Astro Auth

Purpose

Design authentication and authorization for an Astro app: choose the strategy, implement sessions and protected routes, hash credentials, integrate OAuth providers, and enforce authorization at the server boundary.

When to Use

Activate when the task involves:

• login, logout, registration
• protecting pages, endpoints, or actions
• session creation and validation
• passwords: hashing, reset flows
• OAuth / social login / SSO
• roles and permissions (authorization)
• reviewing an existing auth implementation

When Not to Use