auth

Implements authentication and authorization flows for web apps, including login, registration, session management, protected routes, and RBAC with pluggable password/OAuth strategies and token handling.

Updated Apr 19, 2026
One-click install
npx skills add https://github.com/saranskumar/anti-slop --skill auth-saranskumar
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: auth
Source: https://github.com/saranskumar/anti-slop/tree/main/archive/skills-legacy/auth
Command: npx skills add https://github.com/saranskumar/anti-slop --skill auth-saranskumar

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Implement consistent authentication and authorization patterns for applications, including login, registration, session handling, protected routes, and role-based access.

Core Features & Use Cases

  • Stack-agnostic authentication and authorization patterns that can be adapted to JWT, session-based, or OAuth systems.
  • Clear guidance on where to enforce authorization (server-side) and how to secure tokens and sessions.
  • Use Case: Apply role-based access control to protect admin-only endpoints and user data.

Quick Start

Integrate the project’s authentication system (JWT, OAuth, or session-based) and secure protected routes according to defined roles.

Frequently Asked Questions about auth

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement authentication and authorization flows for web applications?

Authentication and authorization flows for web applications are implemented by integrating login, registration, session management, and role-based access control. This approach supports pluggable strategies like password-based logins, social logins, and OAuth providers.

What is the best way to secure protected routes with role-based access control?

Role-based access control secures protected routes by enforcing authorization on the server-side. This pattern protects admin-only endpoints and user data by validating user roles before granting access to specific application routes.

Can I use this pattern with JWT, session-based, or OAuth systems?

Yes, these stack-agnostic authentication patterns can be adapted to JWT, session-based, or OAuth systems. They provide clear guidance on securing tokens and managing sessions across various modern web app environments.

How do I manage secure password storage and token invalidation?

Secure password storage and token management are handled through pluggable authentication strategies. The system supports token management, secure password storage, and session invalidation to maintain application security.

Where should I enforce authorization in a modern web app?

Authorization should be enforced on the server-side within modern web apps. Server-side enforcement protects endpoints and user data by validating roles and sessions before processing requests.