auth-rbac-scaffold

Secure JWT validation middleware verifies token signatures, expiry, issuer, and audience claims before allowing endpoint access. This Skill generates secure middleware code patterns that prevent broken authentication vulnerabilities like algorithm confusion across multiple programming languages.

Role-based access control for an API restricts endpoint access based on user roles or permissions. This Skill provides implementation patterns for both flat role-based and permission-based authorization models to prevent broken function level authorization flaws.

RBAC authorization middleware prevents OWASP API5:2023 by enforcing strict function level authorization checks at the endpoint layer. This Skill generates secure middleware that validates user roles and permissions, blocking unauthorized access to specific API endpoints.

Yes, this RBAC scaffold pattern works with Node.js Express. The Skill generates secure JWT validation and role-based access control middleware specifically tailored for Express applications, ensuring only authorized users access specific endpoints.

Common authentication vulnerabilities to avoid include JWT algorithm confusion and insecure token storage. This Skill identifies these anti-patterns and provides secure code examples for token issuance and validation to address OWASP API2:2023 broken authentication risks.