{"id":22209,"plugin_id":"plugins_6ab01c9056c481918eac972df8fb396d","kind":"skill","collection_source":null,"comparison_source":null,"observed_at":"2026-09-30T23:17:11.325Z","digest":"894e8160f7676a767ab0a7379bb38bccc56808538e76aa09e643530922901e08","against":null,"payload":{"name":"authentication-and-authorization","description":"Review login, sessions, tokens, roles, permissions, tenant isolation, and privileged actions.","included_files":[],"skill_md_contents":"---\nname: authentication-and-authorization\ndescription: Review login, sessions, tokens, roles, permissions, tenant isolation, and privileged actions.\n---\n\n# Authentication and Authorization\n\nCheck identity proofing, password or OAuth flows, session lifecycle, token storage, expiry, refresh, logout, CSRF, MFA, role checks, object-level authorization, tenant boundaries, admin paths, and account recovery. Verify authorization on the server for every sensitive operation.\n"},"changes":[],"summary":"First saved snapshot. No earlier version is available for comparison.","summary_kind":"deterministic","summary_metadata":{}}