Implement OAuth, JWT, and API key authentication for web applications.
npx skills add https://github.com/sabyunrepo/IaaS --skill arch-auth
Please help me install this Agent Skill. Skill: arch-auth Source: https://github.com/sabyunrepo/IaaS/tree/main/.claude/skills/arch-auth Command: npx skills add https://github.com/sabyunrepo/IaaS --skill arch-auth
This Skill provides a comprehensive guide and implementation details for building a robust, multi-layered authentication system using OAuth, JWT, and API Keys.
Implement the OAuth flow for Google and GitHub authentication using the provided backend and frontend guidance.
High-intent search queries and answers about installing and using this skill.
Implement OAuth and JWT authentication by setting up Google or GitHub OAuth flows for login, then issuing JWTs with HS256 and 24h expiry for secure API access. Backend middleware handles token validation.
Securely store JWTs on the frontend using URL fragments and memory storage. This approach avoids persistent browser storage vulnerabilities while maintaining access to tokens for API requests.
Generate API keys using SHA-256 hashing for secure storage. Apply rate limiting middleware to control API usage, ensuring only authorized requests access sensitive data and functionalities.
Yes, you can combine OAuth and API keys in a dual-authentication system. OAuth handles user login via Google or GitHub, while API keys with SHA-256 hashing secure programmatic API access.
JWT validation middleware verifies HS256-signed tokens by checking the signature and expiration. It intercepts API requests, validates the 24h expiry token, and authorizes access to protected routes.
Use API keys for programmatic or machine-to-machine API access with rate limiting. Use OAuth for interactive user login flows through providers like Google and GitHub to authenticate human users.
edfentonConfigure NextAuth.js authentication with OAuth providers for MERN apps.
JNZader-VaultImplement Go HTTP routes and middleware with Chi v5.
briannadoubtEnforce authentication, authorization, rate limiting, and request validation for Trebuchet actors.
KILWA73Audit JWT handling, Argon2 hashing, and session management in authentication flows.
