Web Auth Integrator

Name: Web Auth Integrator
Author: 0x-Professor

ASecurity

Integrate authentication and authorization flows with provider-specific setup and RBAC safeguards.

10 stars
0 votes
0 copies
0 views
Added May 28, 2026

ai-agentspythongobashreactnextjsgitapi

Works with

terminal
api

Security analysis

A100/100

Pro scans all 4 files and shows the line behind each finding

Scanned May 28, 2026

npx -y skills add 0x-Professor/Agent-Skills-Hub --skill web-auth-integrator --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Web Auth Integrator?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Web Auth Integrator

[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/0x-professor-web-auth-integrator/badge)](https://www.skillsdirectory.com/skills/0x-professor-web-auth-integrator)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro

SKILL.md

---
name: web-auth-integrator
description: Integrate authentication and authorization flows with provider-specific setup and RBAC safeguards.
compatibility: codex, claude-code, claude-ai, agent-skills
license: Apache-2.0
allowed-tools:
  - read_file
  - write_file
  - run_terminal_cmd
  - web_search
metadata:
  category: web-builder
  stage: 5-auth
  pipeline: web-builder
---

# Web Auth Integrator

## Objective

Implement authentication and authorization end-to-end based on
`project-config.json`.

## Required Workflow

1. Read `project-config.json` and determine auth provider.
2. For Clerk:
   - install `@clerk/nextjs` or `@clerk/clerk-react`
   - wrap app with `ClerkProvider`
   - protect routes with auth middleware
   - configure Clerk webhooks
3. For Auth.js / NextAuth:
   - configure providers (Google, GitHub, credentials)
   - choose JWT or DB sessions
   - protect API routes and pages
4. For Supabase Auth:
   - use `supabase.auth`
   - configure OAuth providers
   - configure magic links
5. For custom JWT:
   - scaffold `/auth/register`, `/auth/login`, `/auth/refresh`
   - hash passwords with bcrypt
   - sign/verify JWTs (`jose` or `jsonwebtoken`)
   - implement refresh-token rotation
6. Implement RBAC middleware.
7. Add CSRF protection and secure cookie flags (`HttpOnly`, `SameSite=Strict`, `Secure`).
8. Output auth integration artifacts and `auth-report.json`.

## Execution

```bash
python skills/web-auth-integrator/scripts/auth_integrator.py --input <workspace> --output <out.json> --format json
```

## References

- `references/tools.md`