auth

Implementing authentication and authorization in a TypeScript SaaS application involves selecting a strategy like JWT or database sessions, managing credentials with Argon2 hashing, and applying middleware for route protection. This Skill provides the necessary implementation patterns and security best practices, including OAuth integration and role-based access control (RBAC).

The best way to manage user sessions and passwords for a new SaaS product is using a hybrid approach with `better-auth` for session management and Argon2 for secure password hashing. This setup supports both JWT and database sessions while ensuring robust credential security.

Setting up role-based access control (RBAC) and protecting routes requires applying middleware for backend route protection and integrating frontend security patterns in frameworks like React and Next.js. This ensures permission checks are enforced and only authorized users access specific features.

Yes, this auth implementation guide supports OAuth integration and demonstrates frontend security patterns specifically for React and Next.js applications. It details how to secure frontend routes and manage session cookies alongside backend access control mechanisms.

When implementing JWT and database sessions, follow security best practices like rate limiting, audit logging, CSRF protection, and secure cookie handling. These measures prevent unauthorized access and ensure robust session management across your SaaS application.