spider-weave

Implement OAuth 2.0, PKCE, JWT, and session-based authentication with route protection.

5|Updated Nov 22, 2025

Search Tags:#authorization #security #authentication #oauth #rbac #session management #pkce

Ready to run

npx skills add https://github.com/AutumnsGrove/Lattice --skill spider-weave

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: spider-weave
Source: https://github.com/AutumnsGrove/Lattice/tree/main/.claude/skills/spider-weave
Command: npx skills add https://github.com/AutumnsGrove/Lattice --skill spider-weave

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill streamlines the complex process of integrating robust authentication and authorization into applications, ensuring secure user access and data protection.

Core Features & Use Cases

Authentication Integration: Seamlessly add login, registration, and session management using various protocols like OAuth 2.0 and PKCE.
Route Protection: Secure specific API endpoints and web pages with middleware for role-based access control (RBAC).
Use Case: When building a new web application, use this Skill to implement a secure GitHub OAuth login flow, protect user dashboard routes, and ensure only administrators can access specific settings pages.

Quick Start

Use the spider-weave skill to add GitHub OAuth login to the application.

Frequently Asked Questions about spider-weave

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I implement OAuth 2.0 and PKCE authentication in my application?▼

To implement OAuth 2.0 and PKCE authentication, this Skill provides middleware and scripts that securely weave login flows into your system, handling token validation and user identity integration seamlessly.

What is the best way to add role-based access control to protect API routes?▼

Role-based access control for API routes is implemented using provided middleware that secures endpoints, ensuring only authorized users and administrators can access specific protected web pages and settings.

Can I use this to integrate GitHub OAuth login for my web application?▼

Yes, you can use this Skill to implement a secure GitHub OAuth login flow for web applications, handling user registration, session management, and route protection for user dashboards.

How does session management work with JWT and identity providers like Heartwood?▼

Session management works by validating JWTs and integrating with identity providers like Heartwood to manage user identities, ensuring secure session-based authentication across protected application routes.

Do I need external dependencies to set up security hardening and route protection?▼

No external dependencies are required to set up security hardening and route protection, as the Skill provides self-contained scripts and middleware references to enforce authorization and secure access.

When should I use PKCE instead of standard session-based authentication?▼

Use PKCE for secure OAuth 2.0 authorization flows in public clients, while standard session-based authentication is suitable for traditional web applications needing secure route protection and user login.