skills.rest
luokai25
luokai25COMMUNITY
Explore all skills by this author →
GitHub

auth-expert

Implement OAuth2, OIDC, JWT, and MFA authentication protocols.

Updated May 4, 2026
Search Tags:#authorization#authentication#JWT#SSO#OAuth2#MFA#OIDC
One-click install
npx skills add https://github.com/luokai25/luo-ai-skills-market --skill auth-expert-luokai25
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: auth-expert
Source: https://github.com/luokai25/luo-ai-skills-market/tree/main/06-security-and-auth%20%28by%20Luo%20Kai%29/01-authentication-authorization/auth-expert
Command: npx skills add https://github.com/luokai25/luo-ai-skills-market --skill auth-expert-luokai25

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires express, jsonwebtoken, passport, passport-oauth2, passport-jwt, passport-mfa, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill addresses complex authentication and authorization challenges, offering solutions for implementing and managing secure access controls across various platforms and systems.

Core Features & Use Cases

  • OAuth2, OIDC, JWT: Implements and manages OAuth2, OpenID Connect, and JSON Web Tokens for secure authentication and authorization.
  • Session Management: Securely manages user sessions with features like sliding expiry and session fixation prevention.
  • RBAC/ABAC: Provides role-based and attribute-based access control to enforce fine-grained access policies.
  • MFA: Integrates multi-factor authentication to enhance security.
  • SSO: Implements Single Sign-On solutions for streamlined user access.
  • Use Case: For a large enterprise looking to implement a robust authentication system that supports OAuth2, JWT, and MFA, this Skill can be a valuable tool.

Quick Start

Use the auth-expert skill to implement OAuth2 with PKCE flow for your application.

Frequently Asked Questions about auth-expert

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement OAuth2 with PKCE flow for my application?▼

Implementing OAuth2 with PKCE flow involves configuring the authentication protocol to securely exchange authorization codes for tokens without exposing client secrets. This Skill provides the logic to set up this secure access control flow.

What is the difference between RBAC and ABAC for session management?▼

RBAC enforces access control based on user roles, while ABAC evaluates attributes like user properties, resource types, and environment conditions. This Skill provides logic to implement both for fine-grained access policies.

Does this authentication solution support integrating MFA with JWT?▼

Yes, the authentication solution supports integrating Multi-Factor Authentication (MFA) alongside JSON Web Tokens (JWT). It manages secure access controls by combining token-based authentication with additional verification factors.

How to prevent session fixation when using Express and Passport?▼

Preventing session fixation with Express and Passport involves regenerating session identifiers after successful authentication. This Skill manages user sessions securely, mitigating fixation vulnerabilities through proper session handling.

Can I use this to set up Single Sign-On (SSO) using OIDC?▼

Yes, you can set up Single Sign-On (SSO) using OpenID Connect (OIDC). This Skill implements and manages OIDC protocols to streamline user access across multiple platforms and systems within an enterprise.

Why should I use JWT instead of server-side sessions for my enterprise app?▼

Using JWT provides stateless authentication, reducing database lookups for session validation compared to server-side sessions. This Skill manages JWTs to handle secure access control and sliding expiry for enterprise applications.

Related Skills

Explore More Software Engineering Skills→
El3tar-cmdEl3tar-cmd
18

clerk-auth

Provision Clerk credentials, configure proxy middleware, and install dependencies for web and Expo apps.

Community
Advanced
gentleeduckgentleeduck
8

duck-iam

Define type-safe RBAC and ABAC access control with a declarative builder pattern.

Official
Advanced
mattwoodcomattwoodco
3

auth

Implement user authentication and authorization with better-auth and Drizzle ORM.

Community
Advanced
MassimilianoPiliMassimilianoPili

oauth2-proxy-patterns

Implement OAuth2 Proxy dual-instance deployment with Keycloak OIDC and nginx auth_request.

Community
Advanced