Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →butterbase-ai/auth-setup
Use when configuring OAuth providers (Google/GitHub/Apple/X/etc.), setting up post-login auth hooks, tuning JWT lifetimes, or generating service API keys
Passed 16 of 19 test cases with the skill, and 10 of 19 without it.
and 7 more in the full report
8 fixed11 passed either way3 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 8 test cases the skill fixed. Same model, same prompt, with and without the skill.
If docs/butterbase/00-state.md exists in our workspace directory and we want to perform authentication setup, what journey route should be invoked?
| Checked | Without skill | With skill |
|---|---|---|
| Recommends invoking via /butterbase-skills:journey-auth when state file is present | Missed | Passed |
The instructions your model reads when the skill loads.
Two umbrella tools cover end-user authentication:
manage_oauth — provider configuration (Google, GitHub, Apple, X, custom)manage_auth_config — auth hooks, JWT lifetimes, service key generationFor broad app build-out, see also butterbase-skills:build-app. This skill is the deep dive.
Every request runs under one of three database roles:
| Auth header | Role | current_user_id() | RLS |
|---|---|---|---|
| none | butterbase_anon | NULL | enforced; default deny |
End-user JWT (issued by manage_oauth or email login) | butterbase_user | user UUID | enforced |
Service key (bb_sk_*) | butterbase_service | NULL | bypassed |
Auth is what transforms a request into the right role. RLS is what filters the data. Both must be configured.
manage_oauth({
app_id: "app_abc123",
action: "configure",
provider: "google",
client_id: "123456789.apps.googleusercontent.com",
client_secret: "GOCSPX-...",
redirect_uris: ["https://api.butterbase.ai/auth/app_abc123/oauth/google/callback"]
// scopes / authorization_url / token_url / userinfo_url / provider_metadata are auto-filled for built-in providers
})
Built-in providers (URLs and scopes pre-filled): google, github, discord, facebook, linkedin, microsoft, apple, x.
test cases passed, vs 10 / 19 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.