bedrud-auth

Manage JWT authentication, refresh tokens, and server-side sessions in Go.

6|1|Updated May 4, 2026
One-click install
npx skills add https://github.com/themadorg/bedrud --skill bedrud-auth
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: bedrud-auth
Source: https://github.com/themadorg/bedrud/tree/main/.agents/skills/bedrud-auth
Command: npx skills add https://github.com/themadorg/bedrud --skill bedrud-auth

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Bedrud Auth Subsystem provides a secure, scalable authentication and authorization layer for Bedrud apps, centralizing user management, token handling, and access controls.

Core Features & Use Cases

  • JWT-based authentication with access and refresh tokens, plus a blocking/rehydration strategy via a session store.
  • Passkeys/WebAuthn registration and login workflows, with OAuth provider integration (Google/GitHub/Twitter).
  • User management functions like Register, Login, GuestLogin, UpdateProfile, ChangePassword, and Logout; middleware protections for protected routes and access checks.

Quick Start

Install and enable the bedrud-auth module in your Bedrud deployment to enable JWT-based authentication, passkey support, and OAuth providers.

Frequently Asked Questions about bedrud-auth

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement JWT authentication with refresh tokens in a Go application?

JWT authentication with refresh tokens is implemented by generating access tokens, validating them via middleware, and using a server-side session store to block or rehydrate sessions securely. This approach centralizes token handling and access controls.

How do I add WebAuthn passkey login and registration workflows to my web app?

WebAuthn passkey login and registration are supported through built-in challenge storage and workflow handlers. You can enable passkey support by installing the auth module to manage local user accounts and passwordless authentication flows.

Can I use this auth middleware to protect routes and manage guest sessions?

Yes, the auth middleware protects restricted routes and handles access checks. It also supports guest login workflows and user management functions like UpdateProfile, ChangePassword, and Logout for secure session handling.

What is the best way to manage user sessions and block compromised JWT tokens?

The best way to manage and block compromised JWT tokens is using a server-side session store. This strategy validates access and refresh tokens while allowing active session blocking and rehydration for enhanced security.

Does this authentication module work without external database dependencies?

The authentication module operates with zero external dependencies, relying on modular Go implementations in internal/auth and middleware. It handles token generation, validation, and challenge storage entirely within your Bedrud deployment environment.