authentication-patterns

name	authentication-patterns
description	Provides auth patterns for API keys, OAuth, and token management. Use when implementing or reviewing service authentication and credential handling.
alwaysApply	false
category	infrastructure
tags	["authentication","api-keys","oauth","tokens","security"]
dependencies	["error-patterns"]
provides	{"infrastructure":["authentication","credential-management","auth-verification"],"patterns":["api-key-auth","oauth-flow","token-refresh"]}
usage_patterns	["service-authentication","credential-verification","token-management"]
complexity	beginner
model_hint	fast
estimated_tokens	400
progressive_loading	true
modules	["modules/auth-methods.md","modules/verification-patterns.md","modules/interactive-auth.md"]

Table of Contents

• Overview
• When to Use
• Authentication Methods
• Quick Start
• Verify Authentication
• Smoke Test
• Standard Flow
• Step 1: Check Environment
• Step 2: Verify with Service
• Step 3: Handle Failures
• Integration Pattern
• Detailed Resources
• Exit Criteria

Authentication Patterns

Overview

Common authentication patterns for integrating with external services. Provides consistent approaches to credential management, verification, and error handling.

When To Use

• Integrating with external APIs
• Need credential verification
• Managing multiple auth methods
• Handling auth failures gracefully

When NOT To Use

• Project doesn't use the leyline infrastructure patterns
• Simple scripts without service architecture needs

Authentication Methods

Method	Best For	Environment Variable
API Key	Simple integrations	{SERVICE}_API_KEY
OAuth	User-authenticated	Browser-based flow
Token	Session-based	{SERVICE}_TOKEN
None	Public APIs	N/A

Quick Start

Verify Authentication

from leyline.auth import verify_auth, AuthMethod

# API Key verification
status = verify_auth(
    service="gemini",
    method=AuthMethod.API_KEY,
    env_var="GEMINI_API_KEY"
)

if not status.authenticated:
    ()
    ()