auth-flow-planner

# Auth Flow Planner ## What this skill does This skill designs a complete authentication and authorization flow for any application. It covers the full lifecycle: registration, login, session management, token refresh, password reset, role-based access control, and all the edge cases (expired tokens, concurrent sessions, brute force protection). The output is a detailed design document with flow diagrams, endpoint definitions, data models, and security considerations — ready to hand off to engineering. Use this when starting a new application, when auditing an existing auth system, or when extending your auth with new features (OAuth, MFA, roles). ## How to use ### Claude Code / Cline Copy this file to `.agents/skills/auth-flow-planner/SKILL.md` in your project root. Then ask: - *"Use the Auth Flow Planner skill to design auth for our SaaS app."* - *"Plan the authentication system for a multi-tenant API using the Auth Flow Planner skill."* Provide context about: - Application type (web app, mobile app, API-only, SaaS) - User types (end users, admins, API consumers) - Required features (social login, MFA, teams/orgs, API keys) - Tech stack (language, framework, existing auth libraries) - Compliance requirements if any (HIPAA, SOC2, GDPR) ### Cursor Add the instructions below to your `.cursorrules` or paste them into the Cursor AI pane with your application context. ### Codex Provide the application context and ask Codex to follow the instructions below to produce t...