identity-access

Files (65)

• SKILL.md
• activate-user.md · actions/
• change-password.md · actions/
• check-email-available.md · actions/
• create-captcha.md · actions/
• create-permission.md · actions/
• create-role.md · actions/
• create-user.md · actions/
• deactivate-user.md · actions/
• disable-user-mfa.md · actions/
• discover-project-slug.md · actions/
• generate-otp.md · actions/
• generate-user-code.md · actions/
• get-account-permissions.md · actions/
• get-account-roles.md · actions/
• get-account.md · actions/
• get-histories.md · actions/
• get-login-options.md · actions/
• get-organization-config.md · actions/
• get-organization.md · actions/
• get-organizations.md · actions/
• get-permission.md · actions/
• get-permissions.md · actions/
• get-resource-groups.md · actions/
• get-role.md · actions/
• get-roles.md · actions/
• get-sessions.md · actions/
• get-social-login-endpoint.md · actions/
• get-token.md · actions/
• get-user-codes.md · actions/
• get-user-info.md · actions/
• get-user-permissions.md · actions/
• get-user-roles.md · actions/
• get-user.md · actions/
• get-users.md · actions/
• logout-all.md · actions/
• logout.md · actions/
• recover-user.md · actions/
• refresh-token.md · actions/
• resend-activation.md · actions/
• resend-otp.md · actions/
• reset-password.md · actions/
• save-organization-config.md · actions/
• save-organization.md · actions/
• save-roles-and-permissions.md · actions/
• set-roles.md · actions/
• setup-totp.md · actions/
• submit-captcha.md · actions/
• update-permission.md · actions/
• update-role.md · actions/
• update-user.md · actions/
• validate-activation-code.md · actions/
• verify-captcha.md · actions/
• verify-otp.md · actions/
• contracts.md
• login-flow.md · flows/
• mfa-setup.md · flows/
• password-recovery.md · flows/
• role-permission-setup.md · flows/
• session-management.md · flows/
• …and 5 more

SKILL.md (first lines)

# Identity & Access Skill

## Purpose

Handles all authentication, user management, role/permission management, MFA, and organization operations for SELISE Blocks via the IDP v1 API.

Must run get-token before any other action in a session.

---

## When to Use

Example prompts that should route here:
- "Build a login page with email/password and Google SSO"
- "Set up MFA with TOTP for admin users"
- "Create an admin role with full permissions"
- "Show me active user sessions with logout button"
- "Build a forgot password flow"

---

## Execution Context

Before executing any action or flow from this skill, read `../core/execution-context.md` for the required supporting files, load order, and cross-domain orchestration rules.

---

## Intent Mapping

Use this table to route user requests. Check `flows/` first — if a flow covers the request, use it. For single-action requests, go directly to the action.

| User wants to... | Use |
|------------------|-----|
| Build a login page | `flows/login-flow.md` |
| Build signup / registration | `flows/user-registration.md` |
| Build forgot password / reset password | `flows/password-recovery.md` |
| Set up MFA for a user | `flows/mfa-setup.md` |
| Create a user and assign roles (admin) | `flows/user-onboarding.md` |
| Build session list / logout UI | `flows/session-management.md` |
| Create roles and permissions / RBAC setup | `flows/role-permission-setup.md` |
| Get a specific user by ID | `actions/get-user.md` |
| Search / list users | `actions/get-users.md` |
| Update a user's profile | `actions/update-user.md` |
| Deactivate a user | `actions/deactivate-user.md` |
| Change password (authenticated user) | `actions/change-password.md` |
| Check if email is taken | `actions/check-email-available.md` |
| Validate an activation code | `actions/validate-activation-code.md` |
| Get current user's roles | `actions/get-account-roles.md` |
| Get current user's permissions | `actions/get-account-permissions.md` |
| Get a specific role | `actions/get-role.md` |
| Get a specific permission | `actions/get-permission.md` |
| List resource groups | `actions/get-resource-groups.md` |
| Create / update an organization | `actions/save-organization.md` |
| Get organization config | `actions/get-organization-config.md` |
| View audit history | `actions/get-histories.md` |
| Generate a user code | `actions/generate-user-code.md` |

---

## Flows

| Flow | File | Description |
|------|------|-------------|
| login-flow | flows/login-flow.md | Email, social, OIDC login with MFA branching |
| user-registration | flows/user-registration.md | Self-registration or admin-created with activation |
| password-recovery | flows/password-recovery.md | Forgot password → reset password → logout-all |
| mfa-setup | flows/mfa-setup.md | Email OTP or TOTP authenticator enrollment |
| user-onboarding | flows/user-onboarding.md | Admin creates user, assigns roles and org |
| session-management | flows/session-management.md | View sessions, single/all device logout |
| role-permission-setup | flows/role-permission-setup.md | Create roles, permissions, assign to users |

---

## Base Path

All endpoints are prefixed with: `$API_BASE_URL/idp/v1`

---

## Action Index

### Authentication
| Action | File | Description |
|--------|------|-------------|
| get-token | actions/get-token.md | Exchange credentials for access + refresh tokens |
| refresh-token | actions/refresh-token.md | Renew access token using refresh token |
| logout | actions/logout.md | Logout current session |
| logout-all | actions/logout-all.md | Logout all active sessions |
| get-user-info | actions/get-user-info.md | Get authenticated user's info |
| get-login-options | actions/get-login-options.md | Get available login methods for the project |
| generate-user-code | actions/generate-user-code.md | Generate a new user code |
| get-user-codes | actions/get-user-codes.md | List all user codes |

### Users
| Action | File | Description |
|--------|------|-------------|
| create-user | actions/create-user.md | Create a new user |
| update-user | actions/update-user.md | Update user details |
| get-users | actions/get-users.md | List users with pagination and filters |
| get-user | actions/get-user.md | Get a specific user by ID |
| activate-user | actions/activate-user.md | Activate a user account |
| deactivate-user | actions/deactivate-user.md | Deactivate a user account |
| change-password | actions/change-password.md | Change user password |
| recover-user | actions/recover-user.md | Initiate password recovery |
| reset-password | actions/reset-password.md | Reset password using recovery code |
| resend-activation | actions/resend-activation.md | Resend activation email |
| validate-activation-code | actions/validate-activation-code.md | Validate activation code before setting password |
| check-email-available | actions/check-email-available.md | Check if email is already taken |
| get-account | actions/get-account.md | Get current authenticated account profile |
| get-user-roles | actions/get-user-roles.md | Get roles assigned to a user |
| get-user-permissions | actions/get-user-permissions.md | Get permissions assigned to a user |
| get-account-roles | actions/get-account-roles.md | Get roles of current authenticated account |
| get-account-permissions | actions/get-account-permissions.md | Get permissions of current authenticated account |
| get-sessions | actions/get-sessions.md | Get active sessions for a user |
| get-histories | actions/get-histories.md | Get audit history for a user |

### Roles
| Action | File | Description |
|--------|------|-------------|

From rezwanx/blocks-ai-skills, MIT.

More from rezwanx/blocks-ai-skills