Implement RBAC, CSRF protection, and session management for PHP applications.
npx skills add https://github.com/claudioborja/biblioteca --skill skill-auth-php
Please help me install this Agent Skill. Skill: skill-auth-php Source: https://github.com/claudioborja/biblioteca/tree/main/.agents/skills/skill-auth-php Command: npx skills add https://github.com/claudioborja/biblioteca --skill skill-auth-php
This workflow skill provides robust authentication, authorization and security mechanics for pure PHP applications, enabling secure login, RBAC, CSRF protection, and audit logging.
Install the skill, wire up AuthService and CSRF protection, and secure routes with role-based permissions.
High-intent search queries and answers about installing and using this skill.
You implement role-based access control and session management in a vanilla PHP application by wiring up an AuthService, enforcing role permissions for Admin, Librarian, Member, and Guest, and regenerating sessions securely upon login.
The best way to add CSRF protection and password hashing in PHP is to use password_hash and password_verify for credentials, generate CSRF tokens for forms, and apply explicit fail-closed safe defaults for invalid requests.
Yes, this PHP authentication toolkit supports login rate limiting to prevent brute-force attacks and provides secure remember-me functionality to persist user sessions safely across visits without compromising security.
Yes, you can use this PHP RBAC toolkit for a library management system, as it provides specific role definitions for Admin, Librarian, Member, and Guest to protect administrative actions and user data effectively.
Audit logging in a PHP password reset flow works by generating secure tokens for resetting passwords and recording an audit trail of the entire process to track credential changes and maintain security accountability.
You should regenerate session IDs during PHP authentication to prevent session fixation attacks, ensuring that a user's session identifier is updated and secured immediately after a successful login attempt.
seifsheikhelarabConfigure Better Auth servers and clients for secure authentication workflows.
Arnutt-NImplement Role-Based Access Control for multi-role authorization in HR-IMS.
tranhieuttHarden Node.js and TypeScript backend APIs against injection and CSRF attacks.
fusengineImplement authentication and authorization for Laravel 12 applications.
