Authentication Setup

Authentication work is mostly boundary design: identity proof, session or token issuance, permission checks, and the operational controls that keep secrets and privileged actions safe. Keep this entrypoint compact, then pull the support files only when framework boilerplate or security detail is needed.

When to use this skill

• Add login, signup, logout, refresh-token, or current-user flows
• Choose between session auth, JWT auth, OAuth, SSO, or mixed auth models
• Add RBAC, permission checks, or admin-only boundaries
• Add MFA or step-up verification to an existing auth system
• Migrate an existing service from one auth model to another
• Review an auth implementation for obvious security and lifecycle gaps

Do not use this skill as the only source of truth for highly regulated identity requirements or custom cryptography design. In those cases, pair it with the project's security requirements and official vendor guidance.