auth-implementation-patterns

Implement JWT authentication in Express.js by using the jsonwebtoken dependency for token generation and validation middleware. This Skill provides TypeScript code examples to secure API endpoints, ensuring only authorized users with valid tokens can access sensitive data.

Set up OAuth2 in Node.js by integrating the Passport library with specific strategies like passport-google-oauth20 and passport-github2. This Skill demonstrates how to configure these strategies to handle external provider authentication securely within your application.

Implement Role-Based Access Control (RBAC) by defining user roles and permissions, then enforcing them through Express middleware. This Skill provides patterns for authorization, including permission-based control and resource ownership checks to protect sensitive API data.

Yes, the authentication patterns support rate limiting using express-rate-limit and rate-limit-redis. It integrates with Redis via connect-redis and express-session to manage distributed rate limiting and secure session storage effectively.

Redis is required if you need distributed session management and scalable rate limiting. The Skill uses connect-redis and express-session to store session data in Redis, ensuring persistent and secure user sessions across multiple server instances.

Securely hash passwords using the bcrypt dependency and validate input data using zod schemas. This Skill addresses security best practices by detailing robust password hashing techniques and strict input validation to prevent common vulnerabilities.