DE

debug-cross-service-auth

A diagnostic tool for identifying and resolving JWT validation errors between frontend and backend services.

Install

mkdir -p .claude/skills/debug-cross-service-auth && curl -L -o skill.zip "https://agentskills.codes/api/skills/download/16626" && unzip -o skill.zip -d .claude/skills/debug-cross-service-auth && rm skill.zip

Installs to .claude/skills/debug-cross-service-auth

Activation

This is the description your AI agent reads to decide when to run this skill — the better it matches your request, the more reliably it fires.

Use when: diagnosing Supabase JWT handoff failures from Next.js frontend to Laravel backend including headers, CORS, issuer, audience, and secret mismatches.
157 chars✓ has a “when” trigger
Intermediate

Key capabilities

  • Explain JWT failures in plain language
  • Provide exact fixes for authentication issues
  • Check Authorization header format and token forwarding path
  • Check Laravel JWT validation settings
  • Check CORS and preflight behavior
  • Produce a focused checklist of config mismatches

How it works

The skill identifies where token validation fails in the request lifecycle and produces a checklist of configuration mismatches.

Inputs & outputs

You give it
failing request headers, backend auth config, and error message/log
You get back
explanation of failures, exact fixes, and corrected code snippets

When to use debug-cross-service-auth

  • Debug JWT authentication failure
  • Fix token handoff from Next.js to Laravel
  • Check CORS settings for auth headers
  • Verify Laravel JWT issuer and audience config

About this skill

Debug Cross-Service Auth

<system_prompt> You are executing debug-cross-service-auth for frontend to backend token validation troubleshooting. </system_prompt>

<rules> - Explain failures in plain language first, then provide exact fixes. - Check Authorization header format and token forwarding path. - Check Laravel JWT validation settings: issuer, audience, expiry, signing keys/secrets. - Check CORS and preflight behavior that may strip auth headers. </rules>

<skill_execution>

  1. Identify where token validation fails in request lifecycle.
  2. Produce a focused checklist of config mismatches.
  3. Provide corrected frontend request and backend validation snippets.
  4. Add verification steps for local and deployed environments. </skill_execution>

When not to use it

  • When the issue is not related to Supabase JWT handoff failures
  • When the issue is not between a Next.js frontend and Laravel backend

Limitations

  • The skill is limited to diagnosing Supabase JWT handoff failures
  • The skill is limited to issues between Next.js frontend and Laravel backend
  • The skill focuses on headers, CORS, issuer, audience, and secret mismatches

How it compares

This skill provides exact fixes and verification steps, unlike a manual approach that might only identify the problem.

Compared to similar skills

debug-cross-service-auth side by side with the closest alternatives in the catalog.

SkillInstallsUpdatedSafetyDifficulty
debug-cross-service-auth (this skill)04moNo flagsIntermediate
payment-integration16moReviewIntermediate
developing-with-turbo-streams15moNo flagsIntermediate
developing-with-turbo-basics15moNo flagsIntermediate

Try saying

Example prompts that trigger this skill in your AI assistant.

You might also like

payment-integration

mrgoonie

Integrate payments with SePay (VietQR), Polar, Stripe, Paddle (MoR subscriptions), Creem.io (licensing). Checkout, webhooks, subscriptions, QR codes, multi-provider orders.

13

developing-with-turbo-streams

hotwired-laravel

Basics of developing with Turbo Streams in web applications. Activate when working on projects that utilize Turbo Streams for enhancing user experience through real-time updates, dynamic content changes, and partial page updates without full reloads.

15

developing-with-turbo-basics

hotwired-laravel

Basics of developing with Turbo in web applications. Activate when working on projects that utilize Turbo for enhancing user experience through partial page updates, real-time interactions, and seamless navigation without full page reloads.

13

fortify-development

gdarko

ACTIVATE when the user works on authentication in Laravel. This includes login, registration, password reset, email verification, two-factor authentication (2FA/TOTP/QR codes/recovery codes), profile updates, password confirmation, or any auth-related routes and controllers. Activate when the user m

00

developing-with-fortify

joshcirre

Laravel Fortify headless authentication backend development. Activate when implementing authentication features including login, registration, password reset, email verification, two-factor authentication (2FA/TOTP), profile updates, headless auth, authentication scaffolding, or auth guards in Larav

00

laravel-pdf

spatie

Generate PDFs from Blade views or HTML using spatie/laravel-pdf. Covers creating, formatting, saving, downloading, and testing PDFs with the Browsershot, Cloudflare, or DOMPDF driver.

1140

Search skills

Search the agent skills registry