Authenticate Bedrud API endpoints with JWT, OAuth, and passkey flows.
npx skills add https://github.com/themadorg/bedrud --skill bedrud-api-auth
Please help me install this Agent Skill. Skill: bedrud-api-auth Source: https://github.com/themadorg/bedrud/tree/main/.agents/skills/bedrud-api-auth Command: npx skills add https://github.com/themadorg/bedrud --skill bedrud-api-auth
Provides a complete authentication and authorization system for Bedrud API services, including JWT-based sessions, local and OAuth logins, passkeys, email verification, preferences, and consistent error handling, all secured by middleware and rate limiting.
Integrate the Bedrud API auth module by wiring the JWT middleware and /api/auth routes into your server, then test login flows.
High-intent search queries and answers about installing and using this skill.
JWT authentication with access and refresh tokens is implemented using HttpOnly cookies and refresh rotation. This approach secures Bedrud API endpoints by validating tokens via middleware and rotating refresh tokens automatically to prevent session hijacking.
Yes, passkey authentication and OAuth login flows are fully supported alongside local registration. The system provides dedicated endpoints for passkey registration and login, allowing API services to offer passwordless authentication and third-party OAuth provider integrations.
Protecting API routes with middleware and rate limiting is best handled by applying global and route-specific middleware. This enforces permission checks, validates JWT access, and applies rate limiting to prevent abuse on protected endpoints.
Yes, the auth system supports user preferences and email verification endpoints. It includes public settings for onboarding and manages user preference updates, ensuring accounts are verified and customized before accessing protected API resources.
Health and readiness endpoints are set up by wiring dedicated routes into your server configuration. These endpoints provide service checks for API availability and TLS provisioning readiness, ensuring your authenticated services report operational status correctly.
stacksjsDefine and manage API endpoints for Stacks applications with route definitions and middleware.
hydrolixAnalyzes Zuplo gateway and Akamai DS2 edge logs for API traffic and security correlations.
tan-yong-shengImplement framework-agnostic TypeScript authentication with email/password, OAuth, 2FA, passkeys, sessions, and RBAC.
AutumnsGroveImplement OAuth 2.0, PKCE, JWT, and session-based authentication with route protection.
