Auth System Setup

Overview

Designs and implements complete authentication and authorization systems for web applications. Covers OAuth 2.0 provider integration (Google, GitHub, Microsoft), session and token management, role-based access control (RBAC), and permission architectures. Generates production-ready code, database migrations, and tests.

Instructions

1. Gather Requirements

Before generating any code, determine:

• Tech stack: Backend framework, database, frontend framework
• Auth method: OAuth providers, email/password, magic links, or combination
• Roles needed: What roles exist? What can each role do?
• Token strategy: Stateless JWT, server-side sessions, or hybrid
• Compliance: GDPR, SOC 2, HIPAA — affects data storage and logging

2. Design the Auth Architecture