convex-auth

Enforce authentication and authorization in Convex server functions with OpenID Connect providers.

Updated Jan 28, 2026
One-click install
npx skills add https://github.com/IgorWarzocha/realtime-dashboard-analytics-demo --skill convex-auth
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: convex-auth
Source: https://github.com/IgorWarzocha/realtime-dashboard-analytics-demo/tree/main/.opencode/skill/convex-auth
Command: npx skills add https://github.com/IgorWarzocha/realtime-dashboard-analytics-demo --skill convex-auth

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Convex apps often require consistent authentication and authorization to protect data and operations. This Skill provides patterns, integrations, and best practices to implement identity management, provider-based authentication, and internal authorization checks.

Core Features & Use Cases

  • Provider-based authentication: Integrate Clerk, Auth0, WorkOS, or Convex Auth to verify users.
  • Role and access control: Enforce per-user or per-role permissions in server functions.
  • Use Case: Secure a multi-tenant dashboard by validating the current user identity before data access and restricting sensitive actions.

Quick Start

Set up a Convex project with a chosen provider (Clerk/Auth0/WorkOS) or Convex Auth, wire the provider to issue tokens, and in server functions call ctx.auth.getUserIdentity() to enforce access before proceeding.

Frequently Asked Questions about convex-auth

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement authentication in a Convex app?

To implement authentication in a Convex app, integrate an OpenID Connect provider like Clerk, Auth0, WorkOS, or use Convex Auth. You then call ctx.auth.getUserIdentity() inside server functions to verify users before processing operations.

What is the best way to enforce row-level authorization for public Convex operations?

Row-level authorization in Convex is enforced by validating the current user identity via ctx.auth.getUserIdentity() in server functions. You restrict data access and sensitive actions per-user or per-role before allowing public and internal operations to proceed.

Can I use Clerk or Auth0 for secure identity management in Convex?

Yes, you can use Clerk, Auth0, or WorkOS for secure identity management in Convex. These OpenID Connect providers wire directly to issue tokens, allowing server functions to verify user identities and apply access controls.

How do I secure a multi-tenant dashboard with Convex Auth?

Securing a multi-tenant dashboard with Convex Auth involves validating the current user identity before data access and restricting sensitive actions. You enforce per-user or per-role permissions within server functions to protect operations.

Does service-to-service access in Convex require an OpenID Connect provider?

Yes, service-to-service access and user identity checks in Convex require integration with an OpenID Connect provider or Convex Auth. This setup allows server functions to securely verify identities and enforce authorization controls.