Implement user authentication, sessions, OAuth, 2FA, and passkeys for the Epic Stack.
npx skills add https://github.com/mbdeaton/phys-notes --skill epic-auth-mbdeaton
Please help me install this Agent Skill. Skill: epic-auth Source: https://github.com/mbdeaton/phys-notes/tree/main/docs/skills/epic-auth Command: npx skills add https://github.com/mbdeaton/phys-notes --skill epic-auth-mbdeaton
This Skill provides a comprehensive guide and implementation patterns for securing user access, managing sessions, and handling various authentication flows within the Epic Stack framework.
Use the epic-auth skill to implement user login with email and password.
High-intent search queries and answers about installing and using this skill.
User authentication in the Epic Stack is implemented using detailed patterns for email and password flows, including signup, login, and logout. It provides specific examples for least privilege validation and secure credential handling.
Secure session management uses cookie-based sessions combined with database storage. This approach ensures fail-fast validation and least privilege access, addressing common mistakes like insecure session storage or improper cookie configuration.
Yes, you can configure OAuth integration with third-party providers like GitHub and Google. The guide covers the implementation patterns needed to route external OAuth flows through the Epic Stack.
Yes, the Epic Stack supports multi-factor authentication using TOTP for 2FA and secure passkey authentication via WebAuthn. These flows integrate with existing session management to provide layered access security.
Email verification for new signups and secure password resets are handled through dedicated authentication flows. The guide provides detailed examples for implementing these processes while avoiding common security mistakes.
Authentication validation fails fast to enforce least privilege and prevent invalid data from processing further. Common mistakes include improper cookie-based session handling or missing validation steps in the email, OAuth, or WebAuthn flows.
M-KolaczSecure Epic Stack authentication with sessions, OAuth, 2FA, and WebAuthn.
Luqman-Ud-DinValidate login submission, logout behavior, and protected-route redirects in web applications.
GainInsightDevVerify email delivery in Playwright tests using the Gmail API.
walbucImplement secure authentication and session management for Epic Stack apps.
