Ejecuta cualquier Skill en Manus
con un clic

Ejecuta cualquier Skill en Manus con un clic

enforce-frontend-auth-boundary

Estrellas0

Forks0

Actualizado19 de mayo de 2026 a las 14:54

Use when implementing frontend auth-adjacent behavior to preserve gateway-managed session architecture and avoid token handling in the browser.

Instalación

Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.

Ejecutar en Manus

Fuente

takeshi-su57

takeshi-su57/luckyplans

Abrir repositorio de GitHub Ver repositorios del creador

Descarga

Ejecutar en Manus

Ocupaciones relacionadasSOC

Basado en la clasificación ocupacional SOC

Desarrolladores de softwareOcupaciones informáticas y matemáticas·SOC 15-1252

SKILL.md

readonly

name	enforce-frontend-auth-boundary
description	Use when implementing frontend auth-adjacent behavior to preserve gateway-managed session architecture and avoid token handling in the browser.

Enforce Frontend Auth Boundary

Rules

Frontend never stores/accesses access/refresh/id tokens.
Frontend never sends Bearer headers for app auth.
Auth requests use cookie-based flow with credentials: 'include'.
Route UX protection uses session_id cookie middleware checks.

Allowed Frontend Auth Surface

Login/Register pages calling /auth/login and /auth/register.
Logout action calling /auth/logout.
useCurrentUser based on GraphQL me query.

Anti-Patterns

Adding next-auth or custom token refresh in frontend.
Storing tokens in localStorage/sessionStorage.

Más de este repositorio

mismo repositorio

add-testing-foundation

takeshi-su57/luckyplans

Use when introducing or expanding tests in LuckyPlans, especially service logic, shared utilities, controllers, and resolvers.

2026-05-190

add-frontend-page

takeshi-su57/luckyplans

Use when adding a new Next.js App Router page in apps/web, including route structure, data hooks usage, and auth/session-aware behavior.

2026-05-190

apply-ui-baseline

takeshi-su57/luckyplans

Use when implementing or modifying frontend UI in apps/web to enforce the repository's HeroUI + Notion-style baseline consistently.

2026-05-190

create-graphql-hook

takeshi-su57/luckyplans

Use when adding a new GraphQL query or mutation in apps/web so the operation is defined inline in a hook and consumed by components.

2026-05-190

customize-frontend-component

takeshi-su57/luckyplans

Use when modifying or extending an existing frontend component in apps/web while preserving project styling conventions, hook boundaries, and accessibility.

2026-05-190

enforce-apollo-state-boundary

takeshi-su57/luckyplans

Use when introducing or modifying frontend state management to keep GraphQL data in Apollo cache and avoid mixed-state ownership.

2026-05-190

name	enforce-frontend-auth-boundary
description	Use when implementing frontend auth-adjacent behavior to preserve gateway-managed session architecture and avoid token handling in the browser.

Enforce Frontend Auth Boundary

Rules

Frontend never stores/accesses access/refresh/id tokens.
Frontend never sends Bearer headers for app auth.
Auth requests use cookie-based flow with credentials: 'include'.
Route UX protection uses session_id cookie middleware checks.

Allowed Frontend Auth Surface

Login/Register pages calling /auth/login and /auth/register.
Logout action calling /auth/logout.
useCurrentUser based on GraphQL me query.

Anti-Patterns

Adding next-auth or custom token refresh in frontend.
Storing tokens in localStorage/sessionStorage.