auth-patterns

Standardize JWT, OAuth 2.0, and RBAC authentication across web applications.

2|Updated Jun 14, 2026
One-click install
npx skills add https://github.com/eng-vmessiah/project-development-skill --skill auth-patterns-eng-vmessiah
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: auth-patterns
Source: https://github.com/eng-vmessiah/project-development-skill/tree/main/skills/auth-patterns
Command: npx skills add https://github.com/eng-vmessiah/project-development-skill --skill auth-patterns-eng-vmessiah

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires jose, passlib, authlib, sqlalchemy, and includes references (resource) components.

What problem does it solve?

This skill addresses the complexity of securing modern applications by providing standardized, battle-tested patterns for authentication and authorization, preventing common security vulnerabilities.

Core Features & Use Cases

  • Multi-Method Support: Provides implementation patterns for JWT, OAuth 2.0, Session-based auth, and API keys.
  • Access Control: Includes logic for Role-Based Access Control (RBAC) and granular permission checking.
  • Security Hardening: Offers best practices for password hashing, token management, and secure endpoint protection.

Quick Start

Use the auth-patterns skill to generate a secure JWT authentication guard for my FastAPI endpoint.

Frequently Asked Questions about auth-patterns

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement JWT authentication in my web application?

To implement JWT authentication, this skill provides standardized patterns for secure token lifecycle management and endpoint protection. It covers token generation, validation, and secure API access using the jose and authlib libraries.

What's the best way to set up Role-Based Access Control (RBAC) for an API?

The best way to set up RBAC is by applying standardized authorization logic that checks granular user permissions before granting access. This skill provides implementation patterns for integrating RBAC directly into your API endpoints.

Does this authentication approach support OAuth 2.0 and session-based login?

Yes, this authentication approach supports OAuth 2.0, session-based login, and API keys. It standardizes implementation across these diverse security protocols to prevent common vulnerabilities in modern applications.

How should I hash passwords securely using passlib?

To hash passwords securely, you should follow security hardening best practices like bcrypt password hashing. This skill ensures compliance by standardizing secure password management through the passlib library.

Can I use these authorization patterns with a SQLAlchemy database?

Yes, you can use these authorization patterns with SQLAlchemy. The skill relies on SQLAlchemy as a core dependency to manage database sessions and user identity verification during the authentication process.