medusa-security
Medusa v2 Security
Before writing code
Fetch live docs:
- Web-search
site:docs.medusajs.com authenticationfor auth strategies and API key setup - Web-search
site:docs.medusajs.com api key publishable secretfor API key types - Web-search
site:docs.medusajs.com CORS configurationfor cross-origin resource sharing - Fetch
https://docs.medusajs.com/learn/fundamentals/api-routes/middlewaresfor middleware and auth config - Web-search
site:docs.medusajs.com medusa-config auth providersfor auth provider registration
Authentication Architecture
Admin vs Store Authentication
Medusa v2 separates admin and storefront authentication into distinct flows:
More from orcaqubits/agentic-commerce-skills-plugins
magento-performance
Optimize Magento 2 performance — full page cache (Varnish), Redis, indexer tuning, JavaScript/CSS optimization, database optimization, and profiling. Use when diagnosing slow pages, optimizing load times, or configuring caching.
4js-modern
Write modern JavaScript and TypeScript — ES6+ features, async/await, modules, destructuring, optional chaining, TypeScript types, and modern tooling. Use when writing JavaScript/TypeScript for BigCommerce themes, apps, or headless storefronts.
4graphql-dev
Write GraphQL queries, mutations, and subscriptions — fragments, code generation, TypedDocumentNode, variables, error handling, and client setup. Use when writing GraphQL code for Saleor.
4node-backend
Build Node.js backends for BigCommerce apps — Express/Fastify servers, OAuth handling, JWT verification, API proxy, webhook processing, session management, and deployment. Use when building the server-side component of BigCommerce apps.
4magento-service-contracts
Implement Magento 2 service contracts — repository interfaces, data interfaces, SearchCriteria, and the repository pattern. Use when building module APIs, data access layers, or integrating with Magento's Web API.
3magento-plugins-interceptors
Implement Magento 2 plugins (interceptors) — before, after, and around methods for modifying class behavior without inheritance. Use when extending core or third-party module functionality.
3