Exécutez n'importe quel Skill dans Manus
en un clic

Exécutez n'importe quel Skill dans Manus en un clic

enforce-frontend-auth-boundary

Étoiles0

Forks0

Mis à jour19 mai 2026 à 14:54

Use when implementing frontend auth-adjacent behavior to preserve gateway-managed session architecture and avoid token handling in the browser.

Installation

Installer avec Codex ou Claude Copiez ce prompt, collez-le dans Codex, Claude ou un autre assistant, puis laissez-le vérifier la page du skill et l'installer pour vous.

Exécuter dans Manus

Source

takeshi-su57

takeshi-su57/luckyplans

Ouvrir le dépôt GitHub Voir les dépôts du créateur

Téléchargement

Exécuter dans Manus

Métiers associésSOC

Basé sur la classification professionnelle SOC

Développeurs de logicielsProfessions informatiques et mathématiques·SOC 15-1252

SKILL.md

readonly

name	enforce-frontend-auth-boundary
description	Use when implementing frontend auth-adjacent behavior to preserve gateway-managed session architecture and avoid token handling in the browser.

Enforce Frontend Auth Boundary

Rules

Frontend never stores/accesses access/refresh/id tokens.
Frontend never sends Bearer headers for app auth.
Auth requests use cookie-based flow with credentials: 'include'.
Route UX protection uses session_id cookie middleware checks.

Allowed Frontend Auth Surface

Login/Register pages calling /auth/login and /auth/register.
Logout action calling /auth/logout.
useCurrentUser based on GraphQL me query.

Anti-Patterns

Adding next-auth or custom token refresh in frontend.
Storing tokens in localStorage/sessionStorage.

Plus depuis ce dépôt

même dépôt

add-testing-foundation

takeshi-su57/luckyplans

Use when introducing or expanding tests in LuckyPlans, especially service logic, shared utilities, controllers, and resolvers.

2026-05-190

add-frontend-page

takeshi-su57/luckyplans

Use when adding a new Next.js App Router page in apps/web, including route structure, data hooks usage, and auth/session-aware behavior.

2026-05-190

apply-ui-baseline

takeshi-su57/luckyplans

Use when implementing or modifying frontend UI in apps/web to enforce the repository's HeroUI + Notion-style baseline consistently.

2026-05-190

create-graphql-hook

takeshi-su57/luckyplans

Use when adding a new GraphQL query or mutation in apps/web so the operation is defined inline in a hook and consumed by components.

2026-05-190

customize-frontend-component

takeshi-su57/luckyplans

Use when modifying or extending an existing frontend component in apps/web while preserving project styling conventions, hook boundaries, and accessibility.

2026-05-190

enforce-apollo-state-boundary

takeshi-su57/luckyplans

Use when introducing or modifying frontend state management to keep GraphQL data in Apollo cache and avoid mixed-state ownership.

2026-05-190

name	enforce-frontend-auth-boundary
description	Use when implementing frontend auth-adjacent behavior to preserve gateway-managed session architecture and avoid token handling in the browser.

Enforce Frontend Auth Boundary

Rules

Frontend never stores/accesses access/refresh/id tokens.
Frontend never sends Bearer headers for app auth.
Auth requests use cookie-based flow with credentials: 'include'.
Route UX protection uses session_id cookie middleware checks.

Allowed Frontend Auth Surface

Login/Register pages calling /auth/login and /auth/register.
Logout action calling /auth/logout.
useCurrentUser based on GraphQL me query.

Anti-Patterns

Adding next-auth or custom token refresh in frontend.
Storing tokens in localStorage/sessionStorage.