0 Fork 0

Files

T

ahnyongjooandClaude Sonnet 5.5 964a841de1 chore(rebar): Pier_T_rebar 작업 폴더 초기 구성 및 외부 의존 파일 통합

- Code\rebar_pipeline, review_pipeline, pier-program을 정션에서 실제 폴더로 전환
- Code\rhino_mcp 및 CLAUDE_rhino배경.md 추가, .mcp.json은 PYTHONPATH로 새 위치 사용
- pier-program 내부 .git 제거(이력은 backup\pier-program_20261028.bundle에 보관)
- worktree 가이드 반영(CLAUDE.local.md, HANDOFF.md)
- D:\Rhino-MCP 경로 참조를 새 위치로 치환

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

2026-10-28 11:20:18 +09:00

3.8 KiB

Raw Blame History

name, classification, classification-reason, deprecation-risk, description, user-invocable, agent, allowed-tools, imports

name

classification

classification-reason

deprecation-risk

description

user-invocable

agent

allowed-tools

imports

bkend-auth

capability

Pattern guidance may overlap with model's built-in knowledge as it improves

medium

bkend.ai authentication — email/social login, JWT tokens, RBAC, session management. Triggers: bkend auth, login, signup, JWT, RBAC, 인증, 로그인, 회원가입.

false

hmcmkit:bkend-expert

Read

Write

Edit

Glob

Grep

Bash

mcp__bkend__*

${PLUGIN_ROOT}/templates/shared/bkend-patterns.md

bkend.ai Authentication & Security Guide

Auth Methods

Method	Description
Email + Password	Email/password signup and login
Social (Google)	OAuth 2.0 social login
Social (GitHub)	OAuth 2.0 social login
Magic Link	Email link login (no password)

JWT Token Structure

Access Token: 1 hour validity
Refresh Token: 7 days validity
Auto-refresh: POST /v1/auth/refresh

Password Policy

8+ characters, uppercase + lowercase + numbers + special characters

MCP Auth Workflow

bkend MCP does NOT have dedicated auth tools. Use this workflow:

Search docs: search_docs with query "email signup" or "social login"
Get examples: search_docs with query "auth code examples"
Generate code: AI generates REST API code based on search results

Searchable Auth Docs

Doc ID	Content
`3_howto_implement_auth`	Signup, login, token management guide
`6_code_examples_auth`	Email, social, magic link code examples

Key Pattern

User: "Add social login"
  → search_docs(query: "social login implementation")
  → Returns auth guide with REST API patterns
  → AI generates social login code

REST Auth API (Core Endpoints)

For the complete endpoint list, use search_docs or check Live Reference.

Method	Endpoint	Description
POST	/v1/auth/email/signup	Sign up
POST	/v1/auth/email/signin	Sign in
GET	/v1/auth/me	Current user
POST	/v1/auth/refresh	Refresh token
POST	/v1/auth/signout	Sign out
GET/POST	/v1/auth/:provider/callback	Social login callback
POST	/v1/auth/password/reset/request	Password reset
POST	/v1/auth/password/reset/confirm	Confirm reset
POST	/v1/auth/password/change	Change password
GET	/v1/auth/sessions	List sessions
DELETE	/v1/auth/sessions/:sessionId	Remove session
DELETE	/v1/auth/withdraw	Delete account

Additional endpoints (MFA, invitations, user management): use search_docs or Live Reference.

RBAC (Role-Based Access Control)

Group	Description	Scope
admin	Full CRUD	All data
user	Authenticated user	Full read, own write
self	Owner only	createdBy-based
guest	Unauthenticated	Read only (usually)

RLS (Row Level Security)

Per-table row-level access control
4-level policies: admin/user/self/guest
Auto-filtering based on createdBy field

Session Management

Per-device session tracking
GET /v1/auth/sessions - List sessions
DELETE /v1/auth/sessions/:sessionId - Remove session

Official Documentation (Live Reference)

For the latest authentication documentation, use WebFetch:

3.8 KiB Raw Blame History