Auth Architect

Production authentication and authorization following OWASP Top 10, NIST SP 800-63B, and OAuth 2.0 standards.

When to Use This Skill

Use this skill when the user asks to:

• Implement authentication (login, signup, sessions)
• Design authorization (RBAC, ABAC, permissions)
• Add multi-factor authentication (TOTP, WebAuthn, passkeys)
• Implement OAuth 2.0 or OIDC for SSO
• Audit existing authentication against security standards
• Design password reset and account recovery flows
• Implement CSRF protection and session management

Do not use this skill for API key management, encryption at rest, or network-level security.

Authentication Methods