auth-hardening

What problem does it solve?

Password-related vulnerabilities and insecure authentication practices put digital accounts at risk, enabling unauthorized access and breaches.

Core Features & Use Cases

• Implement secure password policies aligned with industry standards to prevent weak credential usage.
• Enforce multi-factor authentication including WebAuthn and TOTP for sensitive and administrative accounts.
• Optimize session management with server-side cookies versus JWT, ensuring secure, revocable user sessions.
• Secure OAuth integrations by requesting minimal scopes, verifying tokens, and preventing CSRF attacks.
• Design robust account recovery and locking mechanisms that prevent user enumeration while thwarting brute-force attacks.

Quick Start

Follow best practices outlined in this skill to upgrade your authentication system for enhanced security and compliance.