epic-auth

SKILL.md

Least privilege - Users should only have access to what they need, when they need it. Sessions should have minimal permissions and expire appropriately. Don't grant more access than necessary.

Design to fail fast and early - Validate authentication and authorization as early as possible. Check session validity immediately, verify permissions before processing requests, and return clear errors quickly.

Epic Stack uses cookie-based sessions for authentication. Sessions are stored in the database and identified by signed cookies.

Epic Stack の認証、セッション、OAuth、2FA、およびパスキーに関するガイド ソース: rubenpenap/epic-stack-agent-skills。

原文を見る