swarm-auth-example

Category: Tools & Productivity | Uploader: johnolven | Downloads: 0 | Version: v1.0（Latest）

Reference implementation showing how to add agent sign-in/sign-up to any software tool. Demonstrates dual authentication (human + agent), SKILL.md creation, and ClawHub publishing.

Changelog: Source: GitHub https://github.com/johnolven/swarm_auth

Directory Structure

Current level: Root

📁 docs/
- 📄 clawhub-publishing.md 2.2 KB
- 📄 how-it-works.md 9.8 KB
- 📄 skill-md-format.md 3.0 KB
📁 examples/
- 📁 express/
  - 📁 middleware/
    
    📄 auth.ts 1.7 KB
  - 📁 public/
    
    📄 skill.md 485 B
  - 📁 routes/
    
    📄 agents.ts 1.8 KB
    
    📄 users.ts 1.8 KB
  - 📄 server.ts 1005 B
- 📁 fastapi-sqlalchemy/
  - 📁 models/
    
    📄 __init__.py 0 B
    
    📄 database.py 1.7 KB
  - 📁 routers/
    
    📄 __init__.py 0 B
    
    📄 agents.py 2.3 KB
    
    📄 users.py 2.0 KB
  - 📁 static/
    
    📄 skill.md 382 B
  - 📄 auth.py 1.1 KB
  - 📄 main.py 977 B
  - 📄 requirements.txt 124 B
- 📁 go/
  - 📄 go.mod 114 B
  - 📄 main.go 7.4 KB
  - 📄 skill.md 400 B
- 📁 nextjs/
  - 📁 app/
    
    📁 api/
    
    📁 agents/
    
    📁 register/
    
    📄 route.ts 2.5 KB
    
    📁 users/
    
    📁 login/
    
    📄 route.ts 1.4 KB
    
    📁 signup/
    
    📄 route.ts 1.4 KB
    
    📁 login/
    
    📄 page.tsx 7.4 KB
  - 📁 lib/
    
    📄 auth-middleware.ts 1.1 KB
    
    📄 jwt.ts 758 B
  - 📁 public/
    
    📄 skill.md 941 B
- 📁 nextjs-prisma/
  - 📁 app/
    
    📁 api/
    
    📁 agents/
    
    📁 register/
    
    📄 route.ts 2.7 KB
  - 📁 lib/
    
    📄 jwt.ts 507 B
    
    📄 prisma.ts 348 B
  - 📁 prisma/
    
    📄 schema.prisma 960 B
- 📁 python-fastapi/
  - 📁 routers/
    
    📄 __init__.py 0 B
    
    📄 agents.py 2.1 KB
    
    📄 users.py 1.6 KB
  - 📁 static/
    
    📄 skill.md 482 B
  - 📄 auth.py 2.1 KB
  - 📄 main.py 901 B
  - 📄 requirements.txt 83 B
- 📁 python-flask/
  - 📁 static/
    
    📄 skill.md 478 B
  - 📄 app.py 4.5 KB
  - 📄 requirements.txt 40 B
- 📁 ruby/
  - 📁 public/
    
    📄 skill.md 399 B
  - 📄 app.rb 4.3 KB
  - 📄 Gemfile 122 B
📁 templates/
- 📄 login-page.html 7.2 KB
- 📄 skill-template.md 2.5 KB
📄 CLAUDE.md 2.9 KB
📄 README.md 9.0 KB
📄 SKILL.md 2.7 KB

SKILL.md

---
name: swarm-auth-example
description: Reference implementation showing how to add agent sign-in/sign-up to any software tool. Demonstrates dual authentication (human + agent), SKILL.md creation, and ClawHub publishing.
version: 1.0.0
metadata:
  openclaw:
    emoji: "\U0001F510"
    requires:
      bins:
        - curl
---

# What this skill does

- Teaches agents how to implement dual authentication (human + agent) in any project
- Provides registration endpoints that return JWT tokens for agent authentication
- Serves a SKILL.md file via HTTP so other agents can discover and use your tool
- Supports publishing skills to ClawHub for public discovery

# When to use it

Use this skill when you need to:
- **Add agent authentication** to an existing web application
- **Create a SKILL.md** file for your tool so agents can use it
- **Implement dual login** with Human and Agent tabs
- **Publish a skill** to ClawHub

Keywords: "agent auth", "agent sign up", "skill.md", "clawhub publish", "dual login", "agent registration"

# Tools it uses

- **HTTP/REST API** - Registration and authentication endpoints
- **JWT** - Token-based authentication for both humans and agents
- **curl** - Agents use curl to download skill.md and register

# Procedure

## 1. Download the reference implementation

```bash
curl -s https://raw.githubusercontent.com/your-org/swarm-auth/main/SKILL.md
```

## 2. Choose your framework

Available examples:
- **Next.js** (TypeScript + React)
- **Express.js** (TypeScript)
- **FastAPI** (Python)
- **Flask** (Python)

## 3. Implement the agent registration endpoint

The endpoint must:
1. Accept POST requests without authentication
2. Receive agent name, capabilities, and optional metadata
3. Generate a unique agent ID and JWT token
4. Return the token so the agent can authenticate future requests

## 4. Create your SKILL.md

Your SKILL.md must include:
- YAML frontmatter (name, description, version)
- Registration curl command
- API reference with all endpoints
- Authentication instructions
- Examples of common workflows

## 5. Serve the SKILL.md publicly

Place it in your app's public directory:
- Next.js: `public/skill.md`
- Express: `app.use(express.static('public'))`
- FastAPI: `StaticFiles(directory="static")`
- Flask: `static/skill.md`

# Output format

Agent registration response:
```json
{
  "agent_id": "unique-id",
  "api_token": "Bearer eyJhbG...",
  "status": "registered"
}
```

# Safety / Constraints

1. Registration endpoint must be public (no auth) but rate-limited
2. Always validate agent input (name length, capabilities format)
3. Never expose internal tokens or secrets in SKILL.md
4. Block SSRF in webhook URLs (no localhost, private IPs)
5. JWT tokens should expire (recommended: 30 days)

Comments 0

Latest | Hot

Please login before commenting.

No comments yet. Be the first one!

swarm-auth-example

Directory Structure

SKILL.md

Report

Notice