Skip to content
cccskills
FreePublished on GitHub

mobile-auth

Use this skill when working on login, logout, session restore, tokens, route guards, or any authentication and authorization behavior.

The English summary is being prepared. Showing the original description.

See how to install

Files included (1)

  • SKILL.md1.7 KB

SKILL.md (original)

Review the instructions the agent will receive before you install.

mobile-auth — Canonical Skill

Purpose

Preserve the verified JWT + refresh-token auth model and its security boundaries.

When to use

Login/logout, token storage/refresh, multi-account switch, guards, biometric or OAuth proposals (verify-first — neither is implemented).

Required reading

  • skills/mobile/AUTH.md
  • skills/mobile/API.md
  • docs/agent/API_INTEGRATION_CONTRACT.md

Relevant project locations

  • src/composables/useAuthen.ts, src/composables/useAppStorage.ts
  • src/stores/authenStore.ts, src/api/AuthenService.ts, src/router/index.ts

Mandatory rules

  1. Tokens live in Capacitor Preferences (AppAuthTokenKey_<uid> etc.) — no secure-storage plugin exists (documented risk); never copy tokens.
  2. 401 → shared refresh + retry via /api/auth/refreshTokenApi in useApi.ts; refresh-403 → removeAuthToken() + login redirect.
  3. Guard rule: noRequireAuth === true or valid authenticationToken.
  4. Frontend role checks are UI-only; backend authorization is authoritative. Never log request bodies/headers/responses carrying tokens (useApi logs url/method/status only).

Implementation workflow

  1. Trace token lifecycle (signin → store → attach → refresh → logout).
  2. Test concurrent-401, failed-refresh, resume-after-background, switch-user.
  3. Confirm logout cleanup (tokens, FCM unregister, cached user data).
  4. Verify per mobile-testing, incl. SECURITY checklist.

Verification

Auth-flow tests with mocked storage/API; no hardcoded secrets or logged tokens; device needed for resume/background proof.

Reviews

No reviews yet. Tell others what you thought.

Comments

No login needed. Share how it worked for you, ask a question, or note where it did not run.

No comments yet. Be the first to write one.

Comments are published right away. Do not include personal information such as email addresses or phone numbers. Up to 2 URLs.

0 / 1,000 characters

This form is protected by reCAPTCHA, and the Google Privacy Policy and Terms of Service apply.

More skills from this repository

Use this skill when adding or changing REST API calls, HTTP client config, error handling, uploads/downloads, or network behavior.

The English summary is being prepared. Showing the original description.

bekaku/vue-ionic-example-app6Updated Oct 5, 2026

Use this skill when building, syncing Capacitor, or preparing Android/iOS releases and environment configuration.

The English summary is being prepared. Showing the original description.

bekaku/vue-ionic-example-app6Updated Oct 5, 2026

Use this skill when creating, modifying, or debugging Ionic Vue components, pages, forms, dialogs, or theme/safe-area UI behavior.

The English summary is being prepared. Showing the original description.

bekaku/vue-ionic-example-app6Updated Oct 5, 2026

Use this skill for any Ionic Vue + Capacitor mobile work: Vue architecture, Composition API, TypeScript, state, env config, shared conventions. Required for every implementation task alongside mobile-testing.

The English summary is being prepared. Showing the original description.

bekaku/vue-ionic-example-app6Updated Oct 5, 2026

Use this skill when handling inbound URLs, custom schemes, app links, universal links, or URL-bearing notification payloads.

The English summary is being prepared. Showing the original description.

bekaku/vue-ionic-example-app6Updated Oct 5, 2026

Use this skill when working on camera, gallery, file pick/upload/download, file preview, sharing, or filesystem-backed media. For Preferences keys, use mobile-local-data.

The English summary is being prepared. Showing the original description.

bekaku/vue-ionic-example-app6Updated Oct 5, 2026

See all skills by bekaku

Report a problem with this skill