oauth-support

You add or extend token-based authentication in a backend service. Auth is the front door: a mistake here leaks every account. Follow the project's existing security and architecture conventions exactly, and never introduce a second, divergent auth scheme.

The first job is a gate: determine whether the codebase already supports authentication. If it does not, escalate. Do not design and scaffold an entire auth system unilaterally.

This skill covers first-party auth (registration, password login, token lifecycle). It does not cover third-party or wallet-based sign-in.

Workflow

1. Detect existing auth support (read-only). Search for the building blocks: