heartwood-auth

Integrate Heartwood authentication into Grove applications for sign-in and session management.

Updated Nov 30, 2025
One-click install
npx skills add https://github.com/AutumnsGrove/GroveScout --skill heartwood-auth
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: heartwood-auth
Source: https://github.com/AutumnsGrove/GroveScout/tree/main/.claude/skills/heartwood-auth
Command: npx skills add https://github.com/AutumnsGrove/GroveScout --skill heartwood-auth

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Heartwood integration solves the challenge of implementing centralized authentication across Grove properties, enabling secure sign-in and consistent session handling.

Core Features & Use Cases

  • OAuth providers (Google) for sign-in
  • Magic links for passwordless login via Resend
  • Passkeys (WebAuthn) for passwordless sessions
  • KV-cached sessions for sub-100ms validation
  • Cross-subdomain SSO across all .grove.place apps
  • Guidance for client/server integration and admin-route protection

Quick Start

Install and wire Heartwood authentication in your Grove app using the recommended client library and configure the Heartwood auth API endpoint.

Frequently Asked Questions about heartwood-auth

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I set up authentication for Grove applications using cross-subdomain SSO?

Grove applications use Heartwood authentication to set up cross-subdomain SSO across all .grove.place apps. You install the recommended client library, configure the Heartwood auth API endpoint, and secure sign-in with KV-cached sessions for sub-100ms validation.

Can I use passkeys and magic links for passwordless login in Grove apps?

Yes, passwordless login in Grove apps supports passkeys via WebAuthn and magic links delivered through Resend. Heartwood handles the session creation and validation, allowing users to sign in without traditional passwords.

How do I protect routes and validate sessions in a Grove application?

Route protection and session validation in Grove applications are handled by Heartwood authentication. It validates KV-cached sessions in under 100ms and provides client/server integration guidance to secure admin routes and protect application endpoints.

Does Heartwood authentication work with OAuth providers like Google?

Heartwood authentication integrates with OAuth providers like Google to secure sign-in for Grove applications. This centralizes authentication across Grove properties and ensures consistent session handling for users signing in through external providers.

What is the best way to implement centralized authentication across multiple Grove properties?

Centralized authentication across Grove properties is implemented using Heartwood to enable cross-subdomain SSO. It provides consistent session handling, supports OAuth and passkeys, and utilizes KV-cached sessions for rapid validation across all .grove.place apps.