Implement passwordless email-OTP authentication with MongoDB session storage.
npx skills add https://github.com/dloschiavo/orca --skill otp-auth
Please help me install this Agent Skill. Skill: otp-auth Source: https://github.com/dloschiavo/orca/tree/main/recipe/otp-auth Command: npx skills add https://github.com/dloschiavo/orca --skill otp-auth
This Skill provides a secure and efficient way to implement passwordless email-OTP authentication, eliminating the need for traditional passwords and OAuth, while ensuring strong user verification and session management.
Use the otp-auth skill to request an OTP for email verification and then verify the OTP to log in.
High-intent search queries and answers about installing and using this skill.
Passwordless email-OTP authentication allows users to log in via a one-time password sent to their email, eliminating traditional passwords. This Skill provides the necessary API routes, data models, and session management logic to execute the request-OTP and verify-OTP workflow securely.
Passwordless authentication verifies identity without storing user passwords by sending a one-time password (OTP) to an email address. The user enters the OTP to confirm ownership of the email, granting them a secure authenticated session managed by the backend.
Yes, MongoDB is required for email-OTP session management. The Skill uses MongoDB to store session and user data, defining indexes and lifetimes optimized for secure authentication performance and identity verification.
Yes, passwordless email-OTP authentication includes rate limiting and bot protection. The provided API routes for requesting and verifying OTPs are equipped with security measures designed to prevent automated attacks and secure session control.
Yes, you can bypass email-OTP authentication on localhost using the included development bypass feature. This allows admin access without requiring OTP verification during local testing and development.
Email-OTP authentication eliminates the security vulnerabilities of traditional passwords and the third-party dependencies of OAuth. It provides strong user verification and simplified session management by securely sending one-time passwords directly to the user's email.
lazyFrogLOLConfigure Postfix and Mailman3 mailing lists with LMTP delivery verification.
EmmanuelkwaaGenerate SvelteKit frontend pages with routing, i18n, and permission checks.
Benmore-StudioAutomates OTP generation, SMS delivery via Twilio, verification, and JWT issuance for Django backends.
FindMalekImplement email/password authentication with verification and reset flows.
