auth-implementation

Implement JWT, OAuth2, RBAC, and API key authentication with security hardening.

Updated Feb 3, 2026

Search Tags:#authorization #security #authentication #jwt #rbac #oauth2 #api-keys

Ready to run

npx skills add https://github.com/dhruvinrsoni/agentskills-garden --skill auth-implementation

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: auth-implementation
Source: https://github.com/dhruvinrsoni/agentskills-garden/tree/main/skills/60-security/auth-implementation
Command: npx skills add https://github.com/dhruvinrsoni/agentskills-garden --skill auth-implementation

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill addresses the critical need to implement robust authentication and authorization mechanisms, protecting applications and user data from unauthorized access.

Core Features & Use Cases

Strategy Implementation: Supports JWT, OAuth2/OIDC, API keys, and session-based authentication.
Access Control: Enables Role-Based Access Control (RBAC) for granular permission management.
Security Hardening: Includes measures like password hashing, rate limiting, and CSRF protection.
Use Case: Secure a new web application by implementing JWT-based authentication for SPAs, defining user roles like 'admin' and 'editor', and ensuring all auth endpoints are rate-limited.

Quick Start

Implement JWT authentication for a new SPA, defining roles and securing endpoints.

Frequently Asked Questions about auth-implementation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I implement JWT authentication for a new web application?▼

OAuth2 strategy is suited for delegated third-party access, while API keys are typically used for service-to-service authentication. Both methods manage credential validation and access control to protect application endpoints.

What is the best way to set up Role-Based Access Control (RBAC)?▼

RBAC is set up by defining granular user roles such as admin or editor, then applying access control middleware to enforce permissions. This approach ensures only authorized users interact with specific resources.

What security hardening measures do I need for authentication endpoints?▼

Security hardening for authentication endpoints requires implementing credential hashing, rate limiting to prevent brute force attacks, and CSRF protection. These measures collectively prevent unauthorized access and secure user data.

Can I use session-based authentication instead of JWT for my application?▼

Yes, session-based authentication is supported alongside JWT, OAuth2, and API keys. You can choose session management depending on your architecture, such as traditional server-rendered applications versus single page applications.