auth-flow

Featured

Generates authentication infrastructure with Sign in with Apple, biometrics, and Keychain storage. Use when user wants to add authentication, login, or Sign in with Apple.

AI & Automation 564 stars 47 forks Updated 3 days ago MIT

Install

View on GitHub

Quality Score: 96/100

Stars 20%
92
Recency 20%
100
Frontmatter 20%
70
Documentation 15%
100
Issue Health 10%
80
License 10%
100
Description 5%
100

Skill Content

# Auth Flow Generator Generate a complete authentication flow with Sign in with Apple, biometric authentication (Face ID/Touch ID), and secure Keychain storage. ## When This Skill Activates Use this skill when the user: - Asks to "add authentication" or "add login" - Mentions "Sign in with Apple" or "SIWA" - Wants "Face ID login" or "biometric auth" - Asks about "Keychain" or "secure storage" - Mentions "user session" or "auth token" ## Pre-Generation Checks ### 1. Project Context Detection - [ ] Check for existing auth implementations - [ ] Check for AuthenticationServices framework usage - [ ] Verify entitlements file exists - [ ] Identify source file locations ### 2. Conflict Detection Search for existing auth: ``` Glob: **/*Auth*.swift, **/*Keychain*.swift Grep: "ASAuthorizationController" or "LAContext" ``` If found, ask user: - Replace existing implementation? - Extend with additional methods? ### 3. Required Capabilities **Sign in with Apple requires:** - Add "Sign in with Apple" capability in Xcode - Configure in App Store Connect - Add entitlement: `com.apple.developer.applesignin` ## Configuration Questions Ask user via AskUserQuestion: 1. **Authentication methods?** (multi-select) - Sign in with Apple - Biometrics (Face ID/Touch ID) - Both 2. **Session storage?** - Keychain (secure, persists reinstall) - UserDefaults (simple, cleared on reinstall) 3. **Session management?** - Auto-refresh tokens - Manual refresh - No token refr...

Details

Author
rshankras
Repository
rshankras/claude-code-apple-skills
Created
9 months ago
Last Updated
3 days ago
Language
Swift
License
MIT

Integrates with

Bundled in these plugins

Similar Skills

Semantically similar based on skill content — not just same category

API & Backend Listed

auth-flow-architect

Design authentication and authorization architectures - OAuth2/OIDC flow selection, JWT vs opaque tokens, refresh token rotation with reuse detection, session management and revocation, token storage rules per client type (SPA, mobile, server, M2M), the BFF pattern, RBAC/scopes/permissions modeling, and multi-tenant claims. Use when building or reviewing login/auth for an app, choosing between sessions and JWTs, integrating an identity provider (Auth0, Keycloak, Entra ID, Cognito), securing an SPA or mobile app, designing API-to-API auth, fixing token expiry/refresh bugs, or when the user asks how to do auth properly.

1 Updated today
tamasbege
AI & Automation Featured

account-deletion

Generates an Apple-compliant account deletion flow with multi-step confirmation UI, optional data export, configurable grace period, Keychain cleanup, and server-side deletion request. Use when user needs account deletion, right-to-delete, or Apple App Review compliance for account removal.

564 Updated 3 days ago
rshankras
AI & Automation Listed

auth-flow-reviewer

Read-only review of authentication AND authorization flows — session/token model, cookie flags, CSRF, token rotation, password-reset/email-verification, OAuth redirect/state, and per-route object-level access checks — for exploitable gaps. Use before shipping login/session/token code, when adding a protected route or sharing-by-URL feature, or during a security pass. Reports findings by severity with location, impact, and the concrete fix; never edits code.

1 Updated 1 weeks ago
imtiazrayhan