Backend Auth

When to Activate

• User wants to design or implement authentication or authorization
• User says "auth", "authentication", "authorization", "OAuth", "JWT", "RBAC"
• User asks about login, signup, sessions, tokens, permissions, or roles
• Starting a new feature that requires identity or access control
• Reviewing or hardening an existing auth flow

Prerequisites

See _shared/context-loading.md for standard prerequisites (project root check, manifest detection, shared file presence, memory directory check, fallback rules, and context priority list).

Auth-specific prerequisites on top of the standard set: