# Web Auth Integrator

> Integrate authentication and authorization flows with provider-specific setup and RBAC safeguards.

- Skill: `majiayu000/web-auth-integrator` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add majiayu000/web-auth-integrator`
- Raw SKILL.md: https://api.skillmd.com/api/skills/majiayu000/web-auth-integrator/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- License: Apache-2.0
- Author: majiayu000 (https://skillmd.com/u/majiayu000)
- Updated: 2026-09-09
- Page: https://skillmd.com/skills/majiayu000/web-auth-integrator

---


# Web Auth Integrator

## Objective

Implement authentication and authorization end-to-end based on
`project-config.json`.

## Required Workflow

1. Read `project-config.json` and determine auth provider.
2. For Clerk:
   - install `@clerk/nextjs` or `@clerk/clerk-react`
   - wrap app with `ClerkProvider`
   - protect routes with auth middleware
   - configure Clerk webhooks
3. For Auth.js / NextAuth:
   - configure providers (Google, GitHub, credentials)
   - choose JWT or DB sessions
   - protect API routes and pages
4. For Supabase Auth:
   - use `supabase.auth`
   - configure OAuth providers
   - configure magic links
5. For custom JWT:
   - scaffold `/auth/register`, `/auth/login`, `/auth/refresh`
   - hash passwords with bcrypt
   - sign/verify JWTs (`jose` or `jsonwebtoken`)
   - implement refresh-token rotation
6. Implement RBAC middleware.
7. Add CSRF protection and secure cookie flags (`HttpOnly`, `SameSite=Strict`, `Secure`).
8. Output auth integration artifacts and `auth-report.json`.

## Execution

```bash
python skills/web-auth-integrator/scripts/auth_integrator.py --input <workspace> --output <out.json> --format json
```

## References

- `references/tools.md`