auth-pro - Design secure authentication and authorization architectures
Guides authentication and authorization method selection, identity and session lifecycle design, token safety, federation, recovery, and policy enforcement across web, mobile, and API systems.
Tags
Updated: 2026-10-15Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Design auth architectures
- Compare authentication methods
- Model identity lifecycles
- Design session policies
- Harden token lifecycles
- Enforce authorization policies
- Review access failures
- Define auth test cases
Inputs
- Actors
- Trust boundaries
- Client types
- Data sensitivity
- Assurance levels
- Existing identity provider
- Compliance constraints
- Deployment constraints
Outputs
- Authentication architecture guidance
- Method selection rationale
- Authorization policy designs
- Identity lifecycle designs
- Session and token controls
- Failure findings and mitigations
- Residual risk summaries
Requirements
- Claude, Cursor, Codex, or Gemini support