Debugs authentication and authorization issues. Use for login/session/token failures, role/permission mismatches, CORS/cookie problems, and unexpected 401/403 responses.
Install
npx skillscat add erinrugas/artisan-agents/auth-debug Install via the SkillsCat registry.
We need to produce a 2-3 sentence plain-text summary, objective, factual, no marketing, no superlatives, no calls to action. Must be at most 60 words. No quotes, no bullet points, no headings, no markdown. Just plain text. We need to summarize: skill debugs authentication and authorization issues; solves login/session/token failures, role/permission mismatches, CORS/cookie problems, unexpected 401/403 responses; used when login succeeds but users appear unauthenticated, requests return 401/403 unexpectedly, session/cookie/token handling inconsistent across environments. We need 2-3 sentences.
Auth Debug Skill
When to Apply
- Login succeeds but users appear unauthenticated.
- Requests return 401/403 unexpectedly.
- Session/cookie/token handling is inconsistent across environments.
Workflow
- Read auth-related requirements from
specs/specs.mdandspecs/security-spec.md. - Identify auth model in use (session cookie, token, OAuth, SSO, hybrid).
- Trace the failing request path:
- client request headers/cookies
- server middleware/guards
- role/policy checks
- Verify environment/config factors (domains, CORS, secure cookie, token expiry).
- Propose minimal fix and include regression tests/checklist.
Quality Bar
- No broad permission bypasses.
- Preserve least privilege.
- Include one concrete reproduction and one verification path.