skills.rest
qfeius
qfeiusOFFICIAL
Explore all skills by this author →
GitHub

make-app-auth

Integrate unified login and authenticated Make API requests into Make Apps.

5|Updated Apr 1, 2026
Search Tags:#authentication#oauth#session#proxy#sdk integration#make app#unified login
One-click install
npx skills add https://github.com/qfeius/make-platform-skills --skill make-app-auth-qfeius
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: make-app-auth
Source: https://github.com/qfeius/make-platform-skills/tree/main/skills/make-app-auth
Command: npx skills add https://github.com/qfeius/make-platform-skills --skill make-app-auth-qfeius

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires @qfeius/make-app-auth, and includes scripts (resource) and references (resource) components.

What problem does it solve? Make Apps need a consistent, secure authentication layer for unified login and authenticated /api/make requests, and hand-rolled auth code often breaks cookies, redirects, sessions, or Service-fronted proxy contracts. This Skill provides the rules, references, and audit tooling to generate and review correct auth integration with @qfeius/make-app-auth. ## Core Features & Use Cases - Unified Login Integration: Generates SDK bootstrap with unifiedLogin, apiAuthRedirect, and auth.init redirect flows, including recoverable state_expired/challenge_expired handling and logout wiring. - Service-Fronted Proxy Contracts: Defines the UI -> Service -> make-gateway chain, including /api/make/auth/** and /api/make/oauth/** namespace proxies, cookie forwarding, X-Forwarded-Host/Proto handling, and session/complete redirect preservation. - Deterministic Contract Auditing: Ships scripts/audit-auth-contract.mjs to detect raw fetch usage, token-mode drift, missing auth proxies, local-preview shadowing, and SDK version violations before publish. - Use Case: When generating a new Make App with a Service layer, use this Skill to wire unified login, route all business calls through a shared auth.api adapter, and run the audit script to verify publish readiness. ## Quick Start Use the make-app-auth skill to add unified login and authenticated Make API requests to my generated Make App project.

Frequently Asked Questions about make-app-auth

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I add unified login to a Make App?▼

Use createMakeAppAuth from @qfeius/make-app-auth with unifiedLogin: true and apiAuthRedirect: true, then call auth.init({ redirect: true }) at startup. Handle state_expired and challenge_expired by showing a relogin prompt that calls auth.login({ redirect: true }).

How do I make authenticated requests to the Make backend from my App?▼

Route every frontend request through a shared adapter wrapping auth.api, covering schema, records, lookup, user, department, and file APIs. Never use raw window.fetch('/api/make/...') or hand-written Authorization headers.

What is the difference between direct-gateway and Service-fronted mode?▼

Direct-gateway Apps call Make backend paths like /data/** through auth.api with gatewayBaseUrl /api/make. Service-fronted Apps keep a Service layer: UI calls auth.api('/app/**'), and the Service proxies /api/make/auth/** and /api/make/oauth/** to internal make-gateway /make/** routes.

Why does my published Make App fail login while local preview works?▼

Local preview uses a Service-only MAKE_APP_LOCAL_PREVIEW=true adapter with makecli credentials, which must never leak into published runtime. Published Apps need namespace-level auth proxies, cookie forwarding, and X-Forwarded-Host/Proto headers derived from the inbound Host.

Can I use token mode or read makecli credentials in browser code?▼

No. Browser code must never use unifiedLogin: false, accessToken, tokenProvider, or read ~/.make/credentials. makecli tokens are allowed only in Service-side local preview code guarded by MAKE_APP_LOCAL_PREVIEW=true.

How do I verify my Make App auth contract before publishing?▼

Run scripts/audit-auth-contract.mjs <project-root> --published, adding --mode service-fronted when a Service layer exists. It checks SDK version >= 0.1.3, raw fetch usage, auth proxy presence, redirect and Set-Cookie preservation, and local-preview shadowing.

Related Skills

Explore More Software Engineering Skills→
vovanostm-publicvovanostm-public

multica-dev-auth-invariants

Validates that local dev login bypasses verification codes when auto-verify is enabled.

Official
Intermediate
omakeiomakei
2

nuxt-auth

Authenticate users and enforce permission-based access control in Nuxt 4 with Keycloak.

Community
Intermediate
kennypallchizaca-coderkennypallchizaca-coder

06-authentication-flow

Implement frontend session lifecycle with hydration, logout, and 401 handling.

Community
Advanced
panaversitypanaversity
16

live-connector

Generate a public Cloudflare quick-tunnel URL for a local connector gateway.

Official
Basic