Jeden Skill in Manus ausführen
mit einem Klick

Jeden Skill in Manus mit einem Klick ausführen

enforce-frontend-auth-boundary

Sterne0

Forks0

Aktualisiert19. Mai 2026 um 14:54

Use when implementing frontend auth-adjacent behavior to preserve gateway-managed session architecture and avoid token handling in the browser.

Installation

Mit Codex oder Claude installieren Kopieren Sie diesen Prompt, fügen Sie ihn in Codex, Claude oder einen anderen Assistant ein und lassen Sie die Skill-Seite prüfen und installieren.

In Manus ausführen

Quelle

takeshi-su57

takeshi-su57/luckyplans

GitHub-Repository öffnen Creator-Repositorys ansehen

Download

In Manus ausführen

Verwandte BerufeSOC

Basierend auf der SOC-Berufsklassifikation

SoftwareentwicklerInformatik- und Mathematikberufe·SOC 15-1252

SKILL.md

readonly

name	enforce-frontend-auth-boundary
description	Use when implementing frontend auth-adjacent behavior to preserve gateway-managed session architecture and avoid token handling in the browser.

Enforce Frontend Auth Boundary

Rules

Frontend never stores/accesses access/refresh/id tokens.
Frontend never sends Bearer headers for app auth.
Auth requests use cookie-based flow with credentials: 'include'.
Route UX protection uses session_id cookie middleware checks.

Allowed Frontend Auth Surface

Login/Register pages calling /auth/login and /auth/register.
Logout action calling /auth/logout.
useCurrentUser based on GraphQL me query.

Anti-Patterns

Adding next-auth or custom token refresh in frontend.
Storing tokens in localStorage/sessionStorage.

Mehr aus diesem Repository

gleiches Repository

add-testing-foundation

takeshi-su57/luckyplans

Use when introducing or expanding tests in LuckyPlans, especially service logic, shared utilities, controllers, and resolvers.

2026-05-190

add-frontend-page

takeshi-su57/luckyplans

Use when adding a new Next.js App Router page in apps/web, including route structure, data hooks usage, and auth/session-aware behavior.

2026-05-190

apply-ui-baseline

takeshi-su57/luckyplans

Use when implementing or modifying frontend UI in apps/web to enforce the repository's HeroUI + Notion-style baseline consistently.

2026-05-190

create-graphql-hook

takeshi-su57/luckyplans

Use when adding a new GraphQL query or mutation in apps/web so the operation is defined inline in a hook and consumed by components.

2026-05-190

customize-frontend-component

takeshi-su57/luckyplans

Use when modifying or extending an existing frontend component in apps/web while preserving project styling conventions, hook boundaries, and accessibility.

2026-05-190

enforce-apollo-state-boundary

takeshi-su57/luckyplans

Use when introducing or modifying frontend state management to keep GraphQL data in Apollo cache and avoid mixed-state ownership.

2026-05-190

name	enforce-frontend-auth-boundary
description	Use when implementing frontend auth-adjacent behavior to preserve gateway-managed session architecture and avoid token handling in the browser.

Enforce Frontend Auth Boundary

Rules

Frontend never stores/accesses access/refresh/id tokens.
Frontend never sends Bearer headers for app auth.
Auth requests use cookie-based flow with credentials: 'include'.
Route UX protection uses session_id cookie middleware checks.

Allowed Frontend Auth Surface

Login/Register pages calling /auth/login and /auth/register.
Logout action calling /auth/logout.
useCurrentUser based on GraphQL me query.

Anti-Patterns

Adding next-auth or custom token refresh in frontend.
Storing tokens in localStorage/sessionStorage.