Guide authentication system design from threat modeling to token mechanisms.
npx skills add https://github.com/Emmraan/agent-skills --skill authentication-emmraan
Please help me install this Agent Skill. Skill: authentication Source: https://github.com/Emmraan/agent-skills/tree/main/skills/authentication Command: npx skills add https://github.com/Emmraan/agent-skills --skill authentication-emmraan
This Skill provides a comprehensive framework for designing, implementing, and securing authentication systems, ensuring robust identity verification and credential management.
Use the authentication skill to design a secure authentication system for a new web application that requires passwordless login and MFA.
High-intent search queries and answers about installing and using this skill.
Designing a secure authentication system requires threat modeling, strategy selection, and implementing credential management. The framework covers user registration, password hashing, multi-factor authentication, and API authentication for microservices.
Implementing JWT security involves selecting signing algorithms, defining token lifetimes, and establishing refresh token mechanics. A robust design also includes specific revocation strategies to invalidate compromised tokens effectively.
OAuth 2.0 and OIDC flows enable passwordless login by delegating identity verification to external providers. This approach manages credentials securely without handling raw passwords directly in your application database.
Multi-factor authentication and account recovery are essential for robust identity verification. Implementing them ensures secure access control and provides safe credential restoration paths if users lose access.
Choosing between building or buying authentication depends on your threat model and resource constraints. Building custom offers granular control over credential management, while buying reduces implementation overhead for standard OAuth and mTLS flows.
Secure password hashing and API authentication require strong password policies and pattern-specific implementations. Best practices include using dedicated hashing algorithms and securing microservices with mTLS or API keys.
BellaBeIdentify and prioritize project risks across categories with scored likelihood and impact.
akillnessImplement JWT-based authentication with password hashing and RBAC for backend applications.
splits-networkImplement authentication and authorization with Clerk and RBAC across microservices.
langbyyiDetect OAuth 2.0 and OpenID Connect misconfigurations in federated authentication systems.
