auth-implementation-patterns-review

Analyze authentication and authorization code for misconfigurations and non-compliance.

Updated Jan 26, 2026

Search Tags:#authorization #authentication #RBAC #session-management #JWT #OAuth2 #security-review

Ready to run

npx skills add https://github.com/kristovatlas/claude-sec-skills --skill auth-implementation-patterns-review

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: auth-implementation-patterns-review
Source: https://github.com/kristovatlas/claude-sec-skills/tree/main/skills/auth-implementation-patterns
Command: npx skills add https://github.com/kristovatlas/claude-sec-skills --skill auth-implementation-patterns-review

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill helps teams identify and fix insecure authentication and authorization implementations by aligning code with industry-standard patterns and best practices across JWT, OAuth2, session management, and RBAC.

Core Features & Use Cases

JWT-based authentication patterns and token validation
Session management and lifecycle design (cookies, refresh tokens, and CSRF considerations)
OAuth2/OpenID Connect flows and social login integration
Role-based access control (RBAC) and permission-based access control
Debugging and hardening API security, audits, and rapid remediation

Quick Start

Review the auth module in your codebase with focus areas: token handling, session management, and access policies.

Frequently Asked Questions about auth-implementation-patterns-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I review JWT authentication patterns for security misconfigurations?▼

To review JWT authentication patterns for security misconfigurations, analyze token validation logic, secure token handling, and proper lifecycle management to detect non-compliance with industry-standard security patterns.

How do I implement secure session management and refresh token lifecycles?▼

Secure session management and refresh token lifecycles are implemented by analyzing cookie configurations, refresh token rotation, and CSRF considerations to enforce proper lifecycle design and harden API security.

Does this auth review cover OAuth2 and OpenID Connect flows?▼

Yes, this auth review covers OAuth2 and OpenID Connect flows, analyzing social login integrations and protocol implementations to detect misconfigurations and enforce industry-standard authorization patterns.

What is the best way to audit Role-Based Access Control (RBAC) in a GraphQL API?▼

The best way to audit Role-Based Access Control (RBAC) in a GraphQL API is to analyze access control designs and permission mappings to detect non-compliant patterns and ensure proper authorization enforcement.

How do I fix insecure REST API authentication and authorization code?▼

To fix insecure REST API authentication and authorization code, align your implementations with industry-standard patterns across token handling, session management, and access policies for rapid remediation and auditable security reviews.

When do I need a dedicated authorization pattern review for my API?▼

You need a dedicated authorization pattern review for your API when hardening security, debugging access control issues, or preparing for audits to ensure compliance with secure token handling and RBAC standards.