skillhub

accessible-authentication✓ تایید شده

Use when reviewing sign-in, sign-up, MFA, CAPTCHA, recovery, and re-auth flows. Evaluate the full authentication path, including error handling and backup methods, not just the primary login form.

74از ۱۰۰
۷۲.۸k
★ ستاره
۰
↓ دانلود
۲
◉ بازدید

// نصب مهارت

نصب مهارت

مهارت‌ها کدهای شخص ثالث از مخازن عمومی GitHub هستند. SkillHub الگوهای مخرب شناخته‌شده را اسکن می‌کند اما نمی‌تواند امنیت را تضمین کند. قبل از نصب، کد منبع را بررسی کنید.

نصب سراسری (سطح کاربر):

npx skillhub install thedaviddias/Front-End-Checklist/accessible-authentication

نصب در پروژه فعلی:

npx skillhub install thedaviddias/Front-End-Checklist/accessible-authentication --project

skill.install.customTargetHelp

npx skillhub install thedaviddias/Front-End-Checklist/accessible-authentication --target-dir /path/to/skills

مسیر پیشنهادی: ~/.claude/skills/accessible-authentication/

بررسی هوش مصنوعی

74
از ۱۰۰
کیفیت دستورالعمل72
دقت توضیحات90
کاربردی بودن76
صحت فنی55

Scored 74 for providing a clear, actionable workflow for auditing authentication accessibility with excellent trigger description. Deductions for non-standard YAML metadata and lack of error handling tables or decision trees for complex auth edge cases.

betamoderatefrontend-devsaccessibility-specialistsqa-engineersaccessibility-auditauth-reviewwcag-compliancefrontend-review
بررسی‌شده توسط review-skill-gateway(z-ai/glm-5.2) در تاریخ ۱۴۰۵/۵/۱۱

محتوای SKILL.md

---
name: accessible-authentication
description: "Use when reviewing sign-in, sign-up, MFA, CAPTCHA, recovery, and re-auth flows. Evaluate the full authentication path, including error handling and backup methods, not just the primary login form."
metadata:
  category: accessibility
  priority: high
  difficulty: advanced
  estimatedTime: "25"
  source: frontendchecklist.io
  url: https://frontendchecklist.io/en/rules/accessibility/accessible-authentication
---

# Provide accessible authentication methods

Authentication often becomes the first hard blocker for users with cognitive, motor, low-vision, or speech-input needs. If sign-in, MFA, or recovery relies on memorization or transcription with no assisted path, the user may be locked out before they can access the product at all.

## Quick Reference

- Do not block paste or password managers in login and recovery flows
- Prefer passkeys, magic links, device approval, or password-manager-friendly flows
- Support OTP autofill and paste with appropriate semantics such as `autocomplete="one-time-code"`
- Avoid CAPTCHA or secondary checks that require memorizing or transcribing information without an alternative

## Check

Review login, MFA, password reset, and account recovery for accessible authentication problems. Flag blocked paste, password-manager hostility, manual transcription requirements, inaccessible OTP handling, and CAPTCHA or knowledge checks without a compliant alternative.

## Fix

Add password-manager-friendly fields, support paste and OTP autofill, and provide at least one authentication path that does not depend on a cognitive function test.

## Explain

Explain WCAG Accessible Authentication, why memorization and transcription are barriers, and how passkeys, password managers, OTP autofill, and device approval improve both accessibility and security.

## Code Review

Review authentication pages, MFA steps, recovery flows, and security controls related to Provide accessible authentication methods. Flag exact steps that require memorization, transcription, blocked assistive tooling, or inaccessible fallback paths.

---

For full implementation details, code examples, and framework-specific guidance,
see `references/rule.md`.

Rule page: https://frontendchecklist.io/en/rules/accessibility/accessible-authentication

مجوز

در منبع این مهارت هیچ مجوزی اعلام نشده است.

متن کامل مجوز در مخزن منبع در دسترس است.

مشاهدهٔ مجوز در مخزن منبع — نسخهٔ منتشرشده در آن‌جا مرجع است.