后端身份验证与身份管理
后端是身份验证和授权的权威边界。
支持适用的机制：
- 会话 cookie
- JWT 访问令牌
- OAuth/OIDC
- Google 身份
- Apple 身份
- 服务间认证
- API 密钥
- mTLS
- 通行密钥/WebAuthn 验证
- 多因素认证 (MFA)
参考资料：
指导后端身份验证。在实现或审查登录、身份验证、会话或令牌生命周期、账户恢复以及后端应用程序中的授权边界时使用。
此 AI 技能旨在为后端开发人员提供身份验证和授权方面的全面指导。它涵盖了从经典的会话 cookie 到现代的无密码（WebAuthn）和多因素认证（MFA）等多种机制，确保后端作为身份验证的权威边界。该技能详细说明了 JWT、OAuth/OIDC、Google 和 Apple 身份以及服务间认证等标准协议，旨在帮助开发者安全地实现和审查后端身份验证系统。此技能适用于多种 AI 编码助手，包括 Claude Code、Cursor 等，通过其 SKILL.md 文件中引用的详细参考资料（如 google-identity.md 和 jwt.md）提供深度指导。
npx skills add https://github.com/AlanWYChen/agent-skills/tree/HEAD/production-engineering-skills/backend/authenticationInstalled? Explore more 编程与开发 skills: steipete/bluebubbles, steipete/eightctl, steipete/blucli · View all 6 →
后端是身份验证和授权的权威边界。
支持适用的机制：
参考资料：
This repo contains 3 individual skills — each has its own dedicated page.
Guide backend audit. Use when implementing or reviewing production readiness, security, reliability, testing, release configuration, and prioritized findings in backend applications.
Guide production backend development. Use for APIs, services, workers, queues, schedulers, and data systems; select the relevant backend guidance.
Guide production application development across web, mobile, and backend systems. Use when implementing or auditing production workflows; route to the applicable domain and supporting guidance.
Send and manage iMessages via BlueBubbles, including attachments, tapbacks, edits, replies, and groups.
Control Eight Sleep pods (status, temperature, alarms, schedules).
BluOS CLI (blu) for discovery, playback, grouping, and volume.
Create, search, and manage Bear notes via grizzly CLI.
Capture frames or clips from RTSP/ONVIF cameras.
Search GIF providers with CLI/TUI, download results, and extract stills/sheets.