ce-auth

Authenticate users with OTP, password, and token refresh for Commerce Engine storefronts.

Updated Feb 12, 2026
One-click install
npx skills add https://github.com/commercengine/skills --skill ce-auth
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ce-auth
Source: https://github.com/commercengine/skills/tree/main/skills/auth
Command: npx skills add https://github.com/commercengine/skills --skill ce-auth

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Authentication and user management are foundational for storefront apps. This skill consolidates anonymous auth, OTP login, password authentication, token refresh, user profiles, and customer groups under a single, consistent API.

Core Features & Use Cases

  • Anonymous authentication to bootstrap sessions for first-time visitors and enable seamless browsing while preserving security.
  • OTP-based login (email, phone, and WhatsApp) with optional automatic account creation when the user does not exist.
  • Password-based login for traditional credentials, plus token refresh and session management.
  • User profiles and customer groups for segmentation, access control, and personalized experiences across storefronts.

Quick Start

Install the SDK, initialize it in your app, then start with anonymous auth and progressively enable OTP or password login as your users sign in.

Frequently Asked Questions about ce-auth

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement passwordless OTP login for a storefront app?

Passwordless OTP login is implemented by sending one-time passwords via email, phone, or WhatsApp, then verifying the code to authenticate the user. This approach optionally auto-creates a new account if the user does not already exist.

What's the best way to handle anonymous authentication for first-time visitors?

Anonymous authentication bootstraps secure sessions for first-time visitors to enable seamless browsing. It preserves security while allowing users to explore the storefront before committing to a full account registration or login.

Does this authentication approach support both web and mobile storefront interfaces?

Yes, this unified authentication API applies to storefront applications across both web and mobile interfaces. It provides end-to-end user profiling and customer-group based access control for all connected platforms.

Can I manage user profiles and customer groups for access control in a storefront?

Yes, user profiles and customer groups are managed through a unified API for segmentation and access control. This enables personalized experiences and restricted access based on assigned customer groups.

How do token refresh and session management work with password-based authentication?

Password-based authentication validates traditional credentials and issues tokens that can be refreshed to maintain active sessions. Token refresh handles session management automatically without requiring users to log in repeatedly.

When do I need to use a unified API for storefront authentication and user management?

A unified API is needed when consolidating anonymous auth, OTP login, password authentication, token refresh, and user profiles under a single interface. This simplifies end-to-end authentication across web and mobile storefronts.