Authentication Setup

Use this skill when the real job is choosing and structuring product authentication for a real app, not dumping JWT snippets or pretending authentication, authorization, security hardening, and docs are all the same task.

authentication-setup owns the setup layer for:

• choosing hosted vs framework-native vs platform-native vs enterprise add-on vs self-hosted auth
• deciding session/cookie vs token boundaries
• selecting login methods: email/password, magic links, social OAuth, passkeys
• defining what user/profile/org/membership data stays app-owned
• planning SSO/SCIM, domain mapping, and migration/cutover boundaries
• recording callback URLs, cookie domains, preview/staging drift, and rollout notes

Read these support docs before choosing the lane or handoff:

• references/auth-decision-matrix.md
• references/boundary-checklist.md
• references/session-and-deployment-notes.md
• references/enterprise-and-migration-notes.md