authenticate-apps
OfficialPassword-protect sandbox apps in minutes.
Software Engineering#authentication#fastify#scrypt#session cookies#authorization gate#react login#iframe safe
AuthorMotion-Creative
Version1.0.0
Installs0
System Documentation
What problem does it solve?
It solves the problem of leaving a Runneth sandbox app unprotected by adding a first-visit password setup and a persistent login gate so only authorized users can access the app.
Core Features & Use Cases
- Self-bootstrapping credentials setup: the first browser visit creates a username and password via a
/setupflow and persists credentials on disk. - Scrypt hashing + HMAC-signed sessions: passwords are scrypt-hashed and session cookies are signed with a separate random secret, enabling safer rotation behavior.
- Gated access with allow-listed endpoints: everything is blocked behind
/loginexcept explicit allow-list paths like/api/healthand the auth endpoints needed to sign in. - React-friendly JSON auth endpoints: supports programmatic login via
/api/auth/status,/api/auth/login, and/api/auth/logoutfor frontend gating (including iframe-safe cookie behavior).
Quick Start
Ask the agent to install authenticate-apps into your sandbox Fastify app and then open the app URL once to complete setup at /setup.
Dependency Matrix
Required Modules
None requiredComponents
Standard package💻 Claude Code Installation
Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.
Please help me install this Skill: Name: authenticate-apps Download link: https://github.com/Motion-Creative/runneth-apps/archive/main.zip#authenticate-apps Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
Agent Skills Search Helper
Install a tiny helper to your Agent, search and equip skill from 471,000+ vetted skills library on demand.