bkend-auth

name	bkend-auth
classification	capability
classification-reason	Pattern guidance may overlap with model's built-in knowledge as it improves
deprecation-risk	medium
effort	medium
description	bkend.ai authentication — email/social login, JWT tokens, RBAC, session management. Triggers: bkend auth, bkend login, bkend signup, bkend JWT, bkend RBAC
user-invocable	false
agent	bkit:bkend-expert
allowed-tools	["Read","Write","Edit","Glob","Grep","Bash","mcp__bkend__*"]
imports	["${PLUGIN_ROOT}/templates/shared/bkend-patterns.md"]

bkend.ai Authentication & Security Guide

Auth Methods

Method	Description
Email + Password	Email/password signup and login
Social (Google)	OAuth 2.0 social login
Social (GitHub)	OAuth 2.0 social login
Magic Link	Email link login (no password)

JWT Token Structure

• Access Token: 1 hour validity
• Refresh Token: 7 days validity
• Auto-refresh: POST /v1/auth/refresh

Password Policy

8+ characters, uppercase + lowercase + numbers + special characters

MCP Auth Workflow

bkend MCP does NOT have dedicated auth tools. Use this workflow:

1. Search docs: search_docs with query "email signup" or "social login"
2. Get examples: search_docs with query "auth code examples"
3. Generate code: AI generates REST API code based on search results

Searchable Auth Docs

Doc ID	Content
3_howto_implement_auth	Signup, login, token management guide
6_code_examples_auth	Email, social, magic link code examples

Key Pattern

User: "Add social login"
  → search_docs(query: "social login implementation")
  → Returns auth guide with REST API patterns
  → AI generates social login code

REST Auth API (Core Endpoints)

For the complete endpoint list, use search_docs or check Live Reference.

Method	Endpoint	Description
POST	/v1/auth/email/signup	Sign up
POST	/v1/auth/email/signin	Sign in
GET	/v1/auth/me	Current user
POST	/v1/auth/refresh