kotlin-multiplatform-ktor-auth-service

When to Use This Skill

Use this skill when you need to:

• Build or review a Ktor auth service for a KMP full-stack app
• Choose between bearer/JWT auth, sessions, or Ktor RPC
• Add login, refresh, logout, and protected routes
• Keep auth state and transport errors out of shared UI code
• Scaffold the repeated auth service files for a new project

Recommended default: bearer + JWT for API auth, sessions only when you need stateful browser-style persistence, and Ktor RPC only when both sides are Kotlin-first.

Trigger keywords: auth, authentication, authorization, bearer token, JWT, sessions, Ktor auth, Ktor RPC, login, refresh token, logout, protected route, auth service, sign in, sign up, user login, access token, OAuth, token management, secure endpoint, validate token, user session, authenticated request.

Freshness rule: Ktor auth plugin and JWT APIs change quickly — recheck the Ktor auth docs before using or updating this skill.