auth-middleware

What problem does it solve?

This Skill codifies the authentication and authorization architecture needed to securely layer Google and Microsoft OAuth flows on top of Supabase, preventing misconfigurations and ensuring middleware can enforce RBAC, session policies, and QA gates without blind spots.

Core Features & Use Cases

• Architecture guidance: Walks through Supabase vs custom auth decisions, PKCE enforcement, token refresh strategies, and how to align OAuth flows with Entra ID and Google Workspace APIs.
• Implementation patterns: Includes middleware and Next.js protection examples, Graph and Workspace API integration helpers, and session management plus security header best practices.
• Security QA: Ships with a bash QA gate that scans for hardcoded secrets, PKCE usage, CORS/cookie policies, audit logging, and Supabase RLS readiness before merging auth changes.

Quick Start

Ask auth-middleware to review your Google and Microsoft OAuth configuration, ensure Supabase middleware enforces PKCE and RBAC, and summarize the security guardrails before deployment.