auth-patterns-nextjs
Pass
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides educational templates for implementing authentication in Next.js applications using official frameworks.
- [SAFE]: All sensitive credentials (client IDs, secrets) are correctly referenced via environment variables (e.g.,
process.env.GITHUB_SECRET), following secure development practices to prevent hardcoded secret exposure. - [SAFE]: The provided code snippets follow standard security patterns for Auth.js v5, including route protection via middleware and secure session management.
- [SAFE]: A comprehensive security checklist is included, promoting the use of HTTPS, HttpOnly cookies, CSRF protection, and password hashing (bcrypt/argon2).
Audit Metadata