epic-auth

Implement secure authentication and session management for Epic Stack apps.

Updated Jan 29, 2026
One-click install
npx skills add https://github.com/walbuc/iac-sorteios --skill epic-auth-walbuc
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: epic-auth
Source: https://github.com/walbuc/iac-sorteios/tree/main/docs/skills/epic-auth
Command: npx skills add https://github.com/walbuc/iac-sorteios --skill epic-auth-walbuc

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Building secure, scalable authentication and session management for modern web apps.

Core Features & Use Cases

  • Authentication with email/password, OAuth providers, and WebAuthn passkeys.
  • Robust session management with cookie-based sessions and 2FA integration.
  • Support for email verification, password reset, and secure logout flows to protect user accounts.

Quick Start

Start by wiring login, signup, OAuth, 2FA, and WebAuthn into your Epic Stack app to enable end-to-end authentication.

Frequently Asked Questions about epic-auth

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement secure session management with cookie-based sessions in my web app?

Secure session management uses cookie-based sessions with least-privilege data access and robust error handling to protect user accounts. It integrates directly with 2FA, email verification, and password reset workflows.

How does 2FA and WebAuthn passkey authentication work with email and password login?

2FA and WebAuthn passkey authentication layer on top of standard email and password login to verify users. TOTP support and OAuth provider integration enable scalable, multi-method authentication across web applications.

Can I use this authentication approach with my existing Epic Stack application?

Yes, this authentication and session management is built specifically for Epic Stack apps. You wire login, signup, OAuth, 2FA, and WebAuthn directly into your application to enable end-to-end secure workflows.

What is the best way to set up email verification and password reset flows?

The best way to set up email verification and password reset flows is using a unified authentication system that enforces secure logout and robust error handling. This protects user accounts while managing verification tokens safely.

How do I integrate OAuth providers alongside TOTP and WebAuthn in my signup process?

You integrate OAuth providers alongside TOTP and WebAuthn during the signup process to offer multiple secure verification methods. This supports scalable authentication by letting users choose passkeys, authenticator apps, or provider logins.