Implement JWT, OAuth 2.0, RBAC, and session management for web applications.
npx skills add https://github.com/hung14vnn/MedManagerFE --skill auth-expert-hung14vnn
Please help me install this Agent Skill. Skill: auth-expert Source: https://github.com/hung14vnn/MedManagerFE/tree/main/.agent/skills/auth-expert Command: npx skills add https://github.com/hung14vnn/MedManagerFE --skill auth-expert-hung14vnn
Authentication and authorization expert specializing in JWT, OAuth 2.0, session management, RBAC, and password security. Use for auth implementation, token management, or security issues.
Implement a secure JWT-based authentication flow with refresh tokens in a Node.js API.
High-intent search queries and answers about installing and using this skill.
JWT-based authentication is implemented by issuing short-lived access tokens and long-lived refresh tokens, validating signatures upon each API request, and rotating refresh tokens to maintain secure session control across backend boundaries.
Role-based access control is best set up by defining least-privilege roles, mapping them to specific API endpoints, and enforcing permission checks during token validation to ensure users only access authorized resources.
OAuth 2.0 integration works by delegating authentication to an external provider, obtaining access tokens via authorization flows, and managing local sessions to control access across API boundaries without handling direct credential storage.
Password hashing best practices involve using strong, adaptive hashing algorithms to securely store credentials, never storing plaintext passwords, and validating credentials against stored hashes during the authentication process.
Token rotation and validation are needed whenever managing JWT lifecycles in production-grade services to prevent unauthorized access, ensure tokens are refreshed securely, and validate token integrity on every request.
Yes, this approach covers secure authentication and authorization patterns across both API backends and front-end clients, enabling token handling, session control, and access control for full-stack web applications.
anxiety135790Configure GitHub authentication for git, SSH, gh CLI, and API access.
salmanabdurrahmanAnalyze Supabase REST API endpoints, RLS policies, and authentication configurations for security vulnerabilities.
maruakshayEnforce server-side parameter bounds, rate limits, and SSRF-safe URL handling on model-serving endpoints.
martiirivassImplement JWT authentication with access and refresh tokens in Node.js applications.
