Implement JWT, OAuth 2.0, and RBAC authentication patterns for web apps.
npx skills add https://github.com/phuxp17/demo_web --skill auth-expert-phuxp17
Please help me install this Agent Skill. Skill: auth-expert Source: https://github.com/phuxp17/demo_web/tree/main/.agent/skills/auth-expert Command: npx skills add https://github.com/phuxp17/demo_web --skill auth-expert-phuxp17
This Skill helps teams implement robust authentication and authorization controls, reducing security risks and development toil by providing best-practice patterns for token handling, session management, and access control.
Provide a secure login endpoint with JWT, configure httpOnly cookies, and implement RBAC checks on protected routes.
High-intent search queries and answers about installing and using this skill.
JWT authentication requires issuing and verifying tokens using libraries like jsonwebtoken, configuring httpOnly cookies for secure session storage, and applying RBAC checks on protected routes to control access.
OAuth 2.0 integration provides secure delegation and consent flows using standard client tooling, allowing backend services to securely manage user authorization without handling raw credentials directly.
RBAC role-based access control restricts resource access by assigning permissions to roles, enforcing access policies on protected routes to ensure users only interact with authorized endpoints.
Yes, secure password storage and verification require standard libraries like bcrypt for hashing, alongside jsonwebtoken for token management and OAuth client tooling to implement robust authentication controls.
Yes, these authentication and authorization patterns apply directly to security reviews across backend services, helping teams validate API design, user session controls, and access management implementations.
Token management breaks without proper access control because JWT verification, password hashing, and RBAC permissions must align with httpOnly cookie session configurations to maintain secure backend service operations.
crytligConfigure Azure API Management policies for token control and content safety.
MinhmiceDevelop and maintain backend API endpoints with validation and security checks.
cenjieSecure REST APIs with authentication, rate limiting, CORS, and input validation.
themadorgManage JWT authentication, refresh tokens, and server-side sessions in Go.
