lifetimes, and payload safety.
• Password hashing best practices: Enforce Argon2id or bcrypt and avoid weak hashes.
• Session & cookie hardening: Recommend HttpOnly, Secure, and SameSite settings, plus secure token storage.
• Use Case: When auditing a new login flow, this Skill guides securing tokens and sessions.

Quick Start

Audit the current authentication setup by reviewing JWT handling, Argon2 password hashing, and session management, then report findings.