skills.rest
junaid-ali-ruk
junaid-ali-rukCOMMUNITY
Explore all skills by this author →
GitHub

auth-implementation-patterns

Implement JWT, OAuth2, session, and RBAC authentication patterns for web APIs.

Updated Feb 4, 2026
Search Tags:#authorization#RBAC#APIs#sessions#JWT#OAuth2#authenticate
One-click install
npx skills add https://github.com/junaid-ali-ruk/auto-linkedin --skill auth-implementation-patterns-junaid-ali-ruk
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: auth-implementation-patterns
Source: https://github.com/junaid-ali-ruk/auto-linkedin/tree/main/.gemini/skills/auth-implementation-patterns
Command: npx skills add https://github.com/junaid-ali-ruk/auto-linkedin --skill auth-implementation-patterns-junaid-ali-ruk

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

Master authentication and authorization patterns including JWT, OAuth2, session management, and RBAC to build secure, scalable access control systems. Use when implementing auth systems, securing APIs, or debugging security issues.

Core Features & Use Cases

  • JWT-based authentication, token management, and refresh flows
  • OAuth2/OpenID Connect integration, social login, and SSO
  • Session-based authentication for server-rendered apps
  • Role-Based Access Control (RBAC) and granular permissions
  • Security best practices, threat modeling, and secure defaults
  • Debugging authentication and authorization issues across services

Quick Start

Choose an auth pattern (JWT, OAuth2, or session) and integrate the provided patterns and code samples into your API to enable secure authentication and authorization.

Frequently Asked Questions about auth-implementation-patterns

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement JWT authentication and refresh token flows in a web API?▼

JWT authentication is implemented by issuing signed tokens upon login and verifying them in API middleware. This Skill provides canonical code snippets for JWT token management, secure refresh flows, and middleware integration across REST and GraphQL services.

What is the best way to set up Role-Based Access Control (RBAC) and permissions?▼

Role-Based Access Control (RBAC) restricts API access by assigning permissions to user roles. This Skill provides structured guidance and practical code samples for implementing granular RBAC permission models and access control checks in web applications.

How does OAuth2 and OpenID Connect integration work for single sign-on?▼

OAuth2 and OpenID Connect enable single sign-on by delegating authentication to an external provider. This Skill offers integration patterns and best practices for adding social login and SSO to your applications using OAuth2 protocols.

When should I use session-based authentication instead of JWT for my app?▼

Session-based authentication is typically preferred for server-rendered apps where session state is stored server-side. This Skill outlines when to apply session-based auth versus JWT and OAuth2 patterns based on your application architecture.

Can I use these authorization patterns to secure both REST and GraphQL APIs?▼

Yes, these authorization patterns apply to both REST and GraphQL services. The Skill includes practical middleware examples and token handling techniques designed to facilitate secure access control integration across different API architectures.

What security best practices should I follow when debugging authentication issues?▼

Debugging authentication issues requires following security best practices like secure defaults and threat modeling. This Skill provides structured guidance for identifying and resolving auth failures across services while maintaining secure access control.

Related Skills

Explore More Software Engineering Skills→
aayushsoamaayushsoam
1

backend-patterns

Standardize Node.js backend patterns for REST and GraphQL APIs.

Community
Advanced
sAkuraOfficialsAkuraOfficial

better-auth-security-best-practices

Configure Better Auth security with rate limiting, CSRF protection, and secure sessions.

Community
Advanced
diegoknskdiegoknsk

security

Configures JWT authentication, secret handling, rate limiting for APIs.

Community
Advanced
elcokiinelcokiin

convex-setup-auth

Configure authentication providers and identity mapping in Convex backend applications.

Community
Advanced