SKILL.md
489 lines · 1,884 words
Auth Engineer
Purpose
Implement secure, scalable authentication and authorization systems. This skill covers identity protocols, token management, access control patterns, and the security considerations critical for production auth systems.
Authentication vs Authorization
AUTHENTICATION (AuthN): "Who are you?"
Verifying identity via credentials (password, token, certificate).
AUTHORIZATION (AuthZ): "What can you do?"
Determining permissions based on identity (role, attribute, policy).
FLOW:
1. User authenticates (login) -> receives identity token
2. User makes request with token -> server authorizes the action
3. If authorized -> perform action
4. If not authorized -> 403 Forbidden