5-step workflowauth qa sessions security login guided-flow QA

Auth Flow QA

Dedicated auth testing: signup, login, sessions, guards, reset, and the edge cases that expose fake auth.

Run this as a guided flow on Flows — verify gates and recovery prompts included →

Flows@flows12d ago

0 runs0 forks0

Chain

Inputs

Step 1

flow-auth-flow-qa-1-test-the-signup-surface

Step 2

flow-auth-flow-qa-2-test-the-login-surface

Step 3

flow-auth-flow-qa-3-test-the-session-lifecycle

Step 4

flow-auth-flow-qa-4-test-guards-at-both-layers

Step 5

flow-auth-flow-qa-5-test-recovery-and-close

Final output

Workflow inputs

No inputs required — hit Run to stream each step in order.

Each step streams from its model and feeds the next. BYOK — you pay your provider directly. Add a key in Settings if a step needs one.

Step 1 · Account creation is the front door - test it including the ugly inputs.

flow-auth-flow-qa-1-test-the-signup-surface

Claude Sonnet 4.6→ {{step_1}}

Awaiting upstream steps…

Step 2 · Login must pass friends and stop strangers - test both.

flow-auth-flow-qa-2-test-the-login-surface

Claude Sonnet 4.6→ {{step_2}}

Awaiting upstream steps…

Step 3 · Sessions are where fake auth dies - test persistence hard.

flow-auth-flow-qa-3-test-the-session-lifecycle

Claude Sonnet 4.6→ {{step_3}}

Awaiting upstream steps…

Step 4 · Routes and APIs must both reject the logged-out - verify by attack.

flow-auth-flow-qa-4-test-guards-at-both-layers

Claude Sonnet 4.6→ {{step_4}}

Awaiting upstream steps…

Step 5 · Reset flows and the final edge sweep complete the audit.

flow-auth-flow-qa-5-test-recovery-and-close

Claude Sonnet 4.6→ {{step_5}}

Awaiting upstream steps…

About this workflow

Dedicated auth testing: signup, login, sessions, guards, reset, and the edge cases that expose fake auth.

What happens when you run it

1
Account creation is the front door - test it including the ugly inputs.
Runs flow-auth-flow-qa-1-test-the-signup-surface on Claude Sonnet 4.6
2
Login must pass friends and stop strangers - test both.
Runs flow-auth-flow-qa-2-test-the-login-surface on Claude Sonnet 4.6
3
Sessions are where fake auth dies - test persistence hard.
Runs flow-auth-flow-qa-3-test-the-session-lifecycle on Claude Sonnet 4.6
4
Routes and APIs must both reject the logged-out - verify by attack.
Runs flow-auth-flow-qa-4-test-guards-at-both-layers on Claude Sonnet 4.6
5
Reset flows and the final edge sweep complete the audit.
Runs flow-auth-flow-qa-5-test-recovery-and-close on Claude Sonnet 4.6

Best for

•Recurring tasks you currently copy-paste between tools.
•When a single prompt isn't enough — you need a chain where output(n) feeds prompt(n+1).
•Fork and adapt if your inputs differ materially from the author's use case.

Models used

Claude Sonnet 4.6