popup-studio-ai/bkit-claude-code/bkend-auth
Claude Code and agent skill by popup-studio-ai/bkit-claude-code
- community
Checking that the SKILL.md file is still in the repository.
bkend.ai authentication — email/social login, JWT tokens, RBAC, session management. Triggers: bkend auth, bkend login, bkend signup, bkend JWT, bkend RBAC
Install
npx vskill@latest install popup-studio-ai/bkit-claude-code/bkend-authSKILL.md
bkend.ai Authentication & Security Guide
Auth Methods
| Method | Description | |
|---|---|---|
| Email + Password | Email/password signup and login | |
| Social (Google) | OAuth 2.0 social login | |
| Social (GitHub) | OAuth 2.0 social login | |
| Magic Link | Email link login (no password) |
JWT Token Structure
- Access Token: 1 hour validity
- Refresh Token: 7 days validity
- Auto-refresh:
POST /v1/auth/refresh
Password Policy
8+ characters, uppercase + lowercase + numbers + special characters
MCP Auth Workflow
bkend MCP does NOT have dedicated auth tools. Use this workflow:
- Search docs:
search_docswith query "email signup" or "social login" - Get examples:
search_docswith query "auth code examples" - Generate code: AI generates REST API code based on search results
Searchable Auth Docs
| Doc ID | Content | |
|---|---|---|
3_howto_implement_auth | Signup, login, token management guide | |
6_code_examples_auth | Email, social, magic link code examples |
Key Pattern
REST Auth API (Core Endpoints)
For the complete endpoint list, use search_docs or check Live Reference.
| Method | Endpoint | Description | |
|---|---|---|---|
| POST | /v1/auth/email/signup | Sign up | |
| POST | /v1/auth/email/signin | Sign in | |
| GET | /v1/auth/me | Current user | |
| POST | /v1/auth/refresh | Refresh token | |
| POST | /v1/auth/signout | Sign out | |
| GET/POST | /v1/auth/:provider/callback | Social login callback | |
| POST | /v1/auth/password/reset/request | Password reset | |
| POST | /v1/auth/password/reset/confirm | Confirm reset | |
| POST | /v1/auth/password/change | Change password | |
| GET | /v1/auth/sessions | List sessions | |
| DELETE | /v1/auth/sessions/:sessionId | Remove session | |
| DELETE | /v1/auth/withdraw | Delete account |
Additional endpoints (MFA, invitations, user management): use search_docs or Live Reference.
RBAC (Role-Based Access Control)
| Group | Description | Scope | |
|---|---|---|---|
| admin | Full CRUD | All data | |
| user | Authenticated user | Full read, own write | |
| self | Owner only | createdBy-based | |
| guest | Unauthenticated | Read only (usually) |
RLS (Row Level Security)
- Per-table row-level access control
- 4-level policies: admin/user/self/guest
- Auto-filtering based on createdBy field
Session Management
- Per-device session tracking
GET /v1/auth/sessions- List sessionsDELETE /v1/auth/sessions/:sessionId- Remove session
Official Documentation (Live Reference)
For the latest authentication documentation, use WebFetch:
- Auth Overview: https://raw.githubusercontent.com/ww-w-ai/bkend-docs/main/en/authentication/01-overview.md
- MCP Auth Guide: https://raw.githubusercontent.com/ww-w-ai/bkend-docs/main/en/mcp/06-auth-tools.md
- Security: https://raw.githubusercontent.com/ww-w-ai/bkend-docs/main/en/security/01-overview.md
- Full TOC: https://raw.githubusercontent.com/ww-w-ai/bkend-docs/main/SUMMARY.md
Security
- Security scanPassed, 95 of 100Pattern checks on the skill's files.
- Model reviewPassed
Quality evaluation
- Task evaluationNot runNo evaluation yet. Run one in Skill Studio.
Source
- SKILL.md in the repositoryCheckingskills/bkend-auth/SKILL.md
Popularity
- Repository stars
- 505
- Repository forks
- 126
- 7-day trend score
- 31
Stars and forks are for the whole GitHub repository, not this skill alone. Refreshed 16 Apr 2026, 6 months ago.
Works with
Any agent vskill installs to: 56 targets in all. These 39 have a page on this site.
- Claude Code
- Cursor
- GitHub Copilot
- Windsurf
- Codex
- Gemini CLI
- Cline
- Amp
- Roo Code
- Goose
- Continue
- Kilo Code
- Junie
- Trae
- OpenHands
- Qwen Code
- AI Agent
- Tabnine Chat
- Sourcegraph Cody
- Amazon Q
- Firebase Genkit
- Sweep
- Devin
- Phind
- Mentat
- Claude Desktop
- Aider
- GPT Pilot
- Plandex
- bolt.new
- v0
- Replit Agent
- Anse
- TypingMind
- BetterChatGPT
- LibreChat
- Warp AI
- Pieces
- Fig AI
Embed badge
[](https://verified-skill.com/skills/popup-studio-ai/bkit-claude-code/bkend-auth)