auth

Scaffold authentication flows with user models, routes, middleware, and tests.

11|2|Updated Apr 7, 2026
One-click install
npx skills add https://github.com/porcupine-md/jonggrang --skill auth-porcupine-md
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: auth
Source: https://github.com/porcupine-md/jonggrang/tree/main/skills/core/auth
Command: npx skills add https://github.com/porcupine-md/jonggrang --skill auth-porcupine-md

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Implementing consistent, secure authentication across web apps and APIs can be time-consuming and error-prone. This scaffold provides a ready-to-use authentication foundation with support for JWT, sessions, or OAuth, covering user models, routes, middleware, and tests to ensure robust protection.

Core Features & Use Cases

  • Scaffolds a complete authentication layer including register, login, logout, and token verification.
  • Supports multiple strategies (jwt, session, oauth) and optional providers configuration.
  • Use Case: quickly add secure sign-in to a new web app or api with pluggable security layers and tests.

Quick Start

Generate a complete authentication scaffold for a web app using JWT by default, with optional session or OAuth paths, including user model, routes, middleware, and tests.

Frequently Asked Questions about auth

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I add JWT authentication and user login routes to my web app?

To add JWT authentication to your web app, scaffold a complete auth layer including user models, register and login routes, token handling, and middleware. This foundation supports multiple strategies and optional OAuth provider configurations for secure access.

What is the best way to structure a user model for secure password hashing and sessions?

A secure user model requires specific fields for password hashing and session management. Scaffolding the authentication layer specifies these required entities, integrating token handling and middleware to ensure robust protection across web apps and APIs.

Can I use OAuth providers alongside session-based authentication in my API?

Yes, the authentication scaffold supports multiple strategies including JWT, sessions, and OAuth. It adapts to your chosen strategy and allows optional provider configurations, enabling pluggable security layers for your web app or API.

How do I generate middleware for token verification and route protection?

You can generate token verification middleware by scaffolding the authentication foundation. This process creates the necessary routes and middleware integration to protect endpoints, applying robust security layers and including tests for validation.

Does this authentication scaffold include tests for the register and login flows?

Yes, the authentication scaffold includes tests for register, login, logout, and token verification flows. It covers user models, routes, and middleware to ensure the implemented authentication strategies maintain robust and secure protection.