| name | bkend-auth |
| classification | capability |
| classification-reason | Pattern guidance may overlap with model's built-in knowledge as it improves |
| deprecation-risk | medium |
| effort | medium |
| description | bkend.ai authentication — email/social login, JWT tokens, RBAC, session management.
Triggers: bkend auth, bkend login, bkend signup, bkend JWT, bkend RBAC
|
| user-invocable | false |
| agent | bkit:bkend-expert |
| allowed-tools | ["Read","Write","Edit","Glob","Grep","Bash","mcp__bkend__*"] |
| imports | ["${PLUGIN_ROOT}/templates/shared/bkend-patterns.md"] |
bkend.ai Authentication & Security Guide
Auth Methods
| Method | Description |
|---|
| Email + Password | Email/password signup and login |
| Social (Google) | OAuth 2.0 social login |
| Social (GitHub) | OAuth 2.0 social login |
| Magic Link | Email link login (no password) |
JWT Token Structure
- Access Token: 1 hour validity
- Refresh Token: 7 days validity
- Auto-refresh:
POST /v1/auth/refresh
Password Policy
8+ characters, uppercase + lowercase + numbers + special characters
MCP Auth Workflow
bkend MCP does NOT have dedicated auth tools. Use this workflow:
- Search docs:
search_docs with query "email signup" or "social login"
- Get examples:
search_docs with query "auth code examples"
- Generate code: AI generates REST API code based on search results
Searchable Auth Docs
| Doc ID | Content |
|---|
3_howto_implement_auth | Signup, login, token management guide |
6_code_examples_auth | Email, social, magic link code examples |
Key Pattern
User: "Add social login"
→ search_docs(query: "social login implementation")
→ Returns auth guide with REST API patterns
→ AI generates social login code
REST Auth API (Core Endpoints)
For the complete endpoint list, use search_docs or check Live Reference.
| Method | Endpoint | Description |
|---|
| POST | /v1/auth/email/signup | Sign up |
| POST | /v1/auth/email/signin | Sign in |
| GET | /v1/auth/me | Current user |
| POST | /v1/auth/refresh |
