auth-rbac

Name: auth-rbac
Availability: InStock
Author: spoonbobo

Manages Trinity AGI authentication and RBAC with JWTs and audit logging.

Updated Feb 27, 2026

Search Tags:#authorization #authentication #jwt #access control #rbac #api security #audit log

Ready to run

npx skills add https://github.com/spoonbobo/trinity --skill auth-rbac-spoonbobo

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: auth-rbac
Source: https://github.com/spoonbobo/trinity/tree/main/.opencode/skills/auth-rbac
Command: npx skills add https://github.com/spoonbobo/trinity --skill auth-rbac-spoonbobo

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill manages the authentication and authorization systems for Trinity AGI, ensuring that only legitimate users can access resources and perform specific actions.

Core Features & Use Cases

User Authentication: Handles login via email/password or OIDC (Keycloak), issuing JWTs.
Role-Based Access Control (RBAC): Manages a hierarchical role system with permissions, ensuring granular access.
API Security: Protects API endpoints using middleware to verify tokens and permissions.
Audit Logging: Records all significant access and administrative actions for security and compliance.
OpenClaw Management: Facilitates the assignment and management of OpenClaw instances to users.
Use Case: A new developer joins the team and needs access to specific tools. The admin can assign them the 'developer' role, which automatically grants them the necessary permissions to use the required services without manual configuration for each resource.

Quick Start

Use the auth-rbac skill to list all users and their assigned roles.

Frequently Asked Questions about auth-rbac

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I implement role-based access control and JWT authentication for my API?▼

Role-based access control and JWT authentication can be implemented by managing a database schema with a hierarchical role system, handling login flows via email/password or OIDC, and using middleware to verify tokens and permissions on protected API endpoints.

What is the best way to manage user permissions and assign roles to new team members?▼

Managing user permissions involves assigning predefined roles like 'developer' to users, which automatically grants them granular access to specific resources and services without requiring manual configuration for each individual resource.

Does this RBAC system support integration with Keycloak for OIDC authentication?▼

Yes, this RBAC system supports OIDC authentication directly through Keycloak, allowing you to handle user login and issue JWTs alongside standard email and password authentication flows.

How do I record audit logs for API access and administrative actions?▼

Audit logs for API access and administrative actions are recorded automatically by the system, capturing all significant access events and permission changes to ensure security and compliance.

Can I use this access control system to manage OpenClaw instances for users?▼

Yes, you can use this access control system to facilitate the assignment and management of OpenClaw instances to specific users based on their authenticated identity and assigned role permissions.