1 line
1.6 KiB
JSON
1 line
1.6 KiB
JSON
{"content": "---\nallowed-tools: Read, Write, Edit, Bash\nargument-hint: [auth-method] | --oauth | --jwt | --mfa | --passwordless\ndescription: Implement secure user authentication system with chosen method and security best practices\n---\n\n# Add Authentication System\n\nImplement secure user authentication system: **$ARGUMENTS**\n\n## Current Application State\n\n- Framework detection: @package.json or @requirements.txt or @Cargo.toml\n- Existing auth: !`grep -r \"auth\\|login\\|jwt\\|session\" src/ --include=\"*.js\" --include=\"*.py\" --include=\"*.rs\" | wc -l`\n- Security config: @.env* (check for auth-related variables)\n- Database setup: Check for user models or auth tables\n\n## Task\n\nImplement comprehensive authentication system with security best practices:\n\n**Authentication Methods**: Choose from username/password, OAuth 2.0, JWT, SAML, MFA, or passwordless based on $ARGUMENTS\n\n**Implementation Areas**:\n1. **User Management** - Registration, profiles, password policies, account verification\n2. **Authentication Flow** - Login/logout, session management, token handling, middleware\n3. **Authorization System** - RBAC, permissions, route protection, API security\n4. **Security Hardening** - Password hashing, rate limiting, CSRF protection, secure cookies\n5. **Integration** - Frontend components, API endpoints, database models, middleware\n\n**Security Standards**: Implement OWASP authentication guidelines, secure session management, and proper error handling.\n\n**Output**: Production-ready authentication system with comprehensive security controls and user-friendly interface.\n"} |