Every published module, all in one place.
View the Auth category page
4 modules
Auth → Other
Core authentication rules every login system needs: password hashing, session revocation, verification, and the line between authentication and authorization.
by @markdowners
Auth → Email Password
The email+password login flow specifics built on auth-fundamentals: signup verification, login timing safety, and password-change session rules.
Auth → Oauth Social
The OAuth/social-login handshake done correctly: PKCE, state validation, safe token handling, and account-linking without takeover risk.
Auth → Sessions
Keeping an established session safe for its whole lifetime: cookie flags, revocation, CSRF defenses, and concurrent-session visibility.