auth-rbac-scaffold

What problem does it solve?

This Skill helps developers implement robust authentication and role-based access control (RBAC) mechanisms, preventing common vulnerabilities like broken authentication and authorization flaws.

Core Features & Use Cases

• Secure JWT Handling: Provides patterns for validating JWTs with essential claims (signature, expiry, issuer, audience).
• RBAC Implementation: Offers guidance on both flat role-based and permission-based authorization models.
• Vulnerability Prevention: Details common auth vulnerabilities (e.g., algorithm confusion, insecure token storage) and how to avoid them.
• Use Case: When building a new API, use this Skill to generate secure middleware for verifying user tokens and ensuring only authorized users can access specific endpoints based on their roles or permissions.

Quick Start

Use the auth-rbac-scaffold skill to generate secure JWT validation middleware for a Node.js Express application.