auth-setup

Implement passwordless authentication with WebAuthn and magic links in Rails 8.0.

Updated Jun 9, 2026
One-click install
npx skills add https://github.com/arthun01/achados-uesc --skill auth-setup-arthun01
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: auth-setup
Source: https://github.com/arthun01/achados-uesc/tree/main/.opencode/skills/auth-setup
Command: npx skills add https://github.com/arthun01/achados-uesc --skill auth-setup-arthun01

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires ActionPack::Passkey, bcrypt, has_secure_token, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the need for a simple, custom authentication system for web applications, providing passwordless authentication with WebAuthn and magic links.

Core Features & Use Cases

  • Custom Passwordless Auth: Offers a passwordless authentication system without the use of Devise.
  • WebAuthn Support: Implements passkey authentication as the primary sign-in method.
  • Magic Links: Provides magic link authentication as a fallback for passwordless login.
  • Session Management: Manages session tokens and user authentication status.
  • Use Case: This Skill can be integrated into web applications requiring secure user authentication, especially in scenarios where password-based authentication is not preferred or is difficult to implement.

Quick Start

Use the auth-setup skill to create a new user account with a magic link.

Frequently Asked Questions about auth-setup

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement passwordless authentication in Rails without Devise?

Passwordless authentication in Rails without Devise is built using ActionPack::Passkey for WebAuthn passkeys and magic links for fallback login. This approach manages session tokens directly without traditional passwords.

What is a magic link and how does it work for WebAuthn fallback?

A magic link is a passwordless login URL sent to a user. This system uses it as a fallback authentication method alongside WebAuthn, allowing secure login when passkey authentication is unavailable or difficult to set up.

Does WebAuthn passkey authentication require Rails 8.0?

Yes, WebAuthn passkey authentication with ActionPack::Passkey requires Rails 8.0 or higher. This custom passwordless session management setup depends on ActionPack::Passkey, bcrypt, and has_secure_token to function properly.

What's the best way to add passkey authentication to a web application?

The best way to add passkey authentication is implementing WebAuthn as the primary sign-in method with magic links as a fallback. ActionPack::Passkey handles the passkey logic while bcrypt and has_secure_token manage session tokens securely.

Can I use bcrypt for session management in a passwordless auth system?

Yes, bcrypt is used alongside has_secure_token for session management in this passwordless auth system. They manage session tokens and user authentication status without traditional password storage or verification.