skills.rest
hvngroup
hvngroupCOMMUNITY
Explore all skills by this author →
Website𝕏@hvngroupGitHub

auth-expert

Implements JWT and OAuth 2.0 authentication with RBAC, session management, and secure credential handling.

Updated Aug 23, 2026
Search Tags:#jwt#rbac#session-management#auth#oauth2#password-security
One-click install
npx skills add https://github.com/hvngroup/directus_b2b_crm --skill auth-expert-hvngroup
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: auth-expert
Source: https://github.com/hvngroup/directus_b2b_crm/tree/main/.agent/skills/auth-expert
Command: npx skills add https://github.com/hvngroup/directus_b2b_crm --skill auth-expert-hvngroup

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Authentication and authorization can be complex to implement securely across modern applications. This skill consolidates best practices for token-based authentication, session management, and fine-grained access control.

Core Features & Use Cases

  • JWT-based authentication and token lifecycle management
  • OAuth 2.0 flows and secure integration patterns
  • Role-based access control (RBAC) and policy enforcement
  • Password security best practices and credential handling

Quick Start

Configure your app to use JWT-based authentication or OAuth2 with RBAC and validate tokens on protected routes.

Frequently Asked Questions about auth-expert

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement JWT authentication and manage the token lifecycle in web applications?▼

JWT authentication involves issuing tokens upon login and validating them on protected routes. Token lifecycle management covers token expiration, refresh tokens, and secure storage in httpOnly cookies to prevent unauthorized access.

What's the best way to set up OAuth 2.0 flows and RBAC for API access control?▼

OAuth 2.0 flows secure API access by delegating authorization, while RBAC enforces permissions based on user roles. Integrating them involves validating OAuth tokens and applying role-based permission checks to restrict access to specific resources.

How should I handle password hashing and secure credential storage for user authentication?▼

Password hashing uses one-way algorithms to protect credentials at rest. Secure credential handling requires strong hashing practices, salting, and storing authentication data securely to prevent exposure during data breaches.

Can I use session management with JWT for enterprise systems?▼

Session management with JWT is suitable for enterprise systems. It balances stateless token validation with session revocation strategies, ensuring scalable access control across distributed applications and APIs.

Why should I store secure tokens in httpOnly cookies for web application security?▼

Storing secure tokens in httpOnly cookies prevents client-side scripts from accessing them. This mitigates cross-site scripting (XSS) attacks, ensuring robust access control and protecting the token lifecycle.

Does RBAC work with OAuth 2.0 for fine-grained permission checks?▼

RBAC works with OAuth 2.0 by mapping OAuth scopes to user roles. This enables fine-grained permission checks, allowing enterprise systems to enforce access control policies based on authenticated user roles.

Related Skills

Explore More Software Engineering Skills→
Noisemaker111Noisemaker111

convex-http-actions

Define HTTP endpoints in Convex apps for webhooks and external API routing.

Community
Advanced
caffeinelabscaffeinelabs

extension-authorization

Enforce role-based access control in Motoko canisters and React front-ends.

Official
Advanced
TwuanMinnTwuanMinn

api-security-best-practices

Implement authentication, authorization, input validation, rate limiting, and TLS for API endpoints.

Community
Advanced
modu-aimodu-ai
1.2k

moai-platform-auth0

Implement Auth0-based SSO, SAML, and OIDC with multi-tenant authorization workflows.

Official
Advanced