ahnyongjooandClaude Sonnet 5.5
964a841de1
- Code\rebar_pipeline, review_pipeline, pier-program을 정션에서 실제 폴더로 전환 - Code\rhino_mcp 및 CLAUDE_rhino배경.md 추가, .mcp.json은 PYTHONPATH로 새 위치 사용 - pier-program 내부 .git 제거(이력은 backup\pier-program_20261028.bundle에 보관) - worktree 가이드 반영(CLAUDE.local.md, HANDOFF.md) - D:\Rhino-MCP 경로 참조를 새 위치로 치환 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
115 lines
3.8 KiB
Markdown
115 lines
3.8 KiB
Markdown
---
|
|
name: bkend-auth
|
|
classification: capability
|
|
classification-reason: Pattern guidance may overlap with model's built-in knowledge as it improves
|
|
deprecation-risk: medium
|
|
description: |
|
|
bkend.ai authentication — email/social login, JWT tokens, RBAC, session management.
|
|
Triggers: bkend auth, login, signup, JWT, RBAC, 인증, 로그인, 회원가입.
|
|
user-invocable: false
|
|
agent: hmcmkit:bkend-expert
|
|
allowed-tools:
|
|
- Read
|
|
- Write
|
|
- Edit
|
|
- Glob
|
|
- Grep
|
|
- Bash
|
|
- mcp__bkend__*
|
|
imports:
|
|
- ${PLUGIN_ROOT}/templates/shared/bkend-patterns.md
|
|
---
|
|
|
|
# bkend.ai Authentication & Security Guide
|
|
|
|
## Auth Methods
|
|
|
|
| Method | Description |
|
|
|--------|-------------|
|
|
| Email + Password | Email/password signup and login |
|
|
| Social (Google) | OAuth 2.0 social login |
|
|
| Social (GitHub) | OAuth 2.0 social login |
|
|
| Magic Link | Email link login (no password) |
|
|
|
|
## JWT Token Structure
|
|
|
|
- **Access Token**: 1 hour validity
|
|
- **Refresh Token**: 7 days validity
|
|
- Auto-refresh: `POST /v1/auth/refresh`
|
|
|
|
## Password Policy
|
|
|
|
8+ characters, uppercase + lowercase + numbers + special characters
|
|
|
|
## MCP Auth Workflow
|
|
|
|
bkend MCP does NOT have dedicated auth tools. Use this workflow:
|
|
|
|
1. **Search docs**: `search_docs` with query "email signup" or "social login"
|
|
2. **Get examples**: `search_docs` with query "auth code examples"
|
|
3. **Generate code**: AI generates REST API code based on search results
|
|
|
|
### Searchable Auth Docs
|
|
| Doc ID | Content |
|
|
|--------|---------|
|
|
| `3_howto_implement_auth` | Signup, login, token management guide |
|
|
| `6_code_examples_auth` | Email, social, magic link code examples |
|
|
|
|
### Key Pattern
|
|
```
|
|
User: "Add social login"
|
|
→ search_docs(query: "social login implementation")
|
|
→ Returns auth guide with REST API patterns
|
|
→ AI generates social login code
|
|
```
|
|
|
|
## REST Auth API (Core Endpoints)
|
|
|
|
For the complete endpoint list, use `search_docs` or check Live Reference.
|
|
|
|
| Method | Endpoint | Description |
|
|
|--------|----------|-------------|
|
|
| POST | /v1/auth/email/signup | Sign up |
|
|
| POST | /v1/auth/email/signin | Sign in |
|
|
| GET | /v1/auth/me | Current user |
|
|
| POST | /v1/auth/refresh | Refresh token |
|
|
| POST | /v1/auth/signout | Sign out |
|
|
| GET/POST | /v1/auth/:provider/callback | Social login callback |
|
|
| POST | /v1/auth/password/reset/request | Password reset |
|
|
| POST | /v1/auth/password/reset/confirm | Confirm reset |
|
|
| POST | /v1/auth/password/change | Change password |
|
|
| GET | /v1/auth/sessions | List sessions |
|
|
| DELETE | /v1/auth/sessions/:sessionId | Remove session |
|
|
| DELETE | /v1/auth/withdraw | Delete account |
|
|
|
|
**Additional endpoints** (MFA, invitations, user management): use `search_docs` or Live Reference.
|
|
|
|
## RBAC (Role-Based Access Control)
|
|
|
|
| Group | Description | Scope |
|
|
|-------|-------------|-------|
|
|
| admin | Full CRUD | All data |
|
|
| user | Authenticated user | Full read, own write |
|
|
| self | Owner only | createdBy-based |
|
|
| guest | Unauthenticated | Read only (usually) |
|
|
|
|
## RLS (Row Level Security)
|
|
|
|
- Per-table row-level access control
|
|
- 4-level policies: admin/user/self/guest
|
|
- Auto-filtering based on createdBy field
|
|
|
|
## Session Management
|
|
|
|
- Per-device session tracking
|
|
- `GET /v1/auth/sessions` - List sessions
|
|
- `DELETE /v1/auth/sessions/:sessionId` - Remove session
|
|
|
|
## Official Documentation (Live Reference)
|
|
|
|
For the latest authentication documentation, use WebFetch:
|
|
- Auth Overview: https://raw.githubusercontent.com/popup-studio-ai/bkend-docs/main/en/authentication/01-overview.md
|
|
- MCP Auth Guide: https://raw.githubusercontent.com/popup-studio-ai/bkend-docs/main/en/mcp/06-auth-tools.md
|
|
- Security: https://raw.githubusercontent.com/popup-studio-ai/bkend-docs/main/en/security/01-overview.md
|
|
- Full TOC: https://raw.githubusercontent.com/popup-studio-ai/bkend-docs/main/SUMMARY.md
|