security-prompts-auth

Role-based access control (RBAC) uses user roles—such as user, premium, and admin—stored in Clerk's publicMetadata to enforce permissions across routes and API endpoints. This Skill provides scaffolding to set up role assignment during signup, middleware protections, and server-side role checks in Next.js and Convex stacks.

Yes. Clerk handles authentication, and this Skill layers authorization on top by implementing granular access controls, ownership verification to ensure users access only their resources, and webhook verification for secure billing integration in multi-tier SaaS applications.

Middleware and server-side role checks enforce access control before requests reach your endpoints. This Skill automates route and API protection by verifying user roles and permissions, blocking unauthorized requests, and supporting admin-only controls with audit logging.

Store roles in Clerk's publicMetadata and verify them server-side before granting access. This Skill enforces role storage standards, webhook verification for secure updates, and audit logging so role changes are tracked and tamper-resistant across your application.

This Skill includes webhook verification and integration patterns for Clerk Billing, automating secure role updates when users change subscription tiers and ensuring permissions sync correctly without manual intervention.