Design and implement JWT-based authentication with RBAC and secure token storage.
npx skills add https://github.com/duynhne/monitoring --skill auth-expert-duynhne
Please help me install this Agent Skill. Skill: auth-expert Source: https://github.com/duynhne/monitoring/tree/main/.agent/skills/auth-expert Command: npx skills add https://github.com/duynhne/monitoring --skill auth-expert-duynhne
This Skill provides a framework of best practices and reusable patterns to design and implement robust authentication and authorization in software systems, reducing security risk and development time.
Create a secure login endpoint that issues a signed JWT and stores it in an httpOnly cookie; configure token rotation and RBAC checks.
High-intent search queries and answers about installing and using this skill.
JWT authentication with httpOnly cookies involves issuing a signed token upon login and storing it in an httpOnly secure cookie. You configure short-lived access tokens, a refresh mechanism, and proper token rotation to maintain secure sessions.
OAuth 2.0 token exchange flows are best set up by following secure integration patterns for third-party providers. This involves establishing secure token exchange flows and applying concrete best practices to mitigate threats during the authorization process.
RBAC for API access control works by assigning roles to users and checking those roles against required permissions before granting access. It enforces access control across multiple components, ensuring users only reach resources their role permits.
Yes, this approach applies to web applications, APIs, and services requiring secure user identity. It enforces token handling, secure storage, RBAC, and threat mitigation requirements across multiple components within these environments.
Token rotation and refresh handling are needed to maintain secure sessions without requiring frequent logins. By issuing short-lived access tokens and utilizing a refresh mechanism, you mitigate the risk of token theft and enforce secure token management.
JWT-based authentication limitations include managing token expiration and secure storage on the client side. You must implement proper refresh handling and threat mitigation patterns to prevent unauthorized token reuse across your application components.
JhabbigConfigure mutual TLS policies for Kubernetes and service mesh environments.
Arnutt-NImplement Role-Based Access Control for multi-role authorization in HR-IMS.
igbuendImplement rate limiting and throttling security patterns for API endpoints.
Heyo-ComputerAuthenticate Heyo platform users by managing JWT tokens and API key exchanges.
