skills.rest
Fandry96
Fandry96COMMUNITY
Explore all skills by this author →
GitHub

auth-implementation-patterns

Design JWT, OAuth2, and session-based authentication with RBAC and policy enforcement.

27|5|Updated Apr 3, 2026
Search Tags:#authorization#authentication#jwt#rbac#oauth2#security-patterns
One-click install
npx skills add https://github.com/Fandry96/k3-agentic-skills --skill auth-implementation-patterns-fandry96
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: auth-implementation-patterns
Source: https://github.com/Fandry96/k3-agentic-skills/tree/main/skills/auth-implementation-patterns
Command: npx skills add https://github.com/Fandry96/k3-agentic-skills --skill auth-implementation-patterns-fandry96

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Build secure, scalable authentication and authorization systems using industry-standard patterns and modern best practices.

Core Features & Use Cases

  • Pattern catalogs for authentication strategies (session-based, JWT, OAuth2/OpenID Connect) and token lifecycle management.
  • Authorization models including RBAC and permission-based access control with policy enforcement.
  • Guidance on threat modeling, secrets storage, auditing, and secure integration across REST and GraphQL APIs.

Quick Start

Review the Implementation Playbook to identify the patterns that fit your project and begin applying them to your codebase.

Frequently Asked Questions about auth-implementation-patterns

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is the best way to set up RBAC and policy enforcement for API authorization?▼

Set up RBAC by defining role hierarchies and permission-based access control models. This Skill guides you through applying policy enforcement points across your APIs to ensure only authorized users access protected resources.

How does OAuth2 and OpenID Connect compare to session-based authentication strategies?▼

OAuth2 and OpenID Connect enable delegated access and federated identity, whereas session-based authentication relies on server-side state. This Skill provides pattern catalogs to choose and implement the strategy that fits your architecture.

Do I need threat modeling and secret management for authentication systems?▼

Yes, threat modeling and secret management are required for secure authentication. This Skill guides you through identifying security threats, securely storing credentials, and implementing auditing to protect your system.

Can I use these authentication patterns across both REST and GraphQL APIs?▼

Yes, these authentication patterns apply across both REST and GraphQL APIs. The Skill provides guidance on secure integration, ensuring consistent authorization and policy enforcement regardless of your API architecture.

Related Skills

Explore More Software Engineering Skills→
jinwoonghongjinwoonghong

moai-domain-backend

Design REST or GraphQL APIs with authentication and database integration.

Community
Advanced
lDuanglDuang

better-auth-security-best-practices

Configure Better Auth deployments with rate limiting, CSRF protection, and audit logging.

Community
Advanced
camilooscargbaptistacamilooscargbaptista
7

api-gateway-patterns

Design API gateway architectures with rate limiting, authentication, routing, and circuit breaking.

Community
Intermediate
HeadyAIHeadyAI
1

heady-identity-loom

Design federated identity systems with privacy-preserving authentication and cross-org SSO.

Official
Advanced