Skill: Authentication and Login
When to Use
Use this skill when changing login screens, auth checks, cookie handling, or credential plumbing.
Core Workflow
- Keep server auth gate logic consistent with
check_auth. - Preserve cookie-based session flow in Tornado handlers.
- Maintain Python client authentication behavior (
Visdom(..., username=..., password=...)). - Keep credential hashing and verification flow aligned between browser and server.
- Keep cookie secret management in
env_pathstable.
Guardrails
- Never weaken auth checks on handler methods.
- Never commit or hardcode credentials/cookie secrets.
- Treat auth changes as cross-cutting: server handlers, sockets, and client login must all remain compatible.
Documentation
- Skill reference
py/visdom/server/handlers/base_handlers.pypy/visdom/server/handlers/web_handlers.pypy/visdom/server/app.pypy/visdom/__init__.pyAGENTS.mdCONTRIBUTING.md
Assets
- See
assets/README.mdand store templates/resources inassets/.
Tests
- Follow the default flow in
references/TESTS.md.