workos-convex-auth

Configure WorkOS AuthKit with Convex for sign-in, sign-out, and admin checks.

9|3|Updated Nov 28, 2025
One-click install
npx skills add https://github.com/get-convex/components-submissions-directory --skill workos-convex-auth
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: workos-convex-auth
Source: https://github.com/get-convex/components-submissions-directory/tree/main/.cursor/skills/workos-convex-auth
Command: npx skills add https://github.com/get-convex/components-submissions-directory --skill workos-convex-auth

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Integrates WorkOS AuthKit with a Convex backend to provide secure, scalable authentication, dual JWT providers, and seamless sign-in flows for web apps.

Core Features & Use Cases

  • Dual JWT providers for SSO and user management
  • Frontend and backend authentication flows with sign in, sign out, and callback
  • Admin access checks based on email domain
  • Netlify-ready deployment with proper redirect and CORS configurations

Quick Start

Install the required packages and initialize the AuthKit provider in your frontend and Convex config to enable sign-in flows.

Frequently Asked Questions about workos-convex-auth

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I integrate WorkOS AuthKit with a Convex backend for authentication?

You configure convex/auth.config.ts and frontend React integration to manage environment variables and JWT claims. This connects WorkOS AuthKit to Convex, handling dual JWT providers for secure user authentication flows.

How does WorkOS handle admin access checks in a Convex application?

Admin access checks in a Convex application are handled by validating JWT claims based on the user's email domain. WorkOS AuthKit exposes this identity data, allowing you to securely restrict admin routes.

Can I deploy a Convex and WorkOS AuthKit application on Netlify?

Yes, you can deploy on Netlify. The integration handles Netlify-ready deployments by configuring proper redirect URIs and CORS origins to ensure seamless frontend-backend authentication flows.

Why do I need dual JWT providers for SSO and user management in Convex?

Dual JWT providers are needed to separate SSO flows from standard user management. Configuring both in your Convex backend ensures secure, scalable authentication across different identity providers.

How do I expose user identity via ctx.auth.getUserIdentity() using WorkOS?

Expose user identity by configuring JWT claims in your WorkOS AuthKit and Convex integration. This passes the authenticated user data to the Convex backend, making it accessible via ctx.auth.getUserIdentity().