Convex Auth

The convex-auth skill enables AI agents to manage authentication and authorization within Convex applications, a serverless backend platform. It allows agents to programmatically handle user sessions, verify credentials, and enforce access controls directly through code generation and execution.

When to use it

• Automating the setup of secure login flows for new Convex projects.
• Dynamically adjusting user permissions based on real-time application data.
• Integrating third-party identity providers (like Auth0 or Clerk) into existing Convex backends.
• Resolving access denied errors by correcting role assignments in the database schema.

Key capabilities

• Generates secure authentication middleware for Convex functions.
• Manages user session state and token validation logic.
• Enforces row-level security policies based on authenticated user roles.
• Integrates with external identity providers to extend login options.

Example prompts

• "Create a Convex function that requires a specific role before allowing a user to delete a project."
• "Set up authentication using Auth0 and configure the database schema to store user IDs securely."
• "Write code to automatically revoke a user's session when their account is flagged for suspicious activity."

Tips & gotchas

Ensure your Convex backend is properly configured with an identity provider before attempting to generate auth logic. This skill relies on specific Convex schema definitions; if the database structure is undefined, generated authentication code may fail to enforce correct access controls.