pin-auth

Implement PIN-based authentication for Next.js App Router applications.

Updated Jul 5, 2026
One-click install
npx skills add https://github.com/danwan/coding-agent --skill pin-auth
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: pin-auth
Source: https://github.com/danwan/coding-agent/tree/main/sources/skills/pin-auth
Command: npx skills add https://github.com/danwan/coding-agent --skill pin-auth

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires @thumbmarkjs/thumbmarkjs, clsx, tailwind-merge, and includes references (resource) components.

What problem does it solve?

This skill solves the need for simple, secure, and lightweight access control for internal tools or web applications without the overhead of full-blown OAuth or complex identity providers.

Core Features & Use Cases

  • Dual-Mode Security: Choose between a high-security Convex-backed implementation with session tracking and fingerprinting, or a lightweight HMAC-signed cookie approach.
  • Robust Protection: Includes timing-safe comparisons, exponential rate limiting, and fail-closed design patterns to prevent brute-force attacks.
  • Use Case: Quickly add a secure gate to an internal dashboard or a private prototype by simply running the setup command and configuring your PIN environment variable.

Quick Start

Run the pin-auth skill to integrate PIN-based authentication into your current Next.js project by following the interactive configuration prompts.

Frequently Asked Questions about pin-auth

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I add PIN-based authentication to a Next.js app?

PIN-based authentication in Next.js can be added by running the skill setup command, configuring your PIN environment variable, and letting it integrate middleware, API routes, and UI components automatically.

What is the best way to secure an internal Next.js dashboard without OAuth?

PIN-based authentication provides a lightweight access control method for internal dashboards without complex identity providers, using timing-safe verification and exponential rate limiting to prevent brute-force attacks.

Does this PIN authentication middleware support both Convex and cookie sessions?

Yes, PIN authentication supports dual-mode security: a Convex-backed implementation with session tracking and fingerprinting, or a lightweight HMAC-signed cookie approach.

Do I need the Next.js App Router to implement PIN-based access control?

Yes, PIN-based access control requires the Next.js App Router to properly structure the middleware, API routes, and UI components needed for the authentication flow.

How does PIN authentication prevent brute-force attacks on internal tools?

PIN authentication prevents brute-force attacks through timing-safe comparisons, exponential rate limiting, and a fail-closed design pattern that blocks unauthorized access attempts.

Can I use device fingerprinting with PIN authentication in Next.js?

Yes, the Convex-backed implementation mode supports device fingerprinting using the ThumbmarkJS library to securely track sessions alongside PIN verification.