rcode-auth-audit

What problem does it solve?

This Skill helps catch subtle authentication and authorization failures before they become production incidents, such as stale sessions, broken sync, and tenant data leakage.

Core Features & Use Cases

• Auth surface review: Checks login, refresh, logout, role change, password reset, and callback flows for security gaps.
• Identity sync validation: Verifies Keycloak and Active Directory synchronization behavior, token revocation, and session invalidation rules.
• Tenant isolation checks: Reviews Postgres access patterns, row-level security, and tenant_id enforcement to prevent cross-tenant reads or writes.
• Use case: Use this Skill when an app shows ghost sessions, users disappear after sync, or multi-tenant data appears accessible across organizations.

Quick Start

Ask the assistant to audit the authentication flows in your project and produce a line-by-line checklist of sync, JWT, session, and tenant-isolation risks.