auth-implementation-patterns

Implement JWT, OAuth2, RBAC, and session-based authentication patterns.

Updated Feb 26, 2026

Search Tags:#authorization #security #authentication #jwt #rbac #oauth2

Ready to run

npx skills add https://github.com/TheGreatL/KanbanBoard --skill auth-implementation-patterns-thegreatl

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: auth-implementation-patterns
Source: https://github.com/TheGreatL/KanbanBoard/tree/main/.agents/skills/auth-implementation-patterns
Command: npx skills add https://github.com/TheGreatL/KanbanBoard --skill auth-implementation-patterns-thegreatl

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill provides comprehensive solutions for implementing secure and scalable authentication and authorization systems, protecting your applications and user data.

Core Features & Use Cases

Authentication Strategies: Master session-based, JWT, and OAuth2/OpenID Connect.
Authorization Models: Implement Role-Based Access Control (RBAC), permission-based checks, and resource ownership validation.
Security Best Practices: Learn to secure passwords, implement rate limiting, and avoid common pitfalls.
Use Case: Secure a new web application by implementing JWT-based authentication with refresh tokens and role-based access control for different user tiers.

Quick Start

Implement JWT authentication with a refresh token flow for a new API endpoint.

Frequently Asked Questions about auth-implementation-patterns

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I implement JWT authentication with refresh tokens for a web application?▼

Implement JWT authentication by issuing short-lived access tokens alongside long-lived refresh tokens. You use the refresh token to securely obtain new access tokens without requiring the user to re-enter credentials.

What is the best way to set up Role-Based Access Control (RBAC) and permission checks?▼

Role-Based Access Control (RBAC) restricts system access by assigning specific permissions to defined user roles rather than individual users. You implement permission-based checks and resource ownership validation to ensure users only access authorized data.

How does OAuth2 and OpenID Connect work for application authentication?▼

OAuth2 and OpenID Connect work by delegating authentication to an external provider, allowing users to log in using existing credentials from another service. You implement this to enable secure third-party access without handling raw passwords directly.

What security best practices should I follow for password hashing and rate limiting?▼

Security best practices require hashing passwords using robust cryptographic algorithms before storage to protect user data. You also implement rate limiting to restrict excessive authentication attempts, preventing automated brute force attacks against your application endpoints.

When do I need session management versus JWT for secure authentication?▼

You need session management and JWT for different authentication contexts. Session-based authentication stores user state server-side, whereas JWT provides stateless authentication tokens, making it ideal for scalable APIs and distributed microservices architectures.