Implement authentication, RBAC, and multi-factor security in Stacks applications.
npx skills add https://github.com/bughq/bughq --skill stacks-auth-bughq
Please help me install this Agent Skill. Skill: stacks-auth Source: https://github.com/bughq/bughq/tree/main/.claude/skills/stacks-auth Command: npx skills add https://github.com/bughq/bughq --skill stacks-auth-bughq
This Skill simplifies the complex implementation of secure user authentication, role-based access control, and multi-factor security in Stacks applications, preventing common security vulnerabilities.
Use the stacks-auth skill to implement a new authorization gate that restricts access to the settings page for users with the admin role.
High-intent search queries and answers about installing and using this skill.
Role-based access control in a Stacks application is implemented by defining custom authorization gates and policies that restrict access to specific routes based on assigned user roles. You can enforce these rules using the built-in auth middleware.
WebAuthn passkey integration works by registering passkeys during the user authentication flow, enabling secure, passwordless identity verification. This mechanism prevents common security vulnerabilities by relying on cryptographic authentication instead of traditional credentials.
The best way to set up TOTP and 2FA is to enable multi-factor security protocols alongside token-based API security. This enforces a secondary verification step during the authentication process to protect user sessions and API endpoints.
Yes, you can use auth middleware to restrict access to specific dashboard pages by defining a custom gate. This gate checks user roles and permissions, ensuring only authorized users, such as admins, can access protected settings pages.
Session management handles email verification and token generation automatically as part of the identity management process. It securely manages user registration, token-based API security, and session-based authentication without requiring manual token logic.
Custom gates should be used instead of standard auth middleware when you need granular, role-based permission enforcement beyond basic authentication. Gates allow you to define specific policies restricting access to settings pages or API resources based on complex user roles.
oriolriusConfigure Keycloak realms, clients, and authentication flows for identity management.
AcczdyEnumerate directories and files to detect missing authentication on web endpoints.
scruffydanEnforce parameterized queries and least-privilege credentials to prevent SQL injection.
ftnilssonImplement token-based authentication and RBAC access control for backend systems.
