Run any Skill in Manus with one click

enforce-frontend-auth-boundary

Stars0

Forks0

UpdatedMay 19, 2026 at 14:54

Use when implementing frontend auth-adjacent behavior to preserve gateway-managed session architecture and avoid token handling in the browser.

Installation

Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.

Run Skill in Manus

Source

takeshi-su57

takeshi-su57/luckyplans

View GitHub Repository View Creator Repositories

Download

Run Skill in Manus

Related occupationsSOC

Based on SOC occupation classification

Software DevelopersComputer and Mathematical Occupations·SOC 15-1252

SKILL.md

readonly

name	enforce-frontend-auth-boundary
description	Use when implementing frontend auth-adjacent behavior to preserve gateway-managed session architecture and avoid token handling in the browser.

Enforce Frontend Auth Boundary

Rules

Frontend never stores/accesses access/refresh/id tokens.
Frontend never sends Bearer headers for app auth.
Auth requests use cookie-based flow with credentials: 'include'.
Route UX protection uses session_id cookie middleware checks.

Allowed Frontend Auth Surface

Login/Register pages calling /auth/login and /auth/register.
Logout action calling /auth/logout.
useCurrentUser based on GraphQL me query.

Anti-Patterns

Adding next-auth or custom token refresh in frontend.
Storing tokens in localStorage/sessionStorage.

More from this repository

same repository

add-testing-foundation

takeshi-su57/luckyplans

Use when introducing or expanding tests in LuckyPlans, especially service logic, shared utilities, controllers, and resolvers.

2026-05-190

add-frontend-page

takeshi-su57/luckyplans

Use when adding a new Next.js App Router page in apps/web, including route structure, data hooks usage, and auth/session-aware behavior.

2026-05-190

apply-ui-baseline

takeshi-su57/luckyplans

Use when implementing or modifying frontend UI in apps/web to enforce the repository's HeroUI + Notion-style baseline consistently.

2026-05-190

create-graphql-hook

takeshi-su57/luckyplans

Use when adding a new GraphQL query or mutation in apps/web so the operation is defined inline in a hook and consumed by components.

2026-05-190

customize-frontend-component

takeshi-su57/luckyplans

Use when modifying or extending an existing frontend component in apps/web while preserving project styling conventions, hook boundaries, and accessibility.

2026-05-190

enforce-apollo-state-boundary

takeshi-su57/luckyplans

Use when introducing or modifying frontend state management to keep GraphQL data in Apollo cache and avoid mixed-state ownership.

2026-05-190

name	enforce-frontend-auth-boundary
description	Use when implementing frontend auth-adjacent behavior to preserve gateway-managed session architecture and avoid token handling in the browser.

Enforce Frontend Auth Boundary

Rules

Frontend never stores/accesses access/refresh/id tokens.
Frontend never sends Bearer headers for app auth.
Auth requests use cookie-based flow with credentials: 'include'.
Route UX protection uses session_id cookie middleware checks.

Allowed Frontend Auth Surface

Login/Register pages calling /auth/login and /auth/register.
Logout action calling /auth/logout.
useCurrentUser based on GraphQL me query.

Anti-Patterns

Adding next-auth or custom token refresh in frontend.
Storing tokens in localStorage/sessionStorage.