auth-implementation-patterns

To implement JWT authentication, use provided TypeScript code examples for generating and verifying tokens within your Express.js application. This secures user login systems by validating signed JSON Web Tokens.

Session-based auth relies on server-stored session identifiers, while OAuth2 provides secure delegated access via token flows. This Skill covers both authentication strategies to address different application scaling and integration requirements.

To set up Role-Based Access Control (RBAC), apply the provided permission-based checks and resource ownership verification patterns to protect API endpoints. This restricts access to authorized user roles strictly.

Security best practices for password hashing and cookie management involve implementing secure cookie handling and strong password hashing algorithms. These patterns prevent common vulnerabilities and protect user credentials effectively.

You should use OAuth2 flows instead of JWT when you need secure third-party delegated access or OpenID Connect integration. JWT is better suited for stateless API token verification within your own application.