auth-expert

Secure JWT authentication involves generating signed access tokens for user payloads. This Skill provides patterns for secure token generation, password hashing with bcrypt, and managing login flows safely.

Setting up RBAC requires defining granular permissions for different user roles. This Skill provides enforcement patterns to manage user permissions effectively and ensure authorized access to specific resources.

OAuth 2.0 session management secures user logins by handling token issuance and validation. This Skill guides you through setting up secure login flows and managing API access tokens.

Common authorization anti-patterns include improper token management and weak password hashing. This Skill highlights security best practices and provides a checklist to avoid pitfalls like insecure bcrypt implementation.

Yes, bcrypt is fully supported for password hashing alongside JWT token management. This integration ensures passwords are securely encrypted before generating JWT access tokens for user sessions.

JWT security vulnerabilities often stem from weak token generation patterns or improper session handling. This Skill helps resolve security issues by providing secure JWT generation patterns and best practices.