Does this skill support specific frameworks like Next.js?

Yes, it includes specific patterns for Next.js middleware, Auth.js (NextAuth), and framework-agnostic solutions like Lucia or Supabase Auth.

Does it prevent common auth vulnerabilities?

Yes, the skill provides guidance on preventing XSS via cookie storage, mitigating brute force attacks through rate limiting, and avoiding user enumeration.

Can it help with 2FA setup?

Yes, it provides implementation logic for TOTP using libraries like speakeasy, QR code generation, and the management of single-use recovery codes.

How does it handle token security?

It implements security best practices such as storing JWTs in httpOnly cookies, rotating refresh tokens on every use, and using short-lived access tokens.

Fullstack Authentication Flow

Name: Fullstack Authentication Flow
Author: rnavarych

byrnavarych

•

安全与测试

Implements secure, end-to-end authentication and authorization systems including social logins, MFA, and JWT management.

This skill streamlines the complex process of building secure user authentication for full-stack applications by providing standardized implementation patterns. It covers the entire identity lifecycle—from frontend form validation and social login integration (OAuth 2.0) to backend token rotation, multi-factor authentication (MFA), and middleware-based route protection. By following industry best practices like httpOnly cookies and session rotation, it ensures your application remains secure while providing a seamless user experience.

主要功能

0111 GitHub stars

02Role-Based Access Control (RBAC) for API and UI rendering

03Multi-provider social login integration (Google, GitHub, Apple)

04Secure JWT and Refresh Token rotation strategies

05Middleware-based route protection and session management

06Multi-Factor Authentication (MFA/2FA) with TOTP and recovery codes

使用场景

01Setting up granular user permissions and role-based UI components

02Implementing secure session management with token-based refresh logic

03Adding social login providers to a Next.js or SvelteKit application

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add rnavarych/alpha-engineer auth-flow

For use in Claude.ai and ChatGPT