type skillowner Thomas Cherickalcurator Thomas Cherickalrole fullstack-engineercategory software-engineering/applicationversion 0.1.0status seedupdated 2026-11-15
auth-flow-review
Steps
- Check password hashing (argon2id or bcrypt).
- Check cookie flags: HttpOnly, Secure, SameSite.
- Check CSRF protection and token expiry.
- Check OAuth state and PKCE.
- Check rate limiting on login.
Done When
- [ ] Checklist signed off by a second reviewer
Registry
| id |
role |
version |
status |
owner |
last_tested |
| SK-FULLSTACK-ENGINEER-auth-flow-review |
fullstack-engineer |
0.1.0 |
seed |
Thomas Cherickal |
- |
Links
