“authentication”

Authentication security testing - auth bypass, JWT attacks, OAuth flaws, password attacks, 2FA bypass, CAPTCHA bypass, and bot detection evasion.

Authentication: JWT/OAuth-OIDC/sessions/API keys, password storage, secrets, CSRF/CORS/cookies.

Implement or review authentication and authorization flows, sessions/tokens, password/reset flows, role access, and secure identity integration.

Use when wiring auth to a new project, debugging login errors (redirect_uri_mismatch, invalid_grant, session callback, refresh_token), or adding social/magic…

Password hashing (scrypt), server-side session tokens, HTTP-only cookies, and auth events.

Implement OAuth 2.0, OIDC, sessions, token lifetimes, MFA and password storage without rolling your own crypto.

Implement or review NewHeap consumer authentication and authorization, including session lifecycle, two-factor authentication, passkeys, token customization…

Expert guidance on authentication implementation including OAuth 2.0/OIDC, JWT tokens, session management, and secure password handling.

This skill should be used when the user asks to "test for broken authentication vulnerabilities", "assess session management security", "perform credential…

Authentication patterns: session vs JWT vs OAuth comparison, provider selection (NextAuth, Clerk, Supabase Auth), security checklist, and common mistakes.

Use when designing, implementing, reviewing, or testing authentication, protected routes, sessions, roles, permissions, ownership rules, or authorization…

Authentication bypass testing playbook.

Acquire an authenticated session THROUGH MFA/OTP on an in-scope target and emit a reusable session artifact (Playwright storageState + Bearer) so executors…

Use when adding or changing Phoenix authentication, phx.gen.auth integration, LiveView session identity, or migration between current_user and Phoenix 1.8…

Implement browser authentication flows with explicit cookie/token, CSRF, refresh, logout and session-expiry contracts.

Implements authentication and authorisation systems including JWT, OAuth2, sessions, MFA, social login, RBAC, and refresh token rotation.

Login, signup, password reset, SSO, MFA, and authentication UX patterns.

Implement authentication with JWT, OAuth2, SSO, MFA, and session management

Implement authentication and authorization using @delon/auth.

Deploys Cisco Duo multi-factor authentication across enterprise applications, VPN, RDP, and SSH access points, covering Duo Authentication Proxy setup…

Use when implementing auth — login, registration, session management, JWT, OAuth, password hashing, RBAC, API keys, MFA, and security headers.

This skill should be used when the user asks to "test for broken authentication vulnerabilities", "assess session management security", "perform credential…

Reuse an existing browser login for bounded authenticated website requests when the user asks to read site data, download a file, inspect a network-backed…

Product visuals must show the real product with real data.