bkend-auth

Implement secure JWT token lifecycle and session management by issuing short-lived access tokens paired with refresh tokens. This Skill handles access tokens valid for one hour and refresh tokens valid for seven days to maintain secure user sessions across web applications.

The best way to set up RBAC and Row-Level Security policies is by defining admin, user, self, and guest roles within your authentication flow. This restricts data access at the row level, ensuring users only interact with authorized records.

Yes, you can use social login alongside email and password authentication. This Skill supports Google and GitHub social logins in addition to traditional email and password signup, magic link authentication, and RESTful authentication endpoints.

Yes, this authentication approach supports magic link and password management flows. It handles the complete account lifecycle, including onboarding, login flows, password management, and secure user access across modern web applications.

Configure RESTful authentication endpoints for onboarding and login flows by setting up baseline email and password processing with JWT-based sessions. You can then validate social login, token refresh, and RBAC-based access control through these endpoints.