Stacks Documentation
SkillsChangelog
TeamSponsorsPartnersPostcardwareAwesome StacksContributing

Auth

Copy page
Copy page as Markdown for LLMs
View as Markdown
View this page as plain text
Open in ChatGPT
Copy content and open ChatGPT
Open in Claude
Copy content and open Claude
Open in Perplexity
Search with Perplexity AI
On this page 3

stacks-auth · Native Stacks · model-invoked

Use when implementing authentication, authorization, passkeys, TOTP/2FA, RBAC, gates, policies, session auth, token management, email verification, password resets, or rate limiting in a Stacks application. Covers the @stacksjs/auth package, config/auth.ts, app/Gates.ts, and app/Middleware/.

Read the skill for the implementation workflow and its current signatures. The Native capabilities catalog maps the package to source and retained evidence; driver limits are explicit.

Inside the skill

  • Key Paths
  • Source Files
  • Auth Class (authentication.ts) - Static Methods
  • Token System (tokens.ts)
  • Two-Factor Authentication (authenticator.ts)
  • Authorization Gates (gate.ts)
  • RBAC System (rbac.ts)
  • Session Auth (session-auth.ts)
  • Email Verification (email-verification.ts)
  • Password Reset (password/reset.ts)
  • Registration (register.ts)
  • User Helpers (user.ts)
  • Passkey/WebAuthn (passkey.ts)
  • Auth Middleware (middleware.ts)
  • Rate Limiter (rate-limiter.ts)
  • Authorizable Mixin (authorizable.ts)
  • Configuration
  • Middleware Aliases (app/Middleware.ts)
  • Application Gates (app/Gates.ts)
  • Default API Routes
  • User Model Traits
  • Gotchas
  • Build
  • Native account workflows
  • Provider and entrypoint boundaries

Supporting references

Using it

This skill is model-invoked. Your agent can select it for matching tasks, and you can call it directly.

/stacks-auth

Source: stacks-auth/SKILL.md.

It ships in @stacksjs/defaults with its supporting files. Run buddy setup:ai to refresh the agent setup. Override it per project with app/Skills/stacks-auth/SKILL.md. See Using skills.