convex-setup-auth

To set up Convex authentication with Clerk or Auth0, you configure the provider, establish user identity mapping, and enforce role-based access control. This skill guides provider selection, wiring, and protecting backend functions using ctx.auth.getUserIdentity().

The best way to add role-based access control to a Convex backend is to wire authentication configuration with identity mapping. This ensures protected queries and mutations validate user roles through ctx.auth.getUserIdentity() before executing.

Yes, you can use WorkOS AuthKit or a custom JWT provider with Convex auth. This skill supports wiring these providers, mapping user identities, and aligning environment variables for both development and production deployment environments.

Migrating between authentication providers in a Convex app involves selecting a new strategy like Convex Auth, Clerk, or Auth0, then rewiring the authentication configuration and updating identity mapping. This skill guides the provider migration and environment alignment process.

Convex Auth supports user management and identity mapping when properly wired with access control rules. This skill guides setting up a user model and ensures protected backend functions correctly use ctx.auth.getUserIdentity() for identity verification.