from inertia-rails-skills30
Practical guide for adding authentication and authorization to Inertia + Rails apps — covers Devise, has_secure_password, session sharing, permission props, and
This skill provides step-by-step guidance for implementing authentication and authorization in Rails applications that use Inertia.js for the frontend. It covers setting up Devise or has_secure_password, sharing auth state with Inertia (inertia_share), session handling, protected routes, CSRF handling, role-based access, and secure session configuration. The skill also explains patterns for passing permission flags to the frontend and integrating authorization libraries like Pundit or ActionPolicy.
Use this skill when building or hardening auth flows for Inertia-powered Rails apps: onboarding Devise, creating login/registration flows, protecting controller actions, serialising user data safely for the client, and implementing per-record permission checks. It's useful during initial setup and during security reviews.
Developer-focused coding assistants that can run Rails commands or generate code snippets (e.g., Copilot-style tools, Claude Code).
This skill has not been reviewed by our automated audit pipeline yet.
