skills.rest
VanhPoker
VanhPokerCOMMUNITY
Explore all skills by this author →
GitHub

auth-expert

Implement JWT, OAuth 2.0, RBAC, and session management for web app authentication.

Updated Jan 17, 2026
Search Tags:#authorization#security#jwt#rbac#oauth2#authenticate
One-click install
npx skills add https://github.com/VanhPoker/VietNamLookmaxing --skill auth-expert-vanhpoker
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: auth-expert
Source: https://github.com/VanhPoker/VietNamLookmaxing/tree/main/.agent/skills/auth-expert
Command: npx skills add https://github.com/VanhPoker/VietNamLookmaxing --skill auth-expert-vanhpoker

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Authentication and authorization are foundational security concerns for modern web apps; teams often struggle to implement secure, scalable access control across APIs, frontends, and services.

Core Features & Use Cases

  • JWT-based authentication and session management to balance stateless APIs with user sessions
  • OAuth 2.0 flows for delegated access and integration with identity providers
  • RBAC with per-resource permissions to enforce least privilege
  • Password hashing and secure token handling along with best-practice patterns
  • Guidance for secure integration, threat mitigation, and review of common pitfalls

Quick Start

Configure your application to authenticate users with JWTs, enforce RBAC, and integrate OAuth 2.0 flows for secure access control.

Frequently Asked Questions about auth-expert

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement JWT authentication and session management for stateless APIs?▼

JWT authentication issues stateless tokens to verify user identity, while session management tracks active users. This approach balances scalable API design with secure user sessions across frontend and backend components.

What is the best way to enforce RBAC with per-resource permissions?▼

RBAC with per-resource permissions enforces least privilege by assigning roles to users and restricting access to specific resources. This authorization method limits exposure of sensitive data and reduces security risks.

How do I integrate OAuth 2.0 flows for delegated access in my web application?▼

OAuth 2.0 flows enable delegated access by allowing your application to request scoped tokens from identity providers. This mechanism securely integrates third-party access without exposing user credentials.

Can I apply this to secure password hashing and token handling across my stack?▼

Password hashing and secure token handling apply across API, frontend, and backend components. Implementing these best-practice patterns mitigates threats and prevents common security misconfigurations.

Does this approach support both API and frontend session management?▼

Yes, JWT and OAuth 2.0 support both API and frontend session management. They balance stateless API requests with secure user sessions, ensuring consistent authentication and authorization across your web application.

What are common security pitfalls when implementing authentication and authorization?▼

Common security pitfalls include improper password hashing, misconfigured token handling, and failing to enforce least privilege. Applying code quality checks and guardrails reduces these security risks and misconfigurations.

Related Skills

Explore More Software Engineering Skills→
alexsandrocruzalexsandrocruz

openiddict-authorization

Configure OpenIddict OAuth 2.0 authentication and authorization in ABP applications.

Community
Advanced
qazuorqazuor

security-audit

Perform security audits covering OWASP Top 10, threat modeling, and code review.

Community
Advanced
Arnutt-NArnutt-N

rbac-guard

Implement Role-Based Access Control for multi-role authorization in HR-IMS.

Community
Advanced
nirholasnirholas
71

identity

Manage user identities across OAuth providers and devices.

Community
Advanced