kirby-security-and-auth
Secures Kirby sites with access restriction, user roles, permissions, and protected downloads. Use when implementing login/role-based access, permissions, or file protection.
pinned to #3474420updated 2 months ago
Ask your AI client: “install skills/kirby-security-and-auth”.
Requires the metahub MCP server installed in your client. Set up MCP.
mh install skills/kirby-security-and-authmetahub onboarded this repo on the author's behalf.
If you own github.com/bnomei/kirby-mcp on GitHub, claim the listing to take over publishing. Your claim preserves the existing eval history and badges; only the curator label is replaced with verified-publisher on your next publish.
Stars
56
Last commit
2 months ago
Latest release
published
- #agent-tools
- #agentic-workflow
- #claude-code
- #cli
- #codex-cli
- #commands
- #developer-tools
- #google-gemini
- #kirby
- #kirby-cms
- #knowledge-base
- #mcp-server
- #model-context-protocol
- #php8
- #prompts
- #resources
- #tools
Automated checks the publisher passed at publish time — structure, docs, safety, and whether the artifact behaves as claimed.3474420· 2 months ago
Behavioral checks ran but aren't published for this artifact; the static checks above ran at publish time.
Kind-specific
3 passed1 warningSkill: triggers declaredwarn
No `trigger` phrases in SKILL.md frontmatter
Add `trigger:` lines so Claude knows when to activate this skill — e.g. `when building MCP servers` or `for diagram creation`.
Skill: SKILL.md present
found at skills/kirby-security-and-auth/SKILL.md · frontmatter source: SKILL.md
Skill: body content present
291 words · 2,248 chars · 8 sections
Skill: allowed-tools scope
no allowed-tools restriction (Claude may use anything)
Release history
1- releasecurrent3474420warn2 months ago
Contents
KB entry points
kirby://kb/scenarios/62-access-restriction-loginkirby://kb/scenarios/43-user-registration-and-loginkirby://kb/scenarios/63-files-firewall-protected-downloadskirby://kb/scenarios/64-permission-tricks-role-basedkirby://kb/scenarios/67-indieauth-rel-me
Required inputs
- Protected pages/data and required roles.
- Login/logout flow and redirect rules.
- Download protection or route constraints.
Role matrix template
| Role | Pages | Actions | Downloads |
|---|---|---|---|
| admin | all | all | all |
| editor | edit | publish | limited |
Default guard pattern
- Check
$kirby->user()and required role/permission before returning content. - Redirect or return a 403 for unauthorized requests.
- Enforce CSRF and validation on auth-related forms.
Login redirect rule
- Store intended URL in the session and redirect after successful login.
- Fall back to the home page when no intent is stored.
Common pitfalls
- Checking access only in templates while routes remain public.
- Returning a 404 for unauthorized access instead of a 403 or redirect.
Verification checklist
- Test the role matrix across protected pages and downloads.
- Verify login/logout flows and session handling.
- Confirm CSRF failures render safely.
Workflow
- Clarify which pages/data are protected, required roles, and login/logout behavior.
- Call
kirby:kirby_initand readkirby://roots. - Inspect templates/controllers/blueprints to align with existing patterns:
kirby:kirby_templates_indexkirby:kirby_controllers_indexkirby:kirby_blueprints_index
- For protected downloads or auth routes, inspect routes with
kirby:kirby_routes_indexandkirby://config/routes(install runtime if needed). - Search the KB with
kirby:kirby_search(examples: "access restriction login", "user registration and login", "files firewall", "permission tricks", "page on own domain"). - Implement least-privilege checks in templates/controllers or routes; enforce CSRF and validation on auth forms.
- Verify by rendering protected pages (
kirby:kirby_render_page) and manually testing login and download URLs.
Reviews
No reviews yet. Be the first.
Related
Verification Before Completion
Evidence before assertions, always
Writing Plans
Turn specs into phased implementation plans
Test-Driven Development
Red → green → refactor discipline for any feature or bugfix
mh install skills/kirby-security-and-auth